Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.mft
File:                     891C68CB622D162913FED257108AE6F48235EE16.mft (raw, json)
Hash identifier:          sQrZMQrAl4BllM0CD/NDxhhwrND9koctFaYmYyBa4r0=
Subject key identifier:   AA:74:C0:18:D5:85:C9:8F:E9:47:98:07:52:0D:CD:E3:7F:5A:D1:D1
Authority key identifier: 89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16
Certificate issuer:       /CN=891C68CB622D162913FED257108AE6F48235EE16
Certificate serial:       4D2F972C00052392C78B08135C91C38669912974
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.mft
Manifest number:          32
Signing time:             Thu 09 May 2024 22:29:02 +0000
Manifest this update:     Thu 09 May 2024 22:24:02 +0000
Manifest next update:     Fri 10 May 2024 22:57:02 +0000
Files and hashes:         1: 323830343a346331303a3a2f33322d3336203d3e20323637333437.roa (hash: aIPEosH75TTTaI3WNTp9jEkUhL1FwVzt2OeWgI5nIis=)
                          2: 891C68CB622D162913FED257108AE6F48235EE16.crl (hash: mJTRt70oogoOxg43YK9JGSpkEEzHs6LEG5HbicWB9Fs=)
                          3: 34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (hash: 5la+f51S9f9p0lOpvHuVzHQV9gVDp88+cQxpSOWJEg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2f:97:2c:00:05:23:92:c7:8b:08:13:5c:91:c3:86:69:91:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891C68CB622D162913FED257108AE6F48235EE16
        Validity
            Not Before: May  9 22:24:02 2024 GMT
            Not After : May 10 22:57:02 2024 GMT
        Subject: CN=AA74C018D585C98FE9479807520DCDE37F5AD1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:b6:a7:77:14:14:3e:b6:01:aa:f0:82:82:
                    af:64:b7:3f:b2:cc:cc:15:9b:a9:18:5d:8b:27:77:
                    c5:9d:f2:37:07:a3:b9:59:e3:fa:c8:05:49:04:ee:
                    95:67:cb:9c:7e:91:32:14:f3:dd:26:1d:a0:fd:92:
                    d2:26:e9:b9:fd:6d:1d:fc:b6:be:12:1f:e7:ec:58:
                    2b:92:a3:8f:68:a2:39:b6:08:3b:a9:c4:f4:ff:d2:
                    16:f1:fb:ea:3b:62:34:1f:1a:66:0e:4e:bc:a5:9f:
                    ed:a2:c9:86:4c:e0:b5:b6:a6:e9:fd:6c:57:8f:c5:
                    df:a1:10:c3:0c:31:96:06:d0:a3:56:5d:ea:eb:c9:
                    ab:b7:b0:b6:c7:0c:73:2d:1e:9e:ee:71:03:25:6d:
                    8e:0f:15:15:43:3c:e0:02:87:53:58:55:cd:65:c0:
                    e7:ee:20:3c:6b:bf:c7:7c:69:ae:a3:9f:b2:6d:b3:
                    7e:e5:a0:19:ef:45:e6:65:f6:f5:31:82:5b:57:81:
                    db:54:b6:53:7e:53:c0:a6:79:3f:72:1a:71:d0:b2:
                    de:20:46:36:cb:34:26:6e:06:28:4e:8a:e1:08:db:
                    39:6f:bb:23:ba:23:92:a3:4b:09:fa:db:ab:4e:fb:
                    84:2f:be:2f:67:11:e2:60:aa:ba:c3:86:67:44:77:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:74:C0:18:D5:85:C9:8F:E9:47:98:07:52:0D:CD:E3:7F:5A:D1:D1
            X509v3 Authority Key Identifier:
                keyid:89:1C:68:CB:62:2D:16:29:13:FE:D2:57:10:8A:E6:F4:82:35:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891C68CB622D162913FED257108AE6F48235EE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/1/891C68CB622D162913FED257108AE6F48235EE16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3b:72:9b:dc:a3:08:55:df:fd:6b:47:3c:72:36:50:25:dc:
         71:05:30:7a:4a:b8:04:c1:0f:04:3a:c7:3a:0a:79:b3:0c:cf:
         92:ce:9b:13:b7:7d:1c:3b:c7:64:73:ef:30:c6:95:3a:4b:d5:
         c8:75:57:c5:69:7d:e2:e1:b2:66:c7:c2:e6:23:57:92:f4:93:
         fb:28:18:d0:c7:df:b1:86:1f:e7:c6:5c:d2:fb:08:c2:04:ef:
         9a:18:72:b6:78:de:f4:3c:34:a8:d1:2a:29:7c:e3:78:73:e8:
         42:20:38:3e:11:e5:ab:76:20:ef:69:62:48:5c:2e:d3:18:af:
         93:33:44:14:f5:cb:59:a9:61:46:dc:6e:89:f7:12:99:85:66:
         ef:57:50:d9:8f:c0:5f:dc:c6:d0:a2:d9:a4:d6:a0:18:25:6b:
         14:bc:57:92:f9:9c:ac:ba:19:d8:f1:8a:dc:21:89:9e:04:73:
         ab:34:84:40:2d:bf:69:d1:30:94:cd:f8:f5:05:d2:3f:56:b9:
         ba:ae:b4:e5:f3:f9:53:3d:67:bf:9b:8a:63:62:c4:2e:60:04:
         9b:1f:8a:45:c4:dd:c3:19:32:11:7e:56:4c:07:a0:43:5c:73:
         5b:db:88:a3:ae:1d:2a:e4:bc:25:f5:13:3c:ae:d5:f3:0c:c5:
         ef:27:5a:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTS+XLAAFI5LHiwgTXJHDhmmRKXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkxQzY4Q0I2MjJEMTYyOTEzRkVEMjU3MTA4QUU2RjQ4
MjM1RUUxNjAeFw0yNDA1MDkyMjI0MDJaFw0yNDA1MTAyMjU3MDJaMDMxMTAvBgNV
BAMTKEFBNzRDMDE4RDU4NUM5OEZFOTQ3OTgwNzUyMERDREUzN0Y1QUQxRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHbandxQUPrYBqvCCgq9ktz+y
zMwVm6kYXYsnd8Wd8jcHo7lZ4/rIBUkE7pVny5x+kTIU890mHaD9ktIm6bn9bR38
tr4SH+fsWCuSo49oojm2CDupxPT/0hbx++o7YjQfGmYOTryln+2iyYZM4LW2pun9
bFePxd+hEMMMMZYG0KNWXerryau3sLbHDHMtHp7ucQMlbY4PFRVDPOACh1NYVc1l
wOfuIDxrv8d8aa6jn7Jts37loBnvReZl9vUxgltXgdtUtlN+U8CmeT9yGnHQst4g
RjbLNCZuBihOiuEI2zlvuyO6I5KjSwn626tO+4Qvvi9nEeJgqrrDhmdEdwkFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqnTAGNWFyY/pR5gHUg3N439a0dEwHwYDVR0j
BBgwFoAUiRxoy2ItFikT/tJXEIrm9II17hYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFC
aTYvMS84OTFDNjhDQjYyMkQxNjI5MTNGRUQyNTcxMDhBRTZGNDgyMzVFRTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MUM2OENCNjIyRDE2Mjkx
M0ZFRDI1NzEwOEFFNkY0ODIzNUVFMTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFCaTYvMS84
OTFDNjhDQjYyMkQxNjI5MTNGRUQyNTcxMDhBRTZGNDgyMzVFRTE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOztym9yjCFXf/WtHPHI2UCXccQUwekq4BMEPBDrHOgp5swzPks6bE7d9HDvH
ZHPvMMaVOkvVyHVXxWl94uGyZsfC5iNXkvST+ygY0MffsYYf58Zc0vsIwgTvmhhy
tnje9Dw0qNEqKXzjeHPoQiA4PhHlq3Yg72liSFwu0xivkzNEFPXLWalhRtxuifcS
mYVm71dQ2Y/AX9zG0KLZpNagGCVrFLxXkvmcrLoZ2PGK3CGJngRzqzSEQC2/adEw
lM349QXSP1a5uq605fP5Uz1nv5uKY2LELmAEmx+KRcTdwxkyEX5WTAegQ1xzW9uI
o64dKuS8JfUTPK7V8wzF7yda4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org