Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.mft
File:                     133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.mft (raw, json)
Hash identifier:          oUFFChvPAKxADEPTJjuJOOqqNywy+p/1mfvZFrc3t0Q=
Subject key identifier:   38:D5:54:2A:09:C3:8E:35:6C:C0:10:DC:F4:71:77:5C:54:DC:01:14
Authority key identifier: 13:3D:8E:9C:C1:08:F2:C1:30:C9:6B:B9:EC:79:C8:E9:6B:BD:3E:4A
Certificate issuer:       /CN=133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A
Certificate serial:       0A43B995C78DACD370E66C66D82FF4BD1F6B234C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.mft
Manifest number:          3B
Signing time:             Tue 05 Dec 2023 03:47:25 +0000
Manifest this update:     Tue 05 Dec 2023 03:42:25 +0000
Manifest next update:     Wed 06 Dec 2023 07:09:25 +0000
Files and hashes:         1: 323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (hash: TNN24MYSdPZh0dDiRJN3aAl7BkxGwjqu1rZyz8jL5zM=)
                          2: 133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.crl (hash: B572eRjA+kREKtwtVwNsltChqFduLIC1aAsX10Grrq8=)
                          3: 3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa (hash: poL3r19LR96oa8F9fI1BD5c/JJvQNde4QrYzAGWHgqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:43:b9:95:c7:8d:ac:d3:70:e6:6c:66:d8:2f:f4:bd:1f:6b:23:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A
        Validity
            Not Before: Dec  5 03:42:25 2023 GMT
            Not After : Dec  6 07:09:25 2023 GMT
        Subject: CN=38D5542A09C38E356CC010DCF471775C54DC0114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:1e:66:00:ef:d4:19:d4:32:b0:6b:10:e8:
                    05:58:e0:89:39:3b:b8:0e:32:63:83:c7:42:e9:cb:
                    8f:c6:b5:3f:17:4b:7f:38:d1:a1:f6:1b:e5:34:19:
                    22:07:1b:33:96:b5:b6:db:9b:f4:56:49:02:62:81:
                    4a:66:fe:12:ec:01:32:a8:e9:4c:c9:ae:91:ba:1f:
                    29:69:ff:73:58:f7:c5:42:33:e5:71:b2:f1:3d:59:
                    71:12:93:4a:a6:a9:5f:82:5a:41:56:4a:1c:e8:3e:
                    bd:c1:96:aa:06:6b:de:ae:78:c0:10:14:90:51:58:
                    32:90:8d:d6:70:ff:d6:2d:32:57:37:cf:b1:07:d9:
                    d7:82:1e:64:96:44:c5:38:15:9a:4b:7e:18:90:9b:
                    a0:43:dc:1f:b8:38:65:b2:97:c2:8c:f3:24:f6:16:
                    c2:89:a9:67:20:1d:8a:a9:8c:49:82:44:48:03:0d:
                    2d:a2:c2:6f:50:bf:98:59:53:c2:e1:d4:89:d5:22:
                    1b:b1:56:4f:7b:55:33:fb:02:7a:70:9b:80:e4:14:
                    39:75:ff:70:67:ef:88:2a:bc:40:97:ec:fd:bb:97:
                    48:05:61:6b:a4:09:62:14:cf:9a:74:8a:96:fb:97:
                    85:a3:17:6a:57:4d:3c:3f:55:ad:66:a4:f7:1e:6c:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D5:54:2A:09:C3:8E:35:6C:C0:10:DC:F4:71:77:5C:54:DC:01:14
            X509v3 Authority Key Identifier:
                keyid:13:3D:8E:9C:C1:08:F2:C1:30:C9:6B:B9:EC:79:C8:E9:6B:BD:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/133D8E9CC108F2C130C96BB9EC79C8E96BBD3E4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:12:52:b4:b8:d7:a5:a4:36:3d:bf:87:00:d5:ea:66:fa:76:
         73:56:da:3a:8b:99:ba:93:c5:69:9e:90:b7:ef:cc:7a:16:2a:
         4d:0f:a7:8b:74:c7:1c:01:77:10:6b:75:a5:ea:5f:e5:07:a6:
         33:86:40:4c:4e:3f:e7:df:92:d4:de:d2:e3:40:21:f8:c4:5e:
         6d:e1:9f:78:40:a4:a5:3b:de:66:1e:7c:8f:c7:c8:5c:9f:65:
         43:97:6c:44:af:84:33:38:14:71:fe:9d:76:40:e1:46:df:e8:
         29:db:ac:d8:b5:e2:28:cc:79:c8:b3:90:bc:b6:27:04:78:80:
         22:57:00:f7:18:f8:99:16:c3:b6:11:49:dc:6f:59:52:c2:9d:
         ea:59:28:49:7e:21:02:5f:97:a8:81:b5:75:9e:d4:05:6e:c7:
         19:07:4d:50:e5:d0:7e:3c:3b:91:88:61:32:d5:e2:24:59:13:
         0e:1f:16:6e:63:89:5c:45:9c:8e:56:d2:a2:a9:2a:06:56:7d:
         24:73:b3:6a:68:42:cf:33:ce:aa:19:93:16:31:b3:90:61:81:
         60:9a:2b:b6:2b:2f:2e:50:b6:9b:8a:76:a1:0b:db:e9:ea:d3:
         65:38:c1:0c:b3:4e:17:db:60:24:62:d8:21:b3:49:d4:35:1a:
         99:7c:9e:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCkO5lceNrNNw5mxm2C/0vR9rI0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMzRDhFOUNDMTA4RjJDMTMwQzk2QkI5RUM3OUM4RTk2
QkJEM0U0QTAeFw0yMzEyMDUwMzQyMjVaFw0yMzEyMDYwNzA5MjVaMDMxMTAvBgNV
BAMTKDM4RDU1NDJBMDlDMzhFMzU2Q0MwMTBEQ0Y0NzE3NzVDNTREQzAxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEh5mAO/UGdQysGsQ6AVY4Ik5
O7gOMmODx0Lpy4/GtT8XS3840aH2G+U0GSIHGzOWtbbbm/RWSQJigUpm/hLsATKo
6UzJrpG6Hylp/3NY98VCM+VxsvE9WXESk0qmqV+CWkFWShzoPr3BlqoGa96ueMAQ
FJBRWDKQjdZw/9YtMlc3z7EH2deCHmSWRMU4FZpLfhiQm6BD3B+4OGWyl8KM8yT2
FsKJqWcgHYqpjEmCREgDDS2iwm9Qv5hZU8Lh1InVIhuxVk97VTP7Anpwm4DkFDl1
/3Bn74gqvECX7P27l0gFYWukCWIUz5p0ipb7l4WjF2pXTTw/Va1mpPcebFIBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUONVUKgnDjjVswBDc9HF3XFTcARQwHwYDVR0j
BBgwFoAUEz2OnMEI8sEwyWu57HnI6Wu9PkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21nZ250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVK
OHUvMC8xMzNEOEU5Q0MxMDhGMkMxMzBDOTZCQjlFQzc5QzhFOTZCQkQzRTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzM0Q4RTlDQzEwOEYyQzEz
MEM5NkJCOUVDNzlDOEU5NkJCRDNFNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q21nZ250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVKOHUvMC8x
MzNEOEU5Q0MxMDhGMkMxMzBDOTZCQjlFQzc5QzhFOTZCQkQzRTRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuRJStLjXpaQ2Pb+HANXqZvp2c1baOouZupPFaZ6Qt+/MehYqTQ+ni3THHAF3
EGt1pepf5QemM4ZATE4/59+S1N7S40Ah+MRebeGfeECkpTveZh58j8fIXJ9lQ5ds
RK+EMzgUcf6ddkDhRt/oKdus2LXiKMx5yLOQvLYnBHiAIlcA9xj4mRbDthFJ3G9Z
UsKd6lkoSX4hAl+XqIG1dZ7UBW7HGQdNUOXQfjw7kYhhMtXiJFkTDh8WbmOJXEWc
jlbSoqkqBlZ9JHOzamhCzzPOqhmTFjGzkGGBYJortisvLlC2m4p2oQvb6erTZTjB
DLNOF9tgJGLYIbNJ1DUamXyeFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org