Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.mft
File:                     91CF2C28848523B526C03E87C0083EF41A98971D.mft (raw, json)
Hash identifier:          NhzUH5noR3zX5TNw78IkgosdxfPQoetRmAK1umn87RA=
Subject key identifier:   DA:4B:C7:EA:FF:82:F8:3E:8D:F4:85:C7:07:A5:05:2D:D1:7A:D4:8C
Authority key identifier: 91:CF:2C:28:84:85:23:B5:26:C0:3E:87:C0:08:3E:F4:1A:98:97:1D
Certificate issuer:       /CN=91CF2C28848523B526C03E87C0083EF41A98971D
Certificate serial:       542ED7FA96BFE77F84EACC57EE66727D0EACAA92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CF2C28848523B526C03E87C0083EF41A98971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.mft
Manifest number:          0118
Signing time:             Tue 29 Oct 2024 17:20:00 +0000
Manifest this update:     Tue 29 Oct 2024 17:15:00 +0000
Manifest next update:     Wed 30 Oct 2024 19:24:00 +0000
Files and hashes:         1: 91CF2C28848523B526C03E87C0083EF41A98971D.crl (hash: G2wcdd9xMsr4Mm4+IVH3L1iIi68+rD8vlR5zX4mf05A=)
                          2: 323830343a366363343a3a2f33322d3336203d3e20323730343930.roa (hash: IjLRGOt3NQXUAP7zIFhxZkmvkuAvxOqeBwkLdtqleiY=)
                          3: 32342e3135322e39362e302f32322d3234203d3e20323730343930.roa (hash: Qie/DfuYOPzj7NdrWo+IJpj2MS7ewr8skg2st8Z5V5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2e:d7:fa:96:bf:e7:7f:84:ea:cc:57:ee:66:72:7d:0e:ac:aa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CF2C28848523B526C03E87C0083EF41A98971D
        Validity
            Not Before: Oct 29 17:15:00 2024 GMT
            Not After : Oct 30 19:24:00 2024 GMT
        Subject: CN=DA4BC7EAFF82F83E8DF485C707A5052DD17AD48C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:2e:91:1a:09:61:88:fd:e7:a8:0d:a0:f2:
                    f9:06:6d:89:8e:66:4a:29:45:4a:75:a0:44:f3:b1:
                    ad:34:e9:de:dc:ab:59:a7:50:84:c2:e7:60:ac:61:
                    61:89:92:4f:7a:b2:14:4e:c8:c3:b6:34:ef:d0:63:
                    2a:fb:c9:ab:1b:70:bd:2e:f2:fb:6d:7d:66:58:74:
                    23:be:30:bc:8e:a0:56:d2:15:26:c9:43:0a:75:cd:
                    f4:b6:8e:66:36:77:68:5f:12:07:bb:ee:b9:26:77:
                    11:ad:9d:dc:55:58:df:65:ef:e4:02:c7:8c:f5:df:
                    f3:d1:9c:87:1e:2c:56:4b:fe:36:78:42:35:13:1d:
                    ad:ce:5d:03:d9:1b:b7:41:da:c3:2b:46:80:ec:ff:
                    10:a3:9d:bc:39:65:bf:83:0b:ac:0f:83:b6:43:94:
                    65:0b:6e:b9:39:cd:2f:8e:f9:5f:73:4a:18:7c:e5:
                    69:a5:2f:00:11:f5:1e:ba:69:e9:eb:1f:75:20:12:
                    9e:51:05:17:e1:8d:c5:c8:b4:03:8f:f1:eb:0a:ee:
                    bb:9e:fe:1d:da:c1:67:92:9d:80:33:a0:1c:8b:b4:
                    5f:b3:fa:38:73:7b:a8:b4:e5:f8:f7:a8:d8:89:cd:
                    b0:24:41:ee:f0:1b:8c:e3:2c:e4:d1:fe:e6:77:72:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:C7:EA:FF:82:F8:3E:8D:F4:85:C7:07:A5:05:2D:D1:7A:D4:8C
            X509v3 Authority Key Identifier:
                keyid:91:CF:2C:28:84:85:23:B5:26:C0:3E:87:C0:08:3E:F4:1A:98:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CF2C28848523B526C03E87C0083EF41A98971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/1/91CF2C28848523B526C03E87C0083EF41A98971D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:68:13:ef:93:8a:52:b8:a4:16:19:6c:eb:a5:0e:c1:f8:
         e3:3e:e3:ca:3d:fe:98:88:ea:88:37:80:74:e1:45:60:7f:02:
         5a:2d:6d:bd:de:95:88:83:55:47:33:43:08:7f:1c:f0:7c:6a:
         b0:7d:2e:46:17:d8:f9:a6:63:06:3c:d3:3e:d1:0b:2a:27:d7:
         dd:a0:ac:43:95:4f:bb:78:69:ff:dd:25:f2:23:ff:6f:4e:61:
         ae:da:3b:01:1e:fb:26:7f:e6:3f:19:61:aa:ea:f8:af:9a:d2:
         13:99:e3:81:59:a1:e9:8f:fe:76:a6:0d:60:df:52:fe:71:fe:
         b8:16:09:7f:1f:e7:5b:22:89:9f:b7:be:71:0a:98:d8:0d:ba:
         40:b2:42:8e:87:43:5b:b7:08:51:57:d3:2e:52:fa:80:84:c9:
         41:57:4d:3e:49:55:29:b3:ea:1a:5a:15:0d:54:c1:ec:f8:46:
         45:4a:16:04:80:8f:c0:90:fd:cc:05:83:96:93:9a:47:79:1d:
         95:96:d4:99:8f:18:a2:9f:72:04:f1:36:74:47:e9:2a:da:4d:
         54:69:89:01:95:2b:cf:4c:db:6f:32:c7:36:e9:eb:be:6a:f2:
         44:5b:30:73:55:b0:8f:7c:76:9d:bb:ff:e4:2d:20:4f:00:32:
         ae:9f:84:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVC7X+pa/53+E6sxX7mZyfQ6sqpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDRjJDMjg4NDg1MjNCNTI2QzAzRTg3QzAwODNFRjQx
QTk4OTcxRDAeFw0yNDEwMjkxNzE1MDBaFw0yNDEwMzAxOTI0MDBaMDMxMTAvBgNV
BAMTKERBNEJDN0VBRkY4MkY4M0U4REY0ODVDNzA3QTUwNTJERDE3QUQ0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7S6RGglhiP3nqA2g8vkGbYmO
ZkopRUp1oETzsa006d7cq1mnUITC52CsYWGJkk96shROyMO2NO/QYyr7yasbcL0u
8vttfWZYdCO+MLyOoFbSFSbJQwp1zfS2jmY2d2hfEge77rkmdxGtndxVWN9l7+QC
x4z13/PRnIceLFZL/jZ4QjUTHa3OXQPZG7dB2sMrRoDs/xCjnbw5Zb+DC6wPg7ZD
lGULbrk5zS+O+V9zShh85WmlLwAR9R66aenrH3UgEp5RBRfhjcXItAOP8esK7rue
/h3awWeSnYAzoByLtF+z+jhze6i05fj3qNiJzbAkQe7wG4zjLOTR/uZ3cor1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2kvH6v+C+D6N9IXHB6UFLdF61IwwHwYDVR0j
BBgwFoAUkc8sKISFI7UmwD6HwAg+9BqYlx0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JzZmdpRnlXZ1JERDlZVU16QUZicFBKZ3NqWDJDRHhLZlhCZVR2a2V6
bTIvMS85MUNGMkMyODg0ODUyM0I1MjZDMDNFODdDMDA4M0VGNDFBOTg5NzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0YyQzI4ODQ4NTIzQjUy
NkMwM0U4N0MwMDgzRUY0MUE5ODk3MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3JzZmdpRnlXZ1JERDlZVU16QUZicFBKZ3NqWDJDRHhLZlhCZVR2a2V6bTIvMS85
MUNGMkMyODg0ODUyM0I1MjZDMDNFODdDMDA4M0VGNDFBOTg5NzFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaK5oE++TilK4pBYZbOulDsH44z7jyj3+mIjqiDeAdOFFYH8CWi1tvd6ViINV
RzNDCH8c8HxqsH0uRhfY+aZjBjzTPtELKifX3aCsQ5VPu3hp/90l8iP/b05hrto7
AR77Jn/mPxlhqur4r5rSE5njgVmh6Y/+dqYNYN9S/nH+uBYJfx/nWyKJn7e+cQqY
2A26QLJCjodDW7cIUVfTLlL6gITJQVdNPklVKbPqGloVDVTB7PhGRUoWBICPwJD9
zAWDlpOaR3kdlZbUmY8Yop9yBPE2dEfpKtpNVGmJAZUrz0zbbzLHNunrvmryRFsw
c1Wwj3x2nbv/5C0gTwAyrp+EkQ==
-----END CERTIFICATE-----