Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/D10C45397CB5A725D9826AF5F60F5707B1965F67.mft
File:                     D10C45397CB5A725D9826AF5F60F5707B1965F67.mft (raw, json)
Hash identifier:          PxP8Xz7NGwUVg8xUJf7nGbcXuwSTwblWwNU7BcMJNE4=
Subject key identifier:   A8:69:50:67:2D:B6:80:AB:17:70:A6:18:9F:C4:5B:FE:B9:40:1A:42
Authority key identifier: D1:0C:45:39:7C:B5:A7:25:D9:82:6A:F5:F6:0F:57:07:B1:96:5F:67
Certificate issuer:       /CN=D10C45397CB5A725D9826AF5F60F5707B1965F67
Certificate serial:       4D2450736D6996468EFA78B85ADF02D3342F53BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D10C45397CB5A725D9826AF5F60F5707B1965F67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/D10C45397CB5A725D9826AF5F60F5707B1965F67.mft
Manifest number:          52
Signing time:             Tue 15 Oct 2024 05:40:58 +0000
Manifest this update:     Tue 15 Oct 2024 05:35:58 +0000
Manifest next update:     Wed 16 Oct 2024 09:09:58 +0000
Files and hashes:         1: 323830343a363832383a3a2f33322d3332203d3e20323639363732.roa (hash: wAupQ6eRWCS2V/HkSRFyNBPBNxv40BWEHuKTEs2KvbA=)
                          2: D10C45397CB5A725D9826AF5F60F5707B1965F67.crl (hash: DK2dHMwQ8M5tz65QKYWzK7aUaTk69pOgKPEdMcaAYZ8=)
                          3: 34352e3139312e3133322e302f32322d3234203d3e20323639363732.roa (hash: 7lnzDnEfTulQ8VhltPBdtSO3sFOh+MWHmrGxluQQV9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:24:50:73:6d:69:96:46:8e:fa:78:b8:5a:df:02:d3:34:2f:53:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10C45397CB5A725D9826AF5F60F5707B1965F67
        Validity
            Not Before: Oct 15 05:35:58 2024 GMT
            Not After : Oct 16 09:09:58 2024 GMT
        Subject: CN=A86950672DB680AB1770A6189FC45BFEB9401A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:55:66:7e:f2:9a:72:44:e7:75:26:b9:cd:
                    f8:bf:e7:91:d7:99:bb:d2:dd:87:80:03:60:b8:e4:
                    a7:fe:44:56:ba:8b:62:5c:a0:08:bd:04:a7:88:28:
                    94:9d:0c:36:42:3b:77:23:f6:23:00:fb:a5:67:3b:
                    2a:36:fc:2c:2e:ba:15:03:52:81:cd:81:22:67:f3:
                    47:01:dc:fd:66:61:a8:f2:12:85:98:3d:6d:21:e8:
                    34:1c:32:4c:a8:df:fe:fb:cc:a2:70:8b:09:15:27:
                    fe:62:93:f2:48:fd:e8:81:58:27:ee:40:48:e7:f1:
                    71:0d:13:3e:03:19:99:50:86:c9:69:a4:15:cf:42:
                    fa:90:e0:90:bf:63:4e:27:ed:c0:ce:39:f2:03:8f:
                    64:63:da:3d:e4:18:7b:e3:f9:74:4b:5c:ce:b1:03:
                    a5:fb:cc:ef:ca:40:4f:b6:18:ed:18:70:b7:1d:1a:
                    a3:85:85:5a:20:f7:88:5c:a8:68:3f:78:33:55:4a:
                    bb:95:b5:3b:e6:d4:36:a8:50:bb:04:10:22:04:ed:
                    3e:e1:d3:af:f8:95:d7:f4:e9:5b:a8:60:8b:e5:5a:
                    99:f9:47:22:d5:47:2f:c5:39:a6:6d:dd:c0:45:5e:
                    f4:04:d6:f8:b3:f4:5c:6a:56:b4:9f:13:24:b2:3b:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:50:67:2D:B6:80:AB:17:70:A6:18:9F:C4:5B:FE:B9:40:1A:42
            X509v3 Authority Key Identifier:
                keyid:D1:0C:45:39:7C:B5:A7:25:D9:82:6A:F5:F6:0F:57:07:B1:96:5F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/D10C45397CB5A725D9826AF5F60F5707B1965F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D10C45397CB5A725D9826AF5F60F5707B1965F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE9Y8HDoRCCXDmoqkYt2z2jw9cfuVgzzBc2uYoV9PZMa/0/D10C45397CB5A725D9826AF5F60F5707B1965F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:1c:d3:9e:3e:6e:8f:83:16:1c:97:39:93:f5:34:0c:c1:
         14:6d:ce:11:02:c5:a0:3c:1b:2a:3c:88:0e:7c:2f:d0:e1:4f:
         77:62:ec:4f:6e:11:7d:b1:ff:25:87:b1:11:23:7c:6f:27:23:
         38:ec:38:a8:d3:4b:44:52:76:2b:25:79:92:b4:be:a9:3c:60:
         fb:f2:88:38:dd:4a:02:2d:62:54:93:4c:83:57:2b:46:5f:12:
         64:7a:b8:36:c9:ff:1e:a5:ea:f3:4b:d2:78:73:58:19:13:44:
         c4:cc:af:2d:3a:d5:59:be:98:a5:5b:d5:ae:3f:1a:f8:c0:e0:
         b6:eb:90:56:11:48:43:ac:59:1b:4d:0e:8a:80:30:25:db:2b:
         87:b7:36:d0:68:0f:81:d1:83:44:6e:96:66:a8:5a:f2:ae:61:
         ef:92:02:71:af:d7:4f:38:1b:52:97:aa:b1:ca:db:31:26:03:
         f8:62:8a:93:2c:9c:00:54:f4:8d:ab:6a:1b:7f:1f:93:b5:d2:
         be:1d:7c:81:65:8e:c5:bb:0c:d1:6d:ee:14:5a:e0:58:16:60:
         a9:c5:fa:85:22:62:66:4f:a0:41:02:76:9e:87:e0:31:6b:fb:
         36:94:91:9e:27:08:6f:8f:f9:4d:03:92:1c:04:7b:9a:d0:6f:
         d3:3a:da:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTSRQc21plkaO+ni4Wt8C0zQvU78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwQzQ1Mzk3Q0I1QTcyNUQ5ODI2QUY1RjYwRjU3MDdC
MTk2NUY2NzAeFw0yNDEwMTUwNTM1NThaFw0yNDEwMTYwOTA5NThaMDMxMTAvBgNV
BAMTKEE4Njk1MDY3MkRCNjgwQUIxNzcwQTYxODlGQzQ1QkZFQjk0MDFBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8lVmfvKackTndSa5zfi/55HX
mbvS3YeAA2C45Kf+RFa6i2JcoAi9BKeIKJSdDDZCO3cj9iMA+6VnOyo2/CwuuhUD
UoHNgSJn80cB3P1mYajyEoWYPW0h6DQcMkyo3/77zKJwiwkVJ/5ik/JI/eiBWCfu
QEjn8XENEz4DGZlQhslppBXPQvqQ4JC/Y04n7cDOOfIDj2Rj2j3kGHvj+XRLXM6x
A6X7zO/KQE+2GO0YcLcdGqOFhVog94hcqGg/eDNVSruVtTvm1DaoULsEECIE7T7h
06/4ldf06VuoYIvlWpn5RyLVRy/FOaZt3cBFXvQE1viz9FxqVrSfEySyO/8jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqGlQZy22gKsXcKYYn8Rb/rlAGkIwHwYDVR0j
BBgwFoAU0QxFOXy1pyXZgmr19g9XB7GWX2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBa
TWEvMC9EMTBDNDUzOTdDQjVBNzI1RDk4MjZBRjVGNjBGNTcwN0IxOTY1RjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMEM0NTM5N0NCNUE3MjVE
OTgyNkFGNUY2MEY1NzA3QjE5NjVGNjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REU5WThIRG9SQ0NYRG1vcWtZdDJ6Mmp3OWNmdVZnenpCYzJ1WW9WOVBaTWEvMC9E
MTBDNDUzOTdDQjVBNzI1RDk4MjZBRjVGNjBGNTcwN0IxOTY1RjY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJNMc054+bo+DFhyXOZP1NAzBFG3OEQLFoDwbKjyIDnwv0OFPd2LsT24RfbH/
JYexESN8bycjOOw4qNNLRFJ2KyV5krS+qTxg+/KION1KAi1iVJNMg1crRl8SZHq4
Nsn/HqXq80vSeHNYGRNExMyvLTrVWb6YpVvVrj8a+MDgtuuQVhFIQ6xZG00OioAw
Jdsrh7c20GgPgdGDRG6WZqha8q5h75ICca/XTzgbUpeqscrbMSYD+GKKkyycAFT0
jatqG38fk7XSvh18gWWOxbsM0W3uFFrgWBZgqcX6hSJiZk+gQQJ2nofgMWv7NpSR
nicIb4/5TQOSHAR7mtBv0zraIA==
-----END CERTIFICATE-----