Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/922C457336D084107DC613735F8A82716CB7D071.mft
File:                     922C457336D084107DC613735F8A82716CB7D071.mft (raw, json)
Hash identifier:          oQXG5gk7+KoRzMbjb4dZi/rccAG3LNV+Lx6FexvTfLU=
Subject key identifier:   98:F3:F7:7A:59:F2:F9:A6:5A:61:02:73:F2:C5:B5:E8:01:C2:E7:9E
Authority key identifier: 92:2C:45:73:36:D0:84:10:7D:C6:13:73:5F:8A:82:71:6C:B7:D0:71
Certificate issuer:       /CN=922C457336D084107DC613735F8A82716CB7D071
Certificate serial:       34F14E883276084CBBC318638C9DCB6F3B22CBA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/922C457336D084107DC613735F8A82716CB7D071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/922C457336D084107DC613735F8A82716CB7D071.mft
Manifest number:          0420
Signing time:             Mon 15 Apr 2024 04:30:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:25:00 +0000
Manifest next update:     Tue 16 Apr 2024 05:06:00 +0000
Files and hashes:         1: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: 2zzADrXEpC2oRLf5ZMHu5gHos1K3/es0XU6st0Eyd5Q=)
                          2: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: bmxVbFvOYn7yHAXOsoep1mTXMnw/YWGywOK92mm6WSc=)
                          3: 922C457336D084107DC613735F8A82716CB7D071.crl (hash: 0m9kF3aY7+RjOQpH8abizURXhlGYMOZ8qTkE4SU1YdA=)
                          4: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: 0UuAstj/yppJazinwlTjKCUF1ICjIbSoWWW99+PG0lY=)
                          5: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: XZyTfmYtrreIu0H0n1RTWCO3nJrXf+pAADFPPx/Jv/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f1:4e:88:32:76:08:4c:bb:c3:18:63:8c:9d:cb:6f:3b:22:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922C457336D084107DC613735F8A82716CB7D071
        Validity
            Not Before: Apr 15 04:25:00 2024 GMT
            Not After : Apr 16 05:06:00 2024 GMT
        Subject: CN=98F3F77A59F2F9A65A610273F2C5B5E801C2E79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:de:61:75:cd:47:13:71:57:2a:ba:9a:90:
                    90:c7:91:58:4f:c0:de:5f:8e:c1:6c:e6:db:7a:66:
                    e8:26:19:94:89:24:1f:f3:d5:72:06:db:29:a9:35:
                    2f:35:22:68:6f:1c:b3:5e:b6:9e:83:00:1d:0b:e2:
                    a9:29:61:15:16:64:9a:7a:d3:57:6e:70:4f:14:00:
                    43:7c:d7:7d:73:b1:45:e5:87:d4:a8:69:ca:65:c4:
                    68:30:b6:ce:f9:77:45:a4:c4:32:80:78:67:ad:1b:
                    a6:11:3a:5f:b1:63:9a:65:ea:a8:2c:78:60:7d:7e:
                    f9:f2:42:a1:70:ed:e6:8c:ef:6e:ea:08:de:64:ff:
                    6b:88:6d:f0:0e:a0:b8:80:dc:29:ae:8c:1f:cd:51:
                    a9:51:58:3c:c2:d8:63:4d:8d:73:a4:ef:59:2c:db:
                    c7:67:6b:53:cb:11:9f:30:d3:97:a9:00:fb:19:20:
                    3a:3c:a0:c7:cb:de:3e:f5:5a:db:9d:e2:54:76:1a:
                    96:bb:87:05:b3:f2:f8:15:48:0c:f6:e1:32:6a:12:
                    e7:99:f5:5a:4e:dc:17:d2:cb:59:8e:79:3c:f8:e3:
                    e6:8f:8c:f5:a0:ca:60:36:77:ce:d1:3d:4f:d0:a0:
                    1d:f3:28:7a:6f:5b:ab:da:26:65:69:38:d7:7f:9b:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F3:F7:7A:59:F2:F9:A6:5A:61:02:73:F2:C5:B5:E8:01:C2:E7:9E
            X509v3 Authority Key Identifier:
                keyid:92:2C:45:73:36:D0:84:10:7D:C6:13:73:5F:8A:82:71:6C:B7:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/922C457336D084107DC613735F8A82716CB7D071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/922C457336D084107DC613735F8A82716CB7D071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/0/922C457336D084107DC613735F8A82716CB7D071.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:48:1c:d4:c9:b8:38:7c:39:22:b4:dc:ff:45:27:6c:ea:6a:
         e4:aa:ba:2d:03:79:54:ce:ce:73:33:b9:73:c1:9b:30:26:1a:
         ef:bf:d2:a2:19:b1:8f:5a:3a:5a:29:2d:e4:37:b6:93:55:0e:
         45:d3:60:c9:c7:c6:27:04:18:9d:c6:a9:d2:fd:be:d8:58:03:
         7e:5e:f2:34:a2:e0:83:24:22:eb:6a:5f:e7:91:95:e8:cf:81:
         f2:9d:57:1a:7a:68:bb:74:05:7b:6c:be:8a:ea:13:c1:ee:f3:
         6d:9c:0c:52:af:3e:6f:d0:5f:53:60:ba:39:ab:65:e3:6a:69:
         13:1f:c8:41:7d:9b:bc:ed:05:55:fa:c9:e4:2d:93:60:c8:a4:
         08:ce:d9:86:12:97:3f:09:92:33:90:c5:e0:cd:9d:d5:7f:18:
         a5:89:92:0b:9d:6a:f3:8b:7c:4a:96:22:cd:4c:48:c5:b7:81:
         18:98:56:d7:c0:a0:74:4b:69:3d:82:b3:95:8c:d1:4a:e0:44:
         dd:37:51:cf:5a:f3:81:bb:6b:bb:7e:2b:c3:c2:8a:0b:dc:8b:
         4d:5c:d4:65:0a:8b:ae:e2:bf:8a:c3:45:89:af:bd:03:91:01:
         33:be:ab:a9:07:31:53:01:1b:f7:24:4b:5e:35:55:9d:cf:c7:
         17:57:12:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNPFOiDJ2CEy7wxhjjJ3Lbzsiy6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIyQzQ1NzMzNkQwODQxMDdEQzYxMzczNUY4QTgyNzE2
Q0I3RDA3MTAeFw0yNDA0MTUwNDI1MDBaFw0yNDA0MTYwNTA2MDBaMDMxMTAvBgNV
BAMTKDk4RjNGNzdBNTlGMkY5QTY1QTYxMDI3M0YyQzVCNUU4MDFDMkU3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZN5hdc1HE3FXKrqakJDHkVhP
wN5fjsFs5tt6ZugmGZSJJB/z1XIG2ympNS81ImhvHLNetp6DAB0L4qkpYRUWZJp6
01ducE8UAEN8131zsUXlh9SoacplxGgwts75d0WkxDKAeGetG6YROl+xY5pl6qgs
eGB9fvnyQqFw7eaM727qCN5k/2uIbfAOoLiA3CmujB/NUalRWDzC2GNNjXOk71ks
28dna1PLEZ8w05epAPsZIDo8oMfL3j71Wtud4lR2Gpa7hwWz8vgVSAz24TJqEueZ
9VpO3BfSy1mOeTz44+aPjPWgymA2d87RPU/QoB3zKHpvW6vaJmVpONd/m3TLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmPP3elny+aZaYQJz8sW16AHC554wHwYDVR0j
BBgwFoAUkixFczbQhBB9xhNzX4qCcWy30HEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREdRc0dWckdmZzJrcVQ0a2s1N0hvSkYzWlJaWThrcFRieGFubnpnVHVD
VncvMC85MjJDNDU3MzM2RDA4NDEwN0RDNjEzNzM1RjhBODI3MTZDQjdEMDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkyMkM0NTczMzZEMDg0MTA3
REM2MTM3MzVGOEE4MjcxNkNCN0QwNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REdRc0dWckdmZzJrcVQ0a2s1N0hvSkYzWlJaWThrcFRieGFubnpnVHVDVncvMC85
MjJDNDU3MzM2RDA4NDEwN0RDNjEzNzM1RjhBODI3MTZDQjdEMDcxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANEgc1Mm4OHw5IrTc/0UnbOpq5Kq6LQN5VM7OczO5c8GbMCYa77/Sohmxj1o6
Wikt5De2k1UORdNgycfGJwQYncap0v2+2FgDfl7yNKLggyQi62pf55GV6M+B8p1X
Gnpou3QFe2y+iuoTwe7zbZwMUq8+b9BfU2C6Oatl42ppEx/IQX2bvO0FVfrJ5C2T
YMikCM7ZhhKXPwmSM5DF4M2d1X8YpYmSC51q84t8SpYizUxIxbeBGJhW18CgdEtp
PYKzlYzRSuBE3TdRz1rzgbtru34rw8KKC9yLTVzUZQqLruK/isNFia+9A5EBM76r
qQcxUwEb9yRLXjVVnc/HF1cSyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org