Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/D84B8042C288726B775992D3C09AAC3ADF474AF7.mft
File:                     D84B8042C288726B775992D3C09AAC3ADF474AF7.mft (raw, json)
Hash identifier:          sx7UF8ld7DmeWqSwbk6GUT3X3j4Da7E9iQYCULhms3Y=
Subject key identifier:   42:70:9A:1F:DE:23:C6:6B:E8:CD:56:07:6B:FA:F4:37:C8:A5:19:35
Authority key identifier: D8:4B:80:42:C2:88:72:6B:77:59:92:D3:C0:9A:AC:3A:DF:47:4A:F7
Certificate issuer:       /CN=D84B8042C288726B775992D3C09AAC3ADF474AF7
Certificate serial:       0FF345D94723378326210622807DBC1D389DFCFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D84B8042C288726B775992D3C09AAC3ADF474AF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/D84B8042C288726B775992D3C09AAC3ADF474AF7.mft
Manifest number:          0249
Signing time:             Tue 09 Jan 2024 00:01:10 +0000
Manifest this update:     Mon 08 Jan 2024 23:56:10 +0000
Manifest next update:     Wed 10 Jan 2024 03:36:10 +0000
Files and hashes:         1: 323830343a373735343a3a2f33322d3335203d3e203631363034.roa (hash: N1/mV+eW1+XHQNWCDqBN4LfGUXndSD21UaK+bAkAVRg=)
                          2: D84B8042C288726B775992D3C09AAC3ADF474AF7.crl (hash: kcvkO7OuDjytr5x4KmAGuXeZ5MkcDLw65bKv561rvug=)
                          3: 3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (hash: +FnvwSafmDDLgQwYyeU+eCVFpLyW8jX0auLJRwK44BI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f3:45:d9:47:23:37:83:26:21:06:22:80:7d:bc:1d:38:9d:fc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84B8042C288726B775992D3C09AAC3ADF474AF7
        Validity
            Not Before: Jan  8 23:56:10 2024 GMT
            Not After : Jan 10 03:36:10 2024 GMT
        Subject: CN=42709A1FDE23C66BE8CD56076BFAF437C8A51935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:e7:b8:c0:66:d3:1c:6d:44:36:25:1d:68:
                    95:32:08:8a:f9:d4:7a:77:69:16:6e:99:9c:d3:8d:
                    96:df:e4:d3:6b:96:c4:ce:c7:1a:99:93:8d:73:95:
                    5c:9a:14:a6:9a:4b:07:87:0b:42:48:00:31:4d:1f:
                    e0:88:31:be:98:ca:34:42:f3:c6:74:6c:a4:ee:a0:
                    9f:a7:a7:c1:1d:ab:6b:2e:e2:24:cd:7b:a0:3f:fc:
                    be:3c:0c:d2:5e:d9:f6:b8:44:07:c4:7a:6d:c1:44:
                    74:38:6b:d7:c6:44:0d:20:c6:84:47:c1:89:fd:db:
                    05:a4:b9:6b:aa:e9:ba:fb:81:2d:a8:15:b7:1b:6c:
                    47:d0:d1:c0:33:9c:dd:ec:32:c3:db:43:df:c6:77:
                    3d:0c:64:08:34:22:37:0d:96:b0:bb:7a:52:01:15:
                    f0:4b:1b:62:ca:b3:80:14:a9:ea:0e:6c:fd:ba:cc:
                    e2:6f:12:48:2c:1c:0c:11:41:95:95:0d:4e:c2:6c:
                    1f:7e:27:eb:8f:19:65:33:88:90:15:bc:92:a6:09:
                    d6:41:e0:f3:ef:79:37:36:f1:5f:aa:a7:f9:13:90:
                    63:d5:2e:12:7a:fb:ef:1a:87:f5:49:fa:8d:60:5e:
                    08:c0:78:16:7b:ed:a0:02:bd:6a:cd:e2:c6:f6:e7:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:70:9A:1F:DE:23:C6:6B:E8:CD:56:07:6B:FA:F4:37:C8:A5:19:35
            X509v3 Authority Key Identifier:
                keyid:D8:4B:80:42:C2:88:72:6B:77:59:92:D3:C0:9A:AC:3A:DF:47:4A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/D84B8042C288726B775992D3C09AAC3ADF474AF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D84B8042C288726B775992D3C09AAC3ADF474AF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/D84B8042C288726B775992D3C09AAC3ADF474AF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:28:7f:89:27:f7:aa:c4:72:09:78:20:84:53:2e:52:7e:eb:
         c5:95:11:21:53:d8:bc:55:65:6f:4d:d4:83:f9:75:de:40:74:
         73:70:9a:7c:0d:b3:9d:b3:aa:46:21:f2:ef:2f:97:0e:4a:67:
         ee:63:ca:ff:bd:2d:f5:51:4a:78:f4:a7:61:f4:e6:6a:8e:58:
         98:89:11:32:bc:46:db:98:39:0e:01:e7:0d:cd:47:97:4b:ba:
         17:c2:7d:1d:9a:7a:a5:53:9c:7b:b0:a5:7c:d6:b5:00:46:00:
         6c:c1:6a:21:ef:46:35:c1:3c:6f:ed:4d:17:5f:59:9a:20:87:
         07:b6:bb:59:af:f7:93:27:d0:85:13:66:63:09:96:e5:9d:c7:
         2d:1c:c7:95:7a:11:3d:7b:e0:d2:2b:c7:d9:de:46:4e:5a:32:
         f6:05:d5:d2:c9:8e:90:55:8b:02:27:91:64:16:5a:b7:13:e3:
         e8:4e:cf:10:07:f0:4e:59:64:5d:a3:40:28:2a:d9:5b:43:f7:
         f6:79:0e:4b:d7:b0:37:69:31:9f:75:60:39:ed:b7:2b:7f:df:
         5c:c5:43:a5:ec:05:d6:89:4d:03:2e:88:0b:86:79:99:00:3b:
         f7:bf:f5:42:e7:cd:b5:6b:65:f8:19:48:bb:fe:c1:e7:2d:8d:
         6b:19:88:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD/NF2UcjN4MmIQYigH28HTid/P0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg0QjgwNDJDMjg4NzI2Qjc3NTk5MkQzQzA5QUFDM0FE
RjQ3NEFGNzAeFw0yNDAxMDgyMzU2MTBaFw0yNDAxMTAwMzM2MTBaMDMxMTAvBgNV
BAMTKDQyNzA5QTFGREUyM0M2NkJFOENENTYwNzZCRkFGNDM3QzhBNTE5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGue4wGbTHG1ENiUdaJUyCIr5
1Hp3aRZumZzTjZbf5NNrlsTOxxqZk41zlVyaFKaaSweHC0JIADFNH+CIMb6YyjRC
88Z0bKTuoJ+np8Edq2su4iTNe6A//L48DNJe2fa4RAfEem3BRHQ4a9fGRA0gxoRH
wYn92wWkuWuq6br7gS2oFbcbbEfQ0cAznN3sMsPbQ9/Gdz0MZAg0IjcNlrC7elIB
FfBLG2LKs4AUqeoObP26zOJvEkgsHAwRQZWVDU7CbB9+J+uPGWUziJAVvJKmCdZB
4PPveTc28V+qp/kTkGPVLhJ6++8ah/VJ+o1gXgjAeBZ77aACvWrN4sb25/THAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQnCaH94jxmvozVYHa/r0N8ilGTUwHwYDVR0j
BBgwFoAU2EuAQsKIcmt3WZLTwJqsOt9HSvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFkNHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZS
TGcvMS9EODRCODA0MkMyODg3MjZCNzc1OTkyRDNDMDlBQUMzQURGNDc0QUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NEI4MDQyQzI4ODcyNkI3
NzU5OTJEM0MwOUFBQzNBREY0NzRBRjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFFkNHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZSTGcvMS9E
ODRCODA0MkMyODg3MjZCNzc1OTkyRDNDMDlBQUMzQURGNDc0QUY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgCh/iSf3qsRyCXgghFMuUn7rxZURIVPYvFVlb03Ug/l13kB0c3CafA2znbOq
RiHy7y+XDkpn7mPK/70t9VFKePSnYfTmao5YmIkRMrxG25g5DgHnDc1Hl0u6F8J9
HZp6pVOce7ClfNa1AEYAbMFqIe9GNcE8b+1NF19ZmiCHB7a7Wa/3kyfQhRNmYwmW
5Z3HLRzHlXoRPXvg0ivH2d5GTloy9gXV0smOkFWLAieRZBZatxPj6E7PEAfwTllk
XaNAKCrZW0P39nkOS9ewN2kxn3VgOe23K3/fXMVDpewF1olNAy6IC4Z5mQA797/1
QufNtWtl+BlIu/7B5y2NaxmIwg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org