Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/9D68635E63381A5F13180DF283B95BDD1CF6E589.mft
File:                     9D68635E63381A5F13180DF283B95BDD1CF6E589.mft (raw, json)
Hash identifier:          GDCVhlGzPk2YahkgDs8jGsr+DY0V8qAGzYkofl5B4z8=
Subject key identifier:   9C:DC:34:B7:E0:42:9D:50:56:55:45:36:43:57:CE:E2:79:60:45:A3
Authority key identifier: 9D:68:63:5E:63:38:1A:5F:13:18:0D:F2:83:B9:5B:DD:1C:F6:E5:89
Certificate issuer:       /CN=9D68635E63381A5F13180DF283B95BDD1CF6E589
Certificate serial:       670E57260E63592D63085A361428FBE1E9B87CF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D68635E63381A5F13180DF283B95BDD1CF6E589.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/9D68635E63381A5F13180DF283B95BDD1CF6E589.mft
Manifest number:          24
Signing time:             Fri 18 Oct 2024 14:54:41 +0000
Manifest this update:     Fri 18 Oct 2024 14:49:41 +0000
Manifest next update:     Sat 19 Oct 2024 16:26:41 +0000
Files and hashes:         1: 323830343a6232383a3a2f33322d3438203d3e203532393434.roa (hash: RB+qQyncc2c5QvqXEChYx4PkJiNz1mHVjEV7CdZGWjM=)
                          2: 3137372e33382e35362e302f32312d3234203d3e203532393434.roa (hash: oyB39w7ecyYs8mPssh5QjQiC1HGkGZWpKTE47a+vu8A=)
                          3: 9D68635E63381A5F13180DF283B95BDD1CF6E589.crl (hash: 5adrods7L9kXNLguQQf4sVUedR6+AVxRHxiIJ2fCTl0=)
                          4: 3136382e3230352e3135322e302f32322d3234203d3e203532393434.roa (hash: oaxk4tG2AHYy2o7fC3qY1QRO9P2Q/W6Bp3WwOCuxYvs=)
                          5: 3230312e3135302e3131322e302f32322d3234203d3e203532393434.roa (hash: GOVHRt6IBoNuspuXTZenK9Kp1+EL7GXQ+b7NhfbYT+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0e:57:26:0e:63:59:2d:63:08:5a:36:14:28:fb:e1:e9:b8:7c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D68635E63381A5F13180DF283B95BDD1CF6E589
        Validity
            Not Before: Oct 18 14:49:41 2024 GMT
            Not After : Oct 19 16:26:41 2024 GMT
        Subject: CN=9CDC34B7E0429D50565545364357CEE2796045A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:57:ff:a9:e3:94:3b:a5:e0:83:44:62:86:
                    2f:88:65:c8:b9:78:99:ab:0a:71:38:00:a2:55:9d:
                    1f:d8:96:39:f8:ea:70:fd:02:b7:49:65:0b:8a:56:
                    6e:8a:9c:94:4f:75:e3:f4:eb:80:72:43:49:b0:b7:
                    db:d4:2b:af:dd:80:26:1f:2d:e9:7a:e9:f2:fb:0e:
                    a8:83:6b:07:b0:6d:5d:d8:dc:fa:ce:41:0a:50:57:
                    e7:d7:62:9f:4b:79:9d:d2:75:42:e3:4d:99:6e:a2:
                    e0:6d:66:85:17:c1:39:c4:54:7a:7c:52:6b:7b:07:
                    8a:74:2a:65:35:4b:28:6a:12:22:b0:de:6f:1e:af:
                    51:f4:10:78:f1:8e:02:e4:4a:d9:96:f1:ea:14:d1:
                    2c:bb:5f:8f:28:b5:f8:48:eb:c1:2a:f2:df:f9:5d:
                    cb:de:1f:13:70:0c:21:dd:f3:4f:34:ff:b7:69:7c:
                    ba:4c:34:d4:5d:f0:a8:3a:07:9f:68:2c:9f:7f:93:
                    f2:2a:c4:e8:da:ce:87:6b:ee:f1:24:65:fb:8f:56:
                    15:86:37:78:e8:78:af:97:f1:96:10:20:52:a1:7a:
                    32:8e:75:07:8e:ba:0d:2b:b2:20:5e:78:e8:c6:3f:
                    f7:31:bb:ec:f6:a3:e9:a2:4d:d3:06:50:a6:a8:4b:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DC:34:B7:E0:42:9D:50:56:55:45:36:43:57:CE:E2:79:60:45:A3
            X509v3 Authority Key Identifier:
                keyid:9D:68:63:5E:63:38:1A:5F:13:18:0D:F2:83:B9:5B:DD:1C:F6:E5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/9D68635E63381A5F13180DF283B95BDD1CF6E589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D68635E63381A5F13180DF283B95BDD1CF6E589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/9D68635E63381A5F13180DF283B95BDD1CF6E589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:67:33:66:c7:da:5a:ae:43:ce:e9:71:b7:64:b3:21:73:2c:
         14:30:39:ff:71:58:fa:30:53:18:6e:3f:54:a2:d9:a1:07:d1:
         b3:fe:b0:33:15:18:7d:d6:98:c5:17:9d:db:de:41:66:8a:1c:
         17:41:81:12:21:ec:c5:59:5b:97:26:d1:bb:94:dc:42:00:c7:
         de:ac:5c:91:08:3d:9f:fb:20:f1:2d:d3:04:e9:96:56:4f:c9:
         54:20:05:45:42:6b:2b:26:de:e7:b2:44:47:8a:b2:e2:f7:d2:
         ac:89:f6:3c:10:27:b0:23:d9:5d:95:b3:da:7c:c6:b7:90:53:
         be:83:04:fb:9d:ab:65:f0:3d:55:a7:6f:e5:a3:75:6a:09:ed:
         f7:f4:07:97:b3:b8:38:0c:9f:00:fa:44:c5:e2:43:7b:05:3e:
         d2:53:d0:b3:36:bd:bb:f3:88:16:61:0b:5b:25:af:2e:6d:d0:
         46:04:d6:80:a0:12:04:51:a6:18:9d:31:57:c5:58:f8:2c:fb:
         6a:ad:04:7f:dd:4c:0c:f5:7c:60:59:92:87:5d:04:dc:c2:d6:
         bd:3a:6f:1f:b4:a9:9d:eb:63:41:66:8e:ec:71:96:20:c0:11:
         b7:8c:14:51:0a:c5:73:28:27:44:16:7e:69:7f:78:31:fe:46:
         62:f9:0e:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZw5XJg5jWS1jCFo2FCj74em4fPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ2ODYzNUU2MzM4MUE1RjEzMTgwREYyODNCOTVCREQx
Q0Y2RTU4OTAeFw0yNDEwMTgxNDQ5NDFaFw0yNDEwMTkxNjI2NDFaMDMxMTAvBgNV
BAMTKDlDREMzNEI3RTA0MjlENTA1NjU1NDUzNjQzNTdDRUUyNzk2MDQ1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbVf/qeOUO6Xgg0Rihi+IZci5
eJmrCnE4AKJVnR/Yljn46nD9ArdJZQuKVm6KnJRPdeP064ByQ0mwt9vUK6/dgCYf
Lel66fL7DqiDawewbV3Y3PrOQQpQV+fXYp9LeZ3SdULjTZluouBtZoUXwTnEVHp8
Umt7B4p0KmU1SyhqEiKw3m8er1H0EHjxjgLkStmW8eoU0Sy7X48otfhI68Eq8t/5
XcveHxNwDCHd8080/7dpfLpMNNRd8Kg6B59oLJ9/k/IqxOjazodr7vEkZfuPVhWG
N3joeK+X8ZYQIFKhejKOdQeOug0rsiBeeOjGP/cxu+z2o+miTdMGUKaoS0IhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnNw0t+BCnVBWVUU2Q1fO4nlgRaMwHwYDVR0j
BBgwFoAUnWhjXmM4Gl8TGA3yg7lb3Rz25YkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC85RDY4NjM1RTYzMzgxQTVGMTMxODBERjI4M0I5NUJERDFDRjZFNTg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENjg2MzVFNjMzODFBNUYx
MzE4MERGMjgzQjk1QkREMUNGNkU1ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNXZmovMC85
RDY4NjM1RTYzMzgxQTVGMTMxODBERjI4M0I5NUJERDFDRjZFNTg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM2czZsfaWq5Dzulxt2SzIXMsFDA5/3FY+jBTGG4/VKLZoQfRs/6wMxUYfdaY
xRed295BZoocF0GBEiHsxVlblybRu5TcQgDH3qxckQg9n/sg8S3TBOmWVk/JVCAF
RUJrKybe57JER4qy4vfSrIn2PBAnsCPZXZWz2nzGt5BTvoME+52rZfA9Vadv5aN1
agnt9/QHl7O4OAyfAPpExeJDewU+0lPQsza9u/OIFmELWyWvLm3QRgTWgKASBFGm
GJ0xV8VY+Cz7aq0Ef91MDPV8YFmSh10E3MLWvTpvH7SpnetjQWaO7HGWIMARt4wU
UQrFcygnRBZ+aX94Mf5GYvkOnw==
-----END CERTIFICATE-----