Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.mft
File:                     8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.mft (raw, json)
Hash identifier:          5fHjo6wcZU/9/NuW64IWY5gqCtIMmfJxTF5vRIbXseU=
Subject key identifier:   B1:72:F9:9F:0A:89:1D:4E:0B:09:34:BE:EB:F0:16:A1:E5:E7:2C:FA
Authority key identifier: 85:68:BD:50:CD:17:BE:A4:DC:DF:07:B7:C0:77:C2:C6:F9:54:C8:D7
Certificate issuer:       /CN=8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7
Certificate serial:       1D0C9384C0AFD0EADC498B912391CF936E667BE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.mft
Manifest number:          01DD
Signing time:             Tue 08 Nov 2022 19:19:02 +0000
Manifest this update:     Tue 08 Nov 2022 19:14:02 +0000
Manifest next update:     Wed 09 Nov 2022 20:29:02 +0000
Files and hashes:         1: 3137372e31312e3131322e302f32312d3234203d3e203532393438.roa (hash: CRfMENFwVaGXuG9k1Xl/zGc8GehCDjhEwt0vVF57L6Y=)
                          2: 8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.crl (hash: bwDYCeyuOx/FrmmROMUJaSgofpONjxau5CTm4QtrnCM=)
                          3: 323830343a326137343a3a2f33322d3438203d3e203532393438.roa (hash: cao1yGlY3OOpLFRaB06aJDnNgYA2bp+Tb/X0AebOIAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0c:93:84:c0:af:d0:ea:dc:49:8b:91:23:91:cf:93:6e:66:7b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7
        Validity
            Not Before: Nov  8 19:14:02 2022 GMT
            Not After : Nov  9 20:29:02 2022 GMT
        Subject: CN=B172F99F0A891D4E0B0934BEEBF016A1E5E72CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:45:3c:f4:7a:07:cc:e1:a4:2b:12:a9:a4:
                    92:94:9a:c7:35:bb:57:b9:0c:79:38:72:f3:42:d0:
                    fa:3c:5f:74:cb:d7:d8:6f:bf:36:72:97:ea:69:24:
                    69:5b:07:f9:72:21:72:a8:83:41:b1:93:e0:db:0d:
                    db:14:9e:7c:bc:40:81:bf:83:f7:88:c0:be:3e:77:
                    5e:6a:ab:b4:46:d2:0f:6d:34:28:a4:53:10:96:9a:
                    fa:7a:e6:0b:cf:35:b6:dc:da:ed:f7:17:10:89:d8:
                    c2:ec:d1:c1:60:39:54:be:14:5a:5e:ee:22:74:50:
                    1c:de:94:6f:62:d9:7e:93:82:53:8d:0f:fd:d6:ef:
                    22:d8:4c:af:7c:3b:89:97:09:1c:c3:83:18:25:07:
                    68:22:ac:6c:d8:f5:db:32:d1:94:54:55:3f:8b:c1:
                    c0:21:89:80:cb:ad:a3:b5:a6:af:3d:ab:e4:34:9a:
                    28:3a:36:15:88:12:5b:85:52:0c:28:93:93:3f:5a:
                    8b:56:3a:b2:b7:8f:99:ac:64:97:5f:dd:1a:ef:bf:
                    19:18:f7:3b:92:e8:e2:80:64:a3:07:9d:f0:d3:0a:
                    d5:50:92:69:8e:8c:1f:2a:07:95:4d:bd:09:e8:49:
                    af:02:0a:28:7e:6a:3f:c3:0f:12:f3:89:5b:42:78:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:F9:9F:0A:89:1D:4E:0B:09:34:BE:EB:F0:16:A1:E5:E7:2C:FA
            X509v3 Authority Key Identifier:
                keyid:85:68:BD:50:CD:17:BE:A4:DC:DF:07:B7:C0:77:C2:C6:F9:54:C8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:08:0b:83:53:c0:94:14:d6:3d:da:2f:e0:4f:ee:3b:1f:
         ce:f5:ce:47:a6:79:44:1d:8b:1e:7c:9d:f1:04:5f:aa:b0:b9:
         03:cf:2a:55:28:fb:18:0f:76:ad:e6:3a:74:ec:5f:c4:69:93:
         c1:cb:f0:39:f1:3d:b0:8b:4c:06:1d:d0:73:57:f6:55:d5:43:
         79:f3:3a:17:da:21:61:ea:0a:44:7c:ef:db:0b:9e:ec:cc:04:
         9e:69:50:62:f8:8a:cb:d5:80:9a:c8:9c:ee:1a:d9:58:cd:77:
         a5:88:50:6c:3a:08:58:76:df:82:5b:25:ab:1c:af:18:f2:fc:
         8a:71:ae:9e:7d:a5:f3:5d:ff:dd:98:5f:97:36:7f:32:ed:2b:
         7e:30:e5:6a:64:96:91:54:37:b7:45:50:74:79:33:b1:87:ac:
         da:b4:b7:ad:ce:8f:d9:18:ae:75:3a:f0:96:9a:7c:72:41:75:
         e6:e2:22:60:6b:03:a0:3a:81:12:6b:91:05:52:17:de:dc:f3:
         cf:09:8b:79:52:c0:34:f3:a7:82:e7:cd:a0:2a:c3:2a:3a:54:
         df:d1:72:9b:62:64:25:9b:a8:e3:02:42:f9:4a:86:db:67:23:
         be:66:94:ab:9d:c8:19:b6:b9:da:0c:22:69:66:df:25:bc:e7:
         c0:cb:8a:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHQyThMCv0OrcSYuRI5HPk25me+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2OEJENTBDRDE3QkVBNERDREYwN0I3QzA3N0MyQzZG
OTU0QzhENzAeFw0yMjExMDgxOTE0MDJaFw0yMjExMDkyMDI5MDJaMDMxMTAvBgNV
BAMTKEIxNzJGOTlGMEE4OTFENEUwQjA5MzRCRUVCRjAxNkExRTVFNzJDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjoEU89HoHzOGkKxKppJKUmsc1
u1e5DHk4cvNC0Po8X3TL19hvvzZyl+ppJGlbB/lyIXKog0Gxk+DbDdsUnny8QIG/
g/eIwL4+d15qq7RG0g9tNCikUxCWmvp65gvPNbbc2u33FxCJ2MLs0cFgOVS+FFpe
7iJ0UBzelG9i2X6TglOND/3W7yLYTK98O4mXCRzDgxglB2girGzY9dsy0ZRUVT+L
wcAhiYDLraO1pq89q+Q0mig6NhWIEluFUgwok5M/WotWOrK3j5msZJdf3RrvvxkY
9zuS6OKAZKMHnfDTCtVQkmmOjB8qB5VNvQnoSa8CCih+aj/DDxLziVtCeOYxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsXL5nwqJHU4LCTS+6/AWoeXnLPowHwYDVR0j
BBgwFoAUhWi9UM0XvqTc3we3wHfCxvlUyNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRHWnJtWEdxRGppSzVodlRWWjRxRWFhcnJpMlFNSzhoTDh2Rnk3NEtT
WlAvMC84NTY4QkQ1MENEMTdCRUE0RENERjA3QjdDMDc3QzJDNkY5NTRDOEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1NjhCRDUwQ0QxN0JFQTRE
Q0RGMDdCN0MwNzdDMkM2Rjk1NEM4RDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGRHWnJtWEdxRGppSzVodlRWWjRxRWFhcnJpMlFNSzhoTDh2Rnk3NEtTWlAvMC84
NTY4QkQ1MENEMTdCRUE0RENERjA3QjdDMDc3QzJDNkY5NTRDOEQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUcQIC4NTwJQU1j3aL+BP7jsfzvXOR6Z5RB2LHnyd8QRfqrC5A88qVSj7GA92
reY6dOxfxGmTwcvwOfE9sItMBh3Qc1f2VdVDefM6F9ohYeoKRHzv2wue7MwEnmlQ
YviKy9WAmsic7hrZWM13pYhQbDoIWHbfglslqxyvGPL8inGunn2l813/3ZhflzZ/
Mu0rfjDlamSWkVQ3t0VQdHkzsYes2rS3rc6P2RiudTrwlpp8ckF15uIiYGsDoDqB
EmuRBVIX3tzzzwmLeVLANPOngufNoCrDKjpU39Fym2JkJZuo4wJC+UqG22cjvmaU
q53IGba52gwiaWbfJbznwMuK/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org