Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/9692130DFFE4426961376D9E7A50DDAE7D88FEA9.mft
File:                     9692130DFFE4426961376D9E7A50DDAE7D88FEA9.mft (raw, json)
Hash identifier:          yV4jL4QRlKbss96d41q7eBSVd8+kqYhHOa++m+FwP+c=
Subject key identifier:   10:CA:EA:90:94:12:B4:16:71:2C:12:6F:29:A1:1A:7B:3D:5F:A4:98
Authority key identifier: 96:92:13:0D:FF:E4:42:69:61:37:6D:9E:7A:50:DD:AE:7D:88:FE:A9
Certificate issuer:       /CN=9692130DFFE4426961376D9E7A50DDAE7D88FEA9
Certificate serial:       014B4C268FAFE2E899C9BE7340E7CB2179C7D210
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9692130DFFE4426961376D9E7A50DDAE7D88FEA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/9692130DFFE4426961376D9E7A50DDAE7D88FEA9.mft
Manifest number:          02
Signing time:             Mon 29 Jan 2024 16:41:56 +0000
Manifest this update:     Mon 29 Jan 2024 16:36:56 +0000
Manifest next update:     Tue 30 Jan 2024 20:08:56 +0000
Files and hashes:         1: 3139312e372e3130362e302f32332d3233203d3e20323731303134.roa (hash: LFvn9GcxA+HMEn6ntkuyBRC6FNs4DgyKvTneP8c2jRA=)
                          2: 3139312e372e3130342e302f32332d3233203d3e20323731303134.roa (hash: aV0xU0bOtbEdEgSCldPRVYV+OU+TxlD6QFO/atfgudw=)
                          3: 3139312e372e3130372e302f32342d3234203d3e20323731303134.roa (hash: K3v1d+svlB4EUN2aEriQtPrPkoFfwsTtiBF1X+4bti8=)
                          4: 3139312e372e3130342e302f32322d3232203d3e20323731303134.roa (hash: zxQf2pIaZ6MIl4yyBCtM+rJR6Cekm/pbfpzcfAzk+qc=)
                          5: 9692130DFFE4426961376D9E7A50DDAE7D88FEA9.crl (hash: N+ERv/9BsG/0TKrxlAlUCgX+KhLCQ4/acl8FUM5RR3g=)
                          6: 3139312e372e3130342e302f32342d3234203d3e20323731303134.roa (hash: 0CyRqk1IjioIXIgA5MVBr+kak7DbanPS2IumlPNDZMA=)
                          7: 3139312e372e3130352e302f32342d3234203d3e20323731303134.roa (hash: /lQdGYXs1h+ZQ6mA9mWidN4qrjUaWJrbnNyXtz4/a+g=)
                          8: 3139312e372e3130362e302f32342d3234203d3e20323731303134.roa (hash: XC2Ts6Q0CluCj/wEbETlQfNyHe+JvJ8AQsvDOmJQz5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4b:4c:26:8f:af:e2:e8:99:c9:be:73:40:e7:cb:21:79:c7:d2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9692130DFFE4426961376D9E7A50DDAE7D88FEA9
        Validity
            Not Before: Jan 29 16:36:56 2024 GMT
            Not After : Jan 30 20:08:56 2024 GMT
        Subject: CN=10CAEA909412B416712C126F29A11A7B3D5FA498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:da:6f:e2:29:ed:75:16:5f:82:fc:26:25:
                    c0:e8:3f:05:21:50:75:0d:0a:15:c2:ff:25:4c:d8:
                    ae:09:4e:ab:3b:ae:e8:5c:c1:b3:80:36:bf:05:0e:
                    9b:57:75:a1:d9:6d:ec:5c:f4:43:b7:40:70:b2:60:
                    31:b9:80:ba:e0:07:fc:ba:f3:3a:53:30:86:8d:3b:
                    ed:35:e0:4d:c2:09:23:2a:23:11:a8:56:b1:c8:0a:
                    b6:21:ce:93:4b:16:33:40:34:19:28:fd:2b:dd:23:
                    75:d7:ec:be:84:0d:ab:86:f0:bb:c7:4b:51:bb:05:
                    4b:1a:6f:a7:6b:96:ba:4d:ad:e2:08:16:b1:1b:8a:
                    99:9c:ea:19:f1:00:85:36:88:84:f5:6d:10:ef:9c:
                    4a:ac:75:4e:78:7f:fd:88:6f:9b:9d:0a:f8:e1:aa:
                    7d:b6:45:11:bc:9e:06:dd:a9:d6:66:b6:69:a4:16:
                    f3:6e:d8:9e:2d:5f:aa:b4:3c:fc:87:52:6e:a0:c4:
                    dc:c1:44:8e:c0:48:22:c7:b7:77:ef:1a:40:78:72:
                    36:56:6c:e3:73:89:ec:19:8a:e0:3e:1f:4e:8c:fb:
                    83:de:5c:ad:1a:ef:53:67:60:59:be:70:1f:13:f5:
                    18:d2:cd:68:48:b9:bb:b9:75:14:17:ec:61:52:92:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:EA:90:94:12:B4:16:71:2C:12:6F:29:A1:1A:7B:3D:5F:A4:98
            X509v3 Authority Key Identifier:
                keyid:96:92:13:0D:FF:E4:42:69:61:37:6D:9E:7A:50:DD:AE:7D:88:FE:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/9692130DFFE4426961376D9E7A50DDAE7D88FEA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9692130DFFE4426961376D9E7A50DDAE7D88FEA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/9692130DFFE4426961376D9E7A50DDAE7D88FEA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:90:3b:3b:68:e8:d9:59:3e:db:f3:be:a0:32:d4:61:01:21:
         47:d9:47:5d:c9:cf:d9:16:6f:26:86:2f:2d:be:a7:59:9f:37:
         3d:6d:4d:61:5f:bf:e7:7e:46:9f:7a:26:a7:86:10:be:c4:90:
         8e:4a:cd:5d:6d:a4:7a:f7:dd:8d:5c:c1:23:43:dd:75:4f:d0:
         e9:e8:66:aa:e1:98:5d:69:10:24:b0:41:56:06:62:7f:8a:68:
         56:0d:0b:ef:d5:23:07:ed:b5:d5:be:b0:1a:11:9a:37:75:1f:
         97:c3:e5:2f:37:65:9a:c7:07:b1:f0:cf:1d:27:6c:d4:62:8b:
         44:1b:73:cb:2a:31:85:d0:83:20:c9:73:21:0c:65:2c:c3:14:
         96:4e:75:4f:f1:87:4c:fc:f0:1e:f3:2b:4f:6b:b7:90:3a:0f:
         92:0f:03:fa:d2:7d:41:e3:3a:15:25:6e:01:96:d6:80:55:85:
         0d:4e:bc:85:f3:1f:66:56:77:d4:ea:d0:8b:35:8c:04:91:99:
         e9:94:47:0c:ae:99:0f:02:27:98:db:97:8a:80:11:58:4e:b2:
         e7:9a:6b:3e:1e:9e:46:5f:f5:c5:06:61:09:4f:f9:95:91:cc:
         f7:83:0f:d9:64:e4:80:cb:af:3d:ac:ee:4d:e3:fa:16:3c:bc:
         2f:87:b7:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAUtMJo+v4uiZyb5zQOfLIXnH0hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY5MjEzMERGRkU0NDI2OTYxMzc2RDlFN0E1MEREQUU3
RDg4RkVBOTAeFw0yNDAxMjkxNjM2NTZaFw0yNDAxMzAyMDA4NTZaMDMxMTAvBgNV
BAMTKDEwQ0FFQTkwOTQxMkI0MTY3MTJDMTI2RjI5QTExQTdCM0Q1RkE0OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8dpv4intdRZfgvwmJcDoPwUh
UHUNChXC/yVM2K4JTqs7ruhcwbOANr8FDptXdaHZbexc9EO3QHCyYDG5gLrgB/y6
8zpTMIaNO+014E3CCSMqIxGoVrHICrYhzpNLFjNANBko/SvdI3XX7L6EDauG8LvH
S1G7BUsab6drlrpNreIIFrEbipmc6hnxAIU2iIT1bRDvnEqsdU54f/2Ib5udCvjh
qn22RRG8ngbdqdZmtmmkFvNu2J4tX6q0PPyHUm6gxNzBRI7ASCLHt3fvGkB4cjZW
bONziewZiuA+H06M+4PeXK0a71NnYFm+cB8T9RjSzWhIubu5dRQX7GFSktExAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEMrqkJQStBZxLBJvKaEaez1fpJgwHwYDVR0j
BBgwFoAUlpITDf/kQmlhN22eelDdrn2I/qkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdn
RHcvMC85NjkyMTMwREZGRTQ0MjY5NjEzNzZEOUU3QTUwRERBRTdEODhGRUE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2OTIxMzBERkZFNDQyNjk2
MTM3NkQ5RTdBNTBEREFFN0Q4OEZFQTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTQzR2RibWl4Y1BYODd4aUFTM3l0V2pmZjRzdWJCdWtnNnRvY1VETEdnRHcvMC85
NjkyMTMwREZGRTQ0MjY5NjEzNzZEOUU3QTUwRERBRTdEODhGRUE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvpA7O2jo2Vk+2/O+oDLUYQEhR9lHXcnP2RZvJoYvLb6nWZ83PW1NYV+/535G
n3omp4YQvsSQjkrNXW2kevfdjVzBI0PddU/Q6ehmquGYXWkQJLBBVgZif4poVg0L
79UjB+211b6wGhGaN3Ufl8PlLzdlmscHsfDPHSds1GKLRBtzyyoxhdCDIMlzIQxl
LMMUlk51T/GHTPzwHvMrT2u3kDoPkg8D+tJ9QeM6FSVuAZbWgFWFDU68hfMfZlZ3
1OrQizWMBJGZ6ZRHDK6ZDwInmNuXioARWE6y55prPh6eRl/1xQZhCU/5lZHM94MP
2WTkgMuvPazuTeP6Fjy8L4e3zQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org