Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.mft
File:                     D4E7FC5209A271F113E974568598FBFD5E252646.mft (raw, json)
Hash identifier:          uH+Tg4fuoiun2zmjCi8OJZ4YtiEK2lu4XYnx3HK1wG8=
Subject key identifier:   F7:26:E3:38:EE:73:C3:BC:D1:0B:53:8D:0F:42:60:E0:01:45:41:7B
Authority key identifier: D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46
Certificate issuer:       /CN=D4E7FC5209A271F113E974568598FBFD5E252646
Certificate serial:       3D2C045941414CB30987C3519194DB6B04C168F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.mft
Manifest number:          56
Signing time:             Mon 15 Apr 2024 05:07:23 +0000
Manifest this update:     Mon 15 Apr 2024 05:02:23 +0000
Manifest next update:     Tue 16 Apr 2024 06:32:23 +0000
Files and hashes:         1: 323830343a346238383a3a2f33322d313238203d3e20323637333132.roa (hash: Z/o6qvdSblTSm0qtCQ8AyrklRBtciCbObU9Ze7NwCEY=)
                          2: 34352e3233332e3132382e302f32322d3332203d3e20323637333132.roa (hash: Qxwcepd08y0I9Sspr4+lfCBHj8xR6gfuP6gybeb4rLk=)
                          3: D4E7FC5209A271F113E974568598FBFD5E252646.crl (hash: KXwLCHc0vS1UjP70qVyGEi/UvXAHNxQBlzghGBBFJxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2c:04:59:41:41:4c:b3:09:87:c3:51:91:94:db:6b:04:c1:68:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E7FC5209A271F113E974568598FBFD5E252646
        Validity
            Not Before: Apr 15 05:02:23 2024 GMT
            Not After : Apr 16 06:32:23 2024 GMT
        Subject: CN=F726E338EE73C3BCD10B538D0F4260E00145417B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:84:10:16:20:8d:7b:48:a2:6a:b6:88:b9:
                    34:ff:45:70:79:d1:1e:22:2a:4c:3f:cc:68:49:e6:
                    d2:c1:15:e0:45:de:24:6b:45:a2:86:b7:4a:d8:0f:
                    ba:28:14:d5:75:df:de:ae:33:4b:fe:d9:cf:73:b0:
                    3f:49:0e:82:8a:8c:fb:3d:8a:d8:22:31:b9:0c:f9:
                    ab:b4:87:29:5b:2c:ca:51:2e:1e:ed:86:e1:3b:4a:
                    9c:74:07:69:0d:c3:1e:21:34:37:c7:6f:83:7a:27:
                    78:97:ff:79:60:8d:af:0b:a3:9f:58:31:67:4e:07:
                    14:d8:96:62:36:27:f7:e3:b1:bd:05:9f:30:1a:e7:
                    53:34:65:94:c2:f9:16:c5:bd:59:50:21:2c:0e:c8:
                    ca:59:cf:e3:fa:b7:d2:d1:00:47:fd:3a:74:04:20:
                    0a:33:ce:23:9d:1e:cd:f8:4d:da:50:81:47:1a:7a:
                    1e:cd:bf:58:08:22:52:5d:95:1c:2b:2e:be:ae:65:
                    2e:92:35:ea:78:a9:04:8e:f2:42:b3:a1:fb:99:db:
                    49:ec:28:03:06:95:8c:03:8e:07:9a:50:95:fe:fb:
                    c0:77:66:55:e4:6e:24:5f:ed:25:3c:af:d2:3e:d6:
                    9f:ba:cd:ae:39:45:1f:36:8d:56:2c:7a:b5:b3:2c:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:26:E3:38:EE:73:C3:BC:D1:0B:53:8D:0F:42:60:E0:01:45:41:7B
            X509v3 Authority Key Identifier:
                keyid:D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b9:be:22:c6:7a:18:ce:a4:79:a4:47:7e:ed:d6:35:50:f0:
         60:08:63:c9:5a:cb:b6:de:cf:70:a8:ac:0a:c2:ea:cf:e0:77:
         54:36:eb:34:c3:2b:67:f1:ca:15:e1:d8:cd:e2:94:c2:80:27:
         69:f5:60:8e:df:d6:7e:4b:81:2a:45:d6:90:fd:d2:71:53:a3:
         be:4c:cb:f6:62:c8:d3:f1:11:65:46:d0:92:a5:18:8f:af:e8:
         64:a5:1f:41:88:ce:f1:c6:79:22:2c:f4:84:cd:03:c6:eb:5c:
         07:76:55:41:f3:41:59:91:a7:1e:71:2b:60:84:a0:8e:08:e8:
         ed:c4:29:47:99:b8:4c:78:ed:c1:3a:75:3b:ba:34:78:4f:82:
         a5:9c:af:9c:77:16:4c:67:9c:c8:6e:0a:58:6c:d3:17:de:bf:
         c5:bc:b6:24:c3:37:4c:aa:f0:f2:ec:19:ba:d0:fd:36:86:70:
         9f:36:be:07:97:e4:98:0c:34:a6:63:92:c1:75:ba:21:5e:95:
         ba:ac:e0:75:cd:38:af:6e:2a:16:e8:f5:1f:83:06:3a:00:13:
         d6:15:c5:fd:72:93:7a:49:84:75:d4:92:14:fb:5a:1f:dc:a9:
         35:4d:ce:15:b7:72:07:50:93:76:29:64:f2:94:a5:30:59:69:
         e6:97:e4:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPSwEWUFBTLMJh8NRkZTbawTBaPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRFN0ZDNTIwOUEyNzFGMTEzRTk3NDU2ODU5OEZCRkQ1
RTI1MjY0NjAeFw0yNDA0MTUwNTAyMjNaFw0yNDA0MTYwNjMyMjNaMDMxMTAvBgNV
BAMTKEY3MjZFMzM4RUU3M0MzQkNEMTBCNTM4RDBGNDI2MEUwMDE0NTQxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvoQQFiCNe0iiaraIuTT/RXB5
0R4iKkw/zGhJ5tLBFeBF3iRrRaKGt0rYD7ooFNV1396uM0v+2c9zsD9JDoKKjPs9
itgiMbkM+au0hylbLMpRLh7thuE7Spx0B2kNwx4hNDfHb4N6J3iX/3lgja8Lo59Y
MWdOBxTYlmI2J/fjsb0FnzAa51M0ZZTC+RbFvVlQISwOyMpZz+P6t9LRAEf9OnQE
IAozziOdHs34TdpQgUcaeh7Nv1gIIlJdlRwrLr6uZS6SNep4qQSO8kKzofuZ20ns
KAMGlYwDjgeaUJX++8B3ZlXkbiRf7SU8r9I+1p+6za45RR82jVYserWzLIvhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9ybjOO5zw7zRC1OND0Jg4AFFQXswHwYDVR0j
BBgwFoAU1Of8UgmicfET6XRWhZj7/V4lJkYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURQWldKcFNrRGt1UHk3azc5V1B3RzY3dldFWWpONXJQcWpTNXRXbU4z
bmkvMC9ENEU3RkM1MjA5QTI3MUYxMTNFOTc0NTY4NTk4RkJGRDVFMjUyNjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0RTdGQzUyMDlBMjcxRjEx
M0U5NzQ1Njg1OThGQkZENUUyNTI2NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RURQWldKcFNrRGt1UHk3azc5V1B3RzY3dldFWWpONXJQcWpTNXRXbU4zbmkvMC9E
NEU3RkM1MjA5QTI3MUYxMTNFOTc0NTY4NTk4RkJGRDVFMjUyNjQ2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPbm+IsZ6GM6keaRHfu3WNVDwYAhjyVrLtt7PcKisCsLqz+B3VDbrNMMrZ/HK
FeHYzeKUwoAnafVgjt/WfkuBKkXWkP3ScVOjvkzL9mLI0/ERZUbQkqUYj6/oZKUf
QYjO8cZ5Iiz0hM0DxutcB3ZVQfNBWZGnHnErYISgjgjo7cQpR5m4THjtwTp1O7o0
eE+CpZyvnHcWTGecyG4KWGzTF96/xby2JMM3TKrw8uwZutD9NoZwnza+B5fkmAw0
pmOSwXW6IV6Vuqzgdc04r24qFuj1H4MGOgAT1hXF/XKTekmEddSSFPtaH9ypNU3O
FbdyB1CTdilk8pSlMFlp5pfk6A==
-----END CERTIFICATE-----