Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.mft
File:                     89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.mft (raw, json)
Hash identifier:          j75+ahZw6oEjxXy3XTgaEDbuugjUdDcJnEXZEuZoYX0=
Subject key identifier:   10:1C:6C:AA:90:6D:E6:88:E3:9A:3B:56:0B:BF:0B:8A:52:AE:48:88
Authority key identifier: 89:CA:A4:75:5C:67:FF:86:C1:3A:0E:B4:B1:86:59:01:3D:9B:D1:FD
Certificate issuer:       /CN=89CAA4755C67FF86C13A0EB4B18659013D9BD1FD
Certificate serial:       57F596A5F40814D1CB3993AA75DA626B9AB4EB0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.mft
Manifest number:          28
Signing time:             Thu 03 Nov 2022 12:31:20 +0000
Manifest this update:     Thu 03 Nov 2022 12:26:20 +0000
Manifest next update:     Fri 04 Nov 2022 15:38:20 +0000
Files and hashes:         1: 323830343a383830303a3a2f33362d3336203d3e20323732373435.roa (hash: PIP0JwGux5kRtF225JWpZ8JLhWaqLDx6Owd2W8ZmiiI=)
                          2: 323830343a383830303a383030303a3a2f33332d3333203d3e20323732373435.roa (hash: eJLfvV4wi/Bb7Si+ohpy2+EfU78CrhjEqOln4ozCWa0=)
                          3: 89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.crl (hash: q1qLDwfoJxJ6DYkn/5U6QxZ5Oqx8GSmJxfbyg1YI8fE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f5:96:a5:f4:08:14:d1:cb:39:93:aa:75:da:62:6b:9a:b4:eb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CAA4755C67FF86C13A0EB4B18659013D9BD1FD
        Validity
            Not Before: Nov  3 12:26:20 2022 GMT
            Not After : Nov  4 15:38:20 2022 GMT
        Subject: CN=101C6CAA906DE688E39A3B560BBF0B8A52AE4888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:a8:49:11:a5:b0:47:f9:84:c0:33:1a:5d:
                    ad:93:8c:3d:99:77:58:67:b4:e5:1a:c8:78:3e:e9:
                    7f:00:a4:07:4f:0e:2d:f5:87:c9:f8:92:e7:a6:a2:
                    57:06:c4:85:23:84:9a:16:38:95:29:4b:53:97:c1:
                    ff:44:85:f7:a4:62:27:65:4f:4d:c6:d7:9f:71:75:
                    59:22:bf:d5:60:22:23:5c:7d:a9:a1:7d:eb:e4:4b:
                    8c:3b:5e:89:60:32:35:9c:2d:9e:df:0b:52:1c:28:
                    48:b1:8e:70:ad:d0:f5:07:88:45:f2:37:87:22:3a:
                    c6:29:a5:39:fc:05:d2:0a:e4:e9:53:c2:f9:29:8f:
                    50:c9:07:9e:d1:9c:08:b4:01:a5:91:2b:51:5a:42:
                    b6:bd:65:fb:21:b5:f1:19:80:9a:38:50:00:d0:5d:
                    b4:fb:53:2c:0a:f7:9f:a8:1e:55:40:6e:ae:04:61:
                    b9:7b:b8:79:5c:5b:3a:94:6e:d9:db:12:5f:e3:9a:
                    22:23:cc:f0:4b:fb:ae:b3:52:21:de:ec:f5:da:b1:
                    e6:b6:f2:79:82:b0:e3:bd:a0:6a:9a:a9:22:21:ad:
                    92:48:18:b0:00:15:bf:29:8e:c5:4b:43:05:c9:8b:
                    55:dc:04:f4:3a:97:43:45:11:42:0b:6d:08:1c:e0:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:6C:AA:90:6D:E6:88:E3:9A:3B:56:0B:BF:0B:8A:52:AE:48:88
            X509v3 Authority Key Identifier:
                keyid:89:CA:A4:75:5C:67:FF:86:C1:3A:0E:B4:B1:86:59:01:3D:9B:D1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKdiAEqkptLGgPXgDKQdDjJF7CwNCTjyrZZ1JrrzkUe4/0/89CAA4755C67FF86C13A0EB4B18659013D9BD1FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:81:18:f0:65:d5:cf:8a:fa:ec:5e:d7:ad:69:6a:1d:8c:
         1e:ba:e1:4c:f8:8f:d3:c3:76:d3:b3:48:6c:05:3e:1a:b6:07:
         96:61:b8:01:79:3d:e5:b7:a3:81:47:a6:5e:f2:97:81:5a:e5:
         3e:99:74:01:69:ca:42:38:7b:26:52:92:aa:85:01:5f:a0:0c:
         4a:56:f9:83:38:d4:5d:ea:24:96:84:12:56:06:47:57:d4:cf:
         dc:3e:44:64:66:18:78:01:d4:aa:ad:d7:f8:9a:40:e4:0e:15:
         58:3c:d1:0b:79:68:99:33:5c:ea:57:31:61:ac:a8:61:61:52:
         91:be:18:90:a9:44:62:16:c4:20:cb:b5:9f:2c:c0:c7:e1:40:
         b6:c9:89:5b:fe:a5:9e:74:7c:4e:63:7f:42:25:93:26:66:04:
         fb:39:93:a0:e1:ef:10:85:50:01:a7:1e:e3:42:5b:c1:e1:0c:
         39:22:7c:90:b9:77:ce:6b:98:e2:4e:3d:e0:bb:6a:c3:8a:b3:
         53:bf:42:c1:88:56:ab:ed:7b:65:8c:2a:80:c1:29:64:48:80:
         d4:04:56:88:29:1c:89:94:05:48:32:ca:a3:6c:8d:c9:8b:15:
         34:f4:0d:df:42:f8:e0:b8:e1:ae:9f:17:0b:16:81:da:b2:8d:
         56:88:8d:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUV/WWpfQIFNHLOZOqddpia5q06w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlDQUE0NzU1QzY3RkY4NkMxM0EwRUI0QjE4NjU5MDEz
RDlCRDFGRDAeFw0yMjExMDMxMjI2MjBaFw0yMjExMDQxNTM4MjBaMDMxMTAvBgNV
BAMTKDEwMUM2Q0FBOTA2REU2ODhFMzlBM0I1NjBCQkYwQjhBNTJBRTQ4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+qhJEaWwR/mEwDMaXa2TjD2Z
d1hntOUayHg+6X8ApAdPDi31h8n4kuemolcGxIUjhJoWOJUpS1OXwf9EhfekYidl
T03G159xdVkiv9VgIiNcfamhfevkS4w7XolgMjWcLZ7fC1IcKEixjnCt0PUHiEXy
N4ciOsYppTn8BdIK5OlTwvkpj1DJB57RnAi0AaWRK1FaQra9ZfshtfEZgJo4UADQ
XbT7UywK95+oHlVAbq4EYbl7uHlcWzqUbtnbEl/jmiIjzPBL+66zUiHe7PXasea2
8nmCsOO9oGqaqSIhrZJIGLAAFb8pjsVLQwXJi1XcBPQ6l0NFEUILbQgc4G/zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEBxsqpBt5ojjmjtWC78LilKuSIgwHwYDVR0j
BBgwFoAUicqkdVxn/4bBOg60sYZZAT2b0f0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtkaUFFcWtwdExHZ1BYZ0RLUWREakpGN0N3TkNUanlyWloxSnJyemtV
ZTQvMC84OUNBQTQ3NTVDNjdGRjg2QzEzQTBFQjRCMTg2NTkwMTNEOUJEMUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg5Q0FBNDc1NUM2N0ZGODZD
MTNBMEVCNEIxODY1OTAxM0Q5QkQxRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtkaUFFcWtwdExHZ1BYZ0RLUWREakpGN0N3TkNUanlyWloxSnJyemtVZTQvMC84
OUNBQTQ3NTVDNjdGRjg2QzEzQTBFQjRCMTg2NTkwMTNEOUJEMUZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP2SBGPBl1c+K+uxe161pah2MHrrhTPiP08N207NIbAU+GrYHlmG4AXk95bej
gUemXvKXgVrlPpl0AWnKQjh7JlKSqoUBX6AMSlb5gzjUXeokloQSVgZHV9TP3D5E
ZGYYeAHUqq3X+JpA5A4VWDzRC3lomTNc6lcxYayoYWFSkb4YkKlEYhbEIMu1nyzA
x+FAtsmJW/6lnnR8TmN/QiWTJmYE+zmToOHvEIVQAace40JbweEMOSJ8kLl3zmuY
4k494Ltqw4qzU79CwYhWq+17ZYwqgMEpZEiA1ARWiCkciZQFSDLKo2yNyYsVNPQN
30L44Ljhrp8XCxaB2rKNVoiNTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org