Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.mft
File:                     414FA748DA84D421B71DC3765DBDDDF7039CA686.mft (raw, json)
Hash identifier:          hehMj981Lg/VE1uGsMypYBwLt+iipSZMg3JgrwoNENs=
Subject key identifier:   59:4D:B1:35:0B:20:88:B5:BB:F3:FF:ED:2E:C1:A6:6D:FE:00:75:82
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       0FA9BA7F8E9B33BFB04C2EDBAE414C16337A2EF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.mft
Manifest number:          050A
Signing time:             Mon 15 Apr 2024 00:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 00:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:10:00 +0000
Files and hashes:         1: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: Bccm75O2gzxW/knoKk0fvuU9NNndEbeadKcbbufWIhM=)
                          2: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: fblCV4ao/ZrLOW0GpV3cENzKajMa2jPDcstRDovYo3I=)
                          3: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: LHypTkdM0OzynE3ebJ+uw/Gxj+1h3v1KtrFMKjTk0rI=)
                          4: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: iOfkJ32JxNkNXgkRnlqPWM5DcpvLYjXinGhcxlB80tY=)
                          5: 414FA748DA84D421B71DC3765DBDDDF7039CA686.crl (hash: f8Q7Mo+Qy0sqA6qNHG0rdq5Nvh5aT3NbM7dkUibgXO0=)
                          6: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: RcgaEXAMEL+cMKnWWVik/S30RpT5V0N8ZOe39KfJvGA=)
                          7: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: K84YtRfk/8rUnoMpvhjSIEsAWFgvlYILokY4CupyU+M=)
                          8: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: 0S7QK9VZ6h/wKZg6nVHaeTeahoC02rxeGAp8j++iGrA=)
                          9: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: 7bqvlyOhvE4RMUAzcG4zepgV4abItzKE1hC1C9Pv7IY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a9:ba:7f:8e:9b:33:bf:b0:4c:2e:db:ae:41:4c:16:33:7a:2e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Apr 15 00:05:00 2024 GMT
            Not After : Apr 16 00:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:74:cd:b3:d5:8d:60:ae:53:63:74:2b:87:
                    51:6c:9f:46:94:6c:8a:2f:1d:cb:9d:af:64:e1:cd:
                    c6:e8:d0:57:c4:9d:2c:44:4f:4d:5a:7b:db:0d:b5:
                    be:cd:8a:00:b7:bd:de:48:d5:6c:bc:52:07:69:07:
                    d0:d8:13:fd:81:3d:d2:43:03:4c:ef:12:4a:4e:74:
                    58:80:e0:4c:be:6c:d5:4e:a5:c1:66:ab:93:4d:10:
                    1b:95:f9:bf:d9:1e:35:49:4f:72:d9:f4:ba:9f:ea:
                    09:10:d0:cd:46:d4:70:18:60:20:38:31:ae:c8:3e:
                    82:5e:1a:95:ce:21:bd:4d:08:2c:e9:cd:4f:45:a1:
                    ea:e1:fe:d1:b6:b5:26:8b:01:ed:3c:2e:f3:c9:fe:
                    66:b9:58:c0:2f:28:3b:d8:69:3c:b3:20:79:43:16:
                    b1:37:c7:87:ac:49:d6:36:96:86:93:af:5c:20:bf:
                    72:2f:52:a9:bd:72:35:ca:5a:f7:23:73:c3:3e:68:
                    0b:b4:d4:04:8c:05:3e:f3:09:26:c8:76:29:3a:5a:
                    15:b2:b4:ca:86:e6:1f:6d:ce:07:d5:8e:2e:c9:34:
                    41:6f:ad:4b:30:c8:15:16:57:ee:1a:4c:fb:5b:52:
                    a8:43:d4:c4:7b:85:3e:d9:56:3a:53:3a:c6:f0:ae:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:B1:35:0B:20:88:B5:BB:F3:FF:ED:2E:C1:A6:6D:FE:00:75:82
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:19:7f:56:c4:e7:00:05:3b:f2:3d:f0:a7:b2:7e:f0:8f:87:
         77:ee:ff:85:72:95:34:19:e9:c3:93:70:78:5e:8b:5e:4f:dd:
         12:a7:37:45:8d:54:3c:17:2d:7c:16:a9:6f:39:8c:19:9f:8e:
         fe:00:0e:00:08:5b:05:ba:b9:fa:61:3d:a6:cc:48:a8:87:19:
         a6:a3:83:9c:24:aa:1d:43:9a:fa:51:09:37:c0:63:41:78:01:
         48:bd:48:ad:0b:8b:02:16:aa:e7:0c:d9:8c:7e:50:b4:f9:4e:
         c5:c0:21:13:e2:90:d8:e9:a5:4e:eb:48:f0:4d:ad:fe:9d:2a:
         24:71:b9:8d:27:da:ee:6a:c3:68:e4:3f:22:35:23:13:8e:a8:
         10:62:67:0c:77:cd:00:1c:1b:65:b4:aa:b7:4f:9b:ee:19:fd:
         0d:d2:6f:8c:bb:5f:a3:15:40:30:44:2d:07:a6:d9:d4:76:3b:
         47:5e:4d:9d:c3:1d:14:59:f2:82:d0:8c:58:6e:21:59:f1:65:
         94:f4:c0:da:1f:ff:6b:47:0f:7d:86:9d:1c:ba:14:aa:c7:17:
         ba:65:f5:46:f1:30:ec:cb:8f:a5:a6:81:fe:3e:c8:52:88:37:
         90:3c:1c:d0:34:e4:73:bc:86:7f:5d:47:5f:b4:ff:73:19:7d:
         b7:6e:fd:bc
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUD6m6f46bM7+wTC7brkFMFjN6LvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE0RkE3NDhEQTg0RDQyMUI3MURDMzc2NURCRERERjcw
MzlDQTY4NjAeFw0yNDA0MTUwMDA1MDBaFw0yNDA0MTYwMDEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ5ODc0Q0RCM0Q1OEQ2MEFF
NTM2Mzc0MkI4NzUxNkM5RjQ2OTQ2QzhBMkYxRENCOURBRjY0RTFDREM2RThEMDU3
QzQ5RDJDNDQ0RjRENUE3QkRCMERCNUJFQ0Q4QTAwQjdCRERFNDhENTZDQkM1MjA3
NjkwN0QwRDgxM0ZEODEzREQyNDMwMzRDRUYxMjRBNEU3NDU4ODBFMDRDQkU2Q0Q1
NEVBNUMxNjZBQjkzNEQxMDFCOTVGOUJGRDkxRTM1NDk0RjcyRDlGNEJBOUZFQTA5
MTBEMENENDZENDcwMTg2MDIwMzgzMUFFQzgzRTgyNUUxQTk1Q0UyMUJENEQwODJD
RTlDRDRGNDVBMUVBRTFGRUQxQjZCNTI2OEIwMUVEM0MyRUYzQzlGRTY2Qjk1OEMw
MkYyODNCRDg2OTNDQjMyMDc5NDMxNkIxMzdDNzg3QUM0OUQ2MzY5Njg2OTNBRjVD
MjBCRjcyMkY1MkE5QkQ3MjM1Q0E1QUY3MjM3M0MzM0U2ODBCQjRENDA0OEMwNTNF
RjMwOTI2Qzg3NjI5M0E1QTE1QjJCNENBODZFNjFGNkRDRTA3RDU4RTJFQzkzNDQx
NkZBRDRCMzBDODE1MTY1N0VFMUE0Q0ZCNUI1MkE4NDNENEM0N0I4NTNFRDk1NjNB
NTMzQUM2RjBBRUNGOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxJh0zbPVjWCuU2N0K4dRbJ9GlGyKLx3Lna9k4c3G6NBXxJ0sRE9N
WnvbDbW+zYoAt73eSNVsvFIHaQfQ2BP9gT3SQwNM7xJKTnRYgOBMvmzVTqXBZquT
TRAblfm/2R41SU9y2fS6n+oJENDNRtRwGGAgODGuyD6CXhqVziG9TQgs6c1PRaHq
4f7RtrUmiwHtPC7zyf5muVjALyg72Gk8syB5QxaxN8eHrEnWNpaGk69cIL9yL1Kp
vXI1ylr3I3PDPmgLtNQEjAU+8wkmyHYpOloVsrTKhuYfbc4H1Y4uyTRBb61LMMgV
FlfuGkz7W1KoQ9TEe4U+2VY6UzrG8K7PlwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFlNsTULIIi1u/P/7S7Bpm3+AHWCMB8GA1UdIwQYMBaAFEFPp0jahNQhtx3Ddl29
3fcDnKaGMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzAvNDE0RkE3NDhEQTg0RDQy
MUI3MURDMzc2NURCRERERjcwMzlDQTY4Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MTRGQTc0OERBODRENDIxQjcxREMzNzY1REJERERGNzAzOUNB
Njg2LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX
aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzAvNDE0RkE3NDhEQTg0RDQyMUI3MURD
Mzc2NURCRERERjcwMzlDQTY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAYZf1bE5wAFO/I98KeyfvCP
h3fu/4VylTQZ6cOTcHhei15P3RKnN0WNVDwXLXwWqW85jBmfjv4ADgAIWwW6ufph
PabMSKiHGaajg5wkqh1DmvpRCTfAY0F4AUi9SK0LiwIWqucM2Yx+ULT5TsXAIRPi
kNjppU7rSPBNrf6dKiRxuY0n2u5qw2jkPyI1IxOOqBBiZwx3zQAcG2W0qrdPm+4Z
/Q3Sb4y7X6MVQDBELQem2dR2O0deTZ3DHRRZ8oLQjFhuIVnxZZT0wNof/2tHD32G
nRy6FKrHF7pl9UbxMOzLj6Wmgf4+yFKIN5A8HNA05HO8hn9dR1+0/3MZfbdu/bw=
-----END CERTIFICATE-----