Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.mft
File:                     21AB0A65EB640BED6DA051750B8F5C71C0B5568D.mft (raw, json)
Hash identifier:          2GRj4ejPDZm0zdf3ydS0abBPUuDEKaXmNN7lasIf5lY=
Subject key identifier:   F3:7A:29:AE:4F:01:DD:DB:0E:DE:03:28:5B:E2:A9:69:87:ED:A4:08
Authority key identifier: 21:AB:0A:65:EB:64:0B:ED:6D:A0:51:75:0B:8F:5C:71:C0:B5:56:8D
Certificate issuer:       /CN=21AB0A65EB640BED6DA051750B8F5C71C0B5568D
Certificate serial:       208DE09DF70F44A19C9441F889E398354D29BC12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.mft
Manifest number:          01DB
Signing time:             Fri 25 Aug 2023 00:11:33 +0000
Manifest this update:     Fri 25 Aug 2023 00:06:33 +0000
Manifest next update:     Sat 26 Aug 2023 04:04:33 +0000
Files and hashes:         1: 3137392e34382e3230382e302f32322d3234203d3e20323731303939.roa (hash: pVw2D1gg5z+9c2RSAEMTZHyRrMOqKHQgFX9vmLN00+g=)
                          2: 21AB0A65EB640BED6DA051750B8F5C71C0B5568D.crl (hash: FNY+/BBZuz80Ud4l2nAVvCjArxKC5n/Kinrv+quN0EU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8d:e0:9d:f7:0f:44:a1:9c:94:41:f8:89:e3:98:35:4d:29:bc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB0A65EB640BED6DA051750B8F5C71C0B5568D
        Validity
            Not Before: Aug 25 00:06:33 2023 GMT
            Not After : Aug 26 04:04:33 2023 GMT
        Subject: CN=F37A29AE4F01DDDB0EDE03285BE2A96987EDA408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:2c:1f:b6:2f:0c:67:17:df:e7:6d:24:7e:
                    95:57:88:1a:c1:9f:ba:b9:15:25:3f:7a:72:ca:05:
                    92:cf:71:55:5d:16:aa:69:08:c4:0d:c3:b9:0f:89:
                    21:69:4c:e4:29:73:d9:29:0a:02:4f:05:35:aa:65:
                    c9:8c:24:ea:b3:fe:f0:5f:ae:c8:de:67:2c:a1:1d:
                    59:bb:c4:77:73:c2:37:74:31:99:aa:30:b0:c5:e5:
                    e6:f7:d8:8c:dc:b5:61:ad:cd:06:d0:78:4f:03:06:
                    44:93:a3:0c:de:71:1e:17:f9:f9:bd:b7:c4:bb:a8:
                    61:84:be:5d:d6:49:6c:8f:61:6e:4d:f0:75:00:70:
                    7a:71:e3:e7:2a:74:fe:6a:59:7c:2a:26:42:c0:03:
                    94:ee:a6:3e:cd:d3:10:75:28:f2:65:73:8e:b5:14:
                    06:50:54:ce:f1:8a:db:28:1c:12:6d:3d:05:84:81:
                    00:41:6c:60:73:0e:47:e3:76:b0:dc:f2:f8:28:9e:
                    29:31:2f:c3:18:eb:ee:0e:69:33:43:2c:12:06:26:
                    d2:cd:47:ee:e5:18:89:fe:08:4e:a1:ab:e6:2d:9b:
                    6c:30:8a:d4:88:ff:a3:34:cb:ac:4f:66:39:67:85:
                    f1:c9:84:a4:2d:46:74:33:7c:16:35:07:a4:ad:33:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:29:AE:4F:01:DD:DB:0E:DE:03:28:5B:E2:A9:69:87:ED:A4:08
            X509v3 Authority Key Identifier:
                keyid:21:AB:0A:65:EB:64:0B:ED:6D:A0:51:75:0B:8F:5C:71:C0:B5:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:23:ff:57:bd:9f:9e:f1:cd:a1:5e:6e:b2:ce:7e:24:49:03:
         bb:9d:17:7b:3b:5e:73:af:53:ec:c2:25:7a:8a:3b:1e:12:9f:
         e9:23:3f:61:46:56:22:40:e6:4d:dc:10:25:cc:38:ce:4f:34:
         12:fd:10:9c:4d:1e:99:8c:3f:ce:43:89:23:b9:2f:e2:d2:3d:
         22:c1:d7:a5:ea:33:43:5c:0f:e3:6e:4e:2c:cf:29:6b:c4:d1:
         73:89:94:d6:c3:6c:7f:5c:1c:77:4c:5f:bf:da:68:29:d8:ca:
         00:78:88:64:a6:c3:58:77:17:73:c1:c2:aa:88:54:c9:66:63:
         e9:6c:04:87:0f:f6:52:47:d0:2b:36:ca:65:06:68:ce:c3:94:
         e8:81:f3:43:94:fa:b5:c7:ba:81:6b:fc:83:2c:f3:6d:1d:e2:
         37:8e:d4:3f:ca:15:d0:27:dd:de:e6:8c:94:eb:20:08:81:cb:
         75:ee:18:92:8c:a8:95:d6:59:18:fc:d9:b7:19:d2:04:00:fc:
         ed:fe:3a:64:c9:f6:a1:66:23:e1:ee:c1:6f:88:81:53:ad:12:
         31:23:9f:18:7b:6d:b7:79:7f:c9:11:36:86:be:ee:7b:20:b1:
         d4:b1:7f:31:64:15:d4:ce:ef:1c:b6:2a:7f:e4:ff:8e:73:ef:
         51:2a:65:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUII3gnfcPRKGclEH4ieOYNU0pvBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBQjBBNjVFQjY0MEJFRDZEQTA1MTc1MEI4RjVDNzFD
MEI1NTY4RDAeFw0yMzA4MjUwMDA2MzNaFw0yMzA4MjYwNDA0MzNaMDMxMTAvBgNV
BAMTKEYzN0EyOUFFNEYwMUREREIwRURFMDMyODVCRTJBOTY5ODdFREE0MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltiwfti8MZxff520kfpVXiBrB
n7q5FSU/enLKBZLPcVVdFqppCMQNw7kPiSFpTOQpc9kpCgJPBTWqZcmMJOqz/vBf
rsjeZyyhHVm7xHdzwjd0MZmqMLDF5eb32IzctWGtzQbQeE8DBkSTowzecR4X+fm9
t8S7qGGEvl3WSWyPYW5N8HUAcHpx4+cqdP5qWXwqJkLAA5Tupj7N0xB1KPJlc461
FAZQVM7xitsoHBJtPQWEgQBBbGBzDkfjdrDc8vgonikxL8MY6+4OaTNDLBIGJtLN
R+7lGIn+CE6hq+Ytm2wwitSI/6M0y6xPZjlnhfHJhKQtRnQzfBY1B6StM6fdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU83oprk8B3dsO3gMoW+KpaYftpAgwHwYDVR0j
BBgwFoAUIasKZetkC+1toFF1C49cccC1Vo0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWV6VlI3WGpFTUJTQU1wdFlhOXBxOGl6UURaMXh4dUtzc1RFOGk0blVk
Qm4vMC8yMUFCMEE2NUVCNjQwQkVENkRBMDUxNzUwQjhGNUM3MUMwQjU1NjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQUIwQTY1RUI2NDBCRUQ2
REEwNTE3NTBCOEY1QzcxQzBCNTU2OEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWV6VlI3WGpFTUJTQU1wdFlhOXBxOGl6UURaMXh4dUtzc1RFOGk0blVkQm4vMC8y
MUFCMEE2NUVCNjQwQkVENkRBMDUxNzUwQjhGNUM3MUMwQjU1NjhELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUiP/V72fnvHNoV5uss5+JEkDu50Xeztec69T7MIleoo7HhKf6SM/YUZWIkDm
TdwQJcw4zk80Ev0QnE0emYw/zkOJI7kv4tI9IsHXpeozQ1wP425OLM8pa8TRc4mU
1sNsf1wcd0xfv9poKdjKAHiIZKbDWHcXc8HCqohUyWZj6WwEhw/2UkfQKzbKZQZo
zsOU6IHzQ5T6tce6gWv8gyzzbR3iN47UP8oV0Cfd3uaMlOsgCIHLde4YkoyoldZZ
GPzZtxnSBAD87f46ZMn2oWYj4e7Bb4iBU60SMSOfGHttt3l/yRE2hr7ueyCx1LF/
MWQV1M7vHLYqf+T/jnPvUSplLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org