Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.mft
File:                     91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.mft (raw, json)
Hash identifier:          JAJMsdPBU+5ztrt+OT0SbHdQh2KmzPADRW64tbMTOAI=
Subject key identifier:   87:A7:35:24:A0:1F:B2:09:41:A7:02:74:68:B7:99:92:B7:20:17:B8
Authority key identifier: 91:CB:9D:27:C1:D3:48:1E:A1:B3:AC:A9:68:F6:AD:32:8F:74:5A:99
Certificate issuer:       /CN=91CB9D27C1D3481EA1B3ACA968F6AD328F745A99
Certificate serial:       67D366F681C07C0654F0C1A093889891E5A96E7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.mft
Manifest number:          0390
Signing time:             Wed 24 May 2023 20:27:11 +0000
Manifest this update:     Wed 24 May 2023 20:22:11 +0000
Manifest next update:     Thu 25 May 2023 22:31:11 +0000
Files and hashes:         1: 323830343a363535383a3a2f33322d3334203d3e20323639343834.roa (hash: 89Ax9aE2I0Kol69I6qijxM1IFReAGN//urkGJeErZQ4=)
                          2: 91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.crl (hash: cZJsg3aOh8P5SOTjxHBr9i/Pt1fuqZpNLQsdTcfhAdY=)
                          3: 34352e3138372e34302e302f32322d3234203d3e20323639343834.roa (hash: Z0OUOOKB7EQz9KswXEYyRgBDUb4NnVkN5jm4rJta1bw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d3:66:f6:81:c0:7c:06:54:f0:c1:a0:93:88:98:91:e5:a9:6e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CB9D27C1D3481EA1B3ACA968F6AD328F745A99
        Validity
            Not Before: May 24 20:22:11 2023 GMT
            Not After : May 25 22:31:11 2023 GMT
        Subject: CN=87A73524A01FB20941A7027468B79992B72017B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:6f:ad:e8:a7:8c:94:bf:09:7c:5f:11:38:
                    8d:6a:57:06:1b:cf:89:a9:2b:dd:2c:12:31:e9:c9:
                    25:a7:b0:d1:bd:62:06:3d:7e:fd:36:40:63:e2:0d:
                    a5:8c:34:ea:20:23:00:8e:2d:e5:83:bd:2c:2d:85:
                    db:61:cf:b7:5a:cd:b8:1c:78:02:77:36:4f:fa:ca:
                    82:55:1f:83:9a:22:45:f3:a0:0e:55:b7:7c:35:6e:
                    03:f2:06:b5:28:a4:22:17:46:19:45:46:ef:f6:48:
                    69:d1:a7:8a:ad:4c:18:05:2a:83:27:1d:47:61:1e:
                    65:6a:a5:e2:62:62:9e:f4:7d:5d:cd:5e:18:29:34:
                    c3:31:1a:3f:cf:f1:05:a9:1d:d8:dc:b8:e5:a0:1c:
                    5b:4b:5c:5a:9f:ba:1d:c5:b8:40:a7:91:2c:05:b7:
                    ba:b3:46:84:b5:05:59:30:77:ab:02:bc:55:77:09:
                    12:bf:4d:ec:f4:f4:d1:dc:a5:a3:0e:c8:d8:74:a1:
                    46:ec:c8:6a:80:7e:ca:14:69:3b:e4:11:e9:2e:16:
                    11:54:8c:51:0b:e2:53:ce:76:e9:db:51:bd:ec:b8:
                    0d:82:1b:b0:84:77:cc:8d:71:03:9b:12:2e:f0:5c:
                    2d:7d:c0:78:9f:e1:0e:57:56:59:ef:e2:82:8d:f2:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:35:24:A0:1F:B2:09:41:A7:02:74:68:B7:99:92:B7:20:17:B8
            X509v3 Authority Key Identifier:
                keyid:91:CB:9D:27:C1:D3:48:1E:A1:B3:AC:A9:68:F6:AD:32:8F:74:5A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:37:b9:67:fc:b3:33:fd:aa:3d:ad:0c:1c:dc:00:6b:25:
         83:ed:18:6a:b9:ee:af:90:68:21:fc:ac:67:77:c9:65:50:a7:
         dc:41:59:f1:98:72:13:07:6f:1b:41:98:c3:67:90:45:e0:de:
         02:3a:b7:a7:df:13:bd:ec:cc:5a:75:61:98:1b:9d:36:d6:17:
         93:9e:63:2c:72:9d:09:8e:a3:89:32:37:80:ba:7c:c3:8c:67:
         9b:60:9a:4d:0e:5f:45:0c:f3:a7:82:bd:12:c9:89:33:53:d7:
         cd:e0:59:bb:71:b1:22:89:a9:ae:68:63:d5:35:b6:ed:fa:5c:
         28:88:ec:61:c9:b2:6a:57:8c:ea:28:e3:0c:38:e8:3c:f9:dc:
         df:87:fa:83:23:93:9a:2b:83:df:9d:57:b3:87:3a:19:cc:bf:
         39:87:ca:2c:82:2d:67:68:89:ba:44:d2:a9:d2:96:54:60:4f:
         6a:3f:a8:67:87:67:97:fd:38:a5:56:87:5f:e3:55:05:8c:4c:
         c1:89:8d:95:00:d4:7f:55:60:e7:11:98:e0:0f:1a:47:ea:0e:
         8e:c6:10:6c:6e:5b:f1:5b:2f:97:6b:d5:34:91:1d:f8:16:18:
         8e:10:50:4b:dc:34:d4:a3:9d:db:db:f0:60:9d:d0:af:a1:40:
         00:9e:5c:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZ9Nm9oHAfAZU8MGgk4iYkeWpbnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDQjlEMjdDMUQzNDgxRUExQjNBQ0E5NjhGNkFEMzI4
Rjc0NUE5OTAeFw0yMzA1MjQyMDIyMTFaFw0yMzA1MjUyMjMxMTFaMDMxMTAvBgNV
BAMTKDg3QTczNTI0QTAxRkIyMDk0MUE3MDI3NDY4Qjc5OTkyQjcyMDE3QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOm+t6KeMlL8JfF8ROI1qVwYb
z4mpK90sEjHpySWnsNG9YgY9fv02QGPiDaWMNOogIwCOLeWDvSwthdthz7dazbgc
eAJ3Nk/6yoJVH4OaIkXzoA5Vt3w1bgPyBrUopCIXRhlFRu/2SGnRp4qtTBgFKoMn
HUdhHmVqpeJiYp70fV3NXhgpNMMxGj/P8QWpHdjcuOWgHFtLXFqfuh3FuECnkSwF
t7qzRoS1BVkwd6sCvFV3CRK/Tez09NHcpaMOyNh0oUbsyGqAfsoUaTvkEekuFhFU
jFEL4lPOdunbUb3suA2CG7CEd8yNcQObEi7wXC19wHif4Q5XVlnv4oKN8ncLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUh6c1JKAfsglBpwJ0aLeZkrcgF7gwHwYDVR0j
BBgwFoAUkcudJ8HTSB6hs6ypaPatMo90WpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2
VWIvMC85MUNCOUQyN0MxRDM0ODFFQTFCM0FDQTk2OEY2QUQzMjhGNzQ1QTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkxQ0I5RDI3QzFEMzQ4MUVB
MUIzQUNBOTY4RjZBRDMyOEY3NDVBOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWs1UXY4MkFCa3ZkOFpETTh1TVlpdGtnaE1uOEpBMUhDakdzUTl4NjU2VWIvMC85
MUNCOUQyN0MxRDM0ODFFQTFCM0FDQTk2OEY2QUQzMjhGNzQ1QTk5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOEo3uWf8szP9qj2tDBzcAGslg+0Yarnur5BoIfysZ3fJZVCn3EFZ8ZhyEwdv
G0GYw2eQReDeAjq3p98TvezMWnVhmBudNtYXk55jLHKdCY6jiTI3gLp8w4xnm2Ca
TQ5fRQzzp4K9EsmJM1PXzeBZu3GxIomprmhj1TW27fpcKIjsYcmyaleM6ijjDDjo
PPnc34f6gyOTmiuD351Xs4c6Gcy/OYfKLIItZ2iJukTSqdKWVGBPaj+oZ4dnl/04
pVaHX+NVBYxMwYmNlQDUf1Vg5xGY4A8aR+oOjsYQbG5b8Vsvl2vVNJEd+BYYjhBQ
S9w01KOd29vwYJ3Qr6FAAJ5cIA==
-----END CERTIFICATE-----