Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.mft
File:                     3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.mft (raw, json)
Hash identifier:          cguHn6FeeFtppsQT8yhoBdRD4w7oHRxvpzPmUtJlMB4=
Subject key identifier:   70:8D:BC:10:58:60:6B:41:B8:9C:87:F7:64:04:19:E4:6B:74:45:91
Authority key identifier: 3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1
Certificate issuer:       /CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
Certificate serial:       1AEFD9227DE2D7DE0E7387D95E576E47168013DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.mft
Manifest number:          3F
Signing time:             Mon 15 Apr 2024 03:11:24 +0000
Manifest this update:     Mon 15 Apr 2024 03:06:24 +0000
Manifest next update:     Tue 16 Apr 2024 04:43:24 +0000
Files and hashes:         1: 3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.crl (hash: zyh7UB2SxX/TspT5Wu3xB9urLpa4z1W3f9XcJy1ozTw=)
                          2: 323830343a6335383a3a2f33322d3333203d3e203532363934.roa (hash: uNyHlwGi1KpO2xRffyTHZLKWMcrTjfYfanhPciSjyk4=)
                          3: 3230302e362e3132382e302f32322d3233203d3e203532363934.roa (hash: h9huqyfjqlUf7ezfzABhjETLp8Ljfm09sh2hoJqJaPs=)
                          4: 3137372e37332e33362e302f32322d3233203d3e203532363934.roa (hash: OA3RKZ2GTys++jdKOYqjD44WnhyMx5YGij4Oqj90Ijg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ef:d9:22:7d:e2:d7:de:0e:73:87:d9:5e:57:6e:47:16:80:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1
        Validity
            Not Before: Apr 15 03:06:24 2024 GMT
            Not After : Apr 16 04:43:24 2024 GMT
        Subject: CN=708DBC1058606B41B89C87F7640419E46B744591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:30:ef:05:9a:d5:e3:09:80:10:e8:be:e2:
                    32:ce:6a:27:f7:7b:a9:02:80:76:ac:18:53:1a:54:
                    b9:82:22:d7:81:c1:ba:2b:48:a9:0d:21:8e:c4:29:
                    50:85:c8:ee:8c:b1:f7:85:7c:06:12:f1:b6:d9:de:
                    b0:67:17:9a:f7:f7:74:65:f8:e6:06:05:d3:91:5b:
                    0a:d7:d1:d0:5d:0f:61:0c:72:15:d5:2f:28:71:4a:
                    7c:40:91:4b:07:49:81:e1:a4:d4:98:c2:05:3b:1b:
                    d7:14:40:ab:8f:bf:db:48:6b:f6:2d:30:5a:e7:e6:
                    67:2b:50:67:92:17:64:06:54:d3:d3:02:b5:f8:a2:
                    b0:34:18:10:ae:19:48:b3:1f:6d:ed:27:25:83:7a:
                    36:ea:b9:d5:b6:46:10:ec:e8:ee:7c:a1:92:79:ae:
                    48:e7:6c:51:23:a6:5d:78:df:de:c4:dd:f2:b5:34:
                    89:01:d0:3f:8b:ce:f9:ab:02:62:ae:b4:b8:41:6f:
                    09:48:19:a8:b0:3b:bd:c9:f0:b8:09:82:97:15:a1:
                    31:4d:af:af:b4:15:92:7a:ca:66:25:78:f5:09:7f:
                    91:83:62:a6:c8:57:f2:ce:90:2d:a4:5d:90:d3:bb:
                    3e:a2:33:49:db:f4:eb:71:3c:6e:41:e0:9f:52:38:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8D:BC:10:58:60:6B:41:B8:9C:87:F7:64:04:19:E4:6B:74:45:91
            X509v3 Authority Key Identifier:
                keyid:3C:EB:A0:D8:B0:1B:41:E6:66:FC:70:F4:AC:5B:0A:B6:99:C6:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3CEBA0D8B01B41E666FC70F4AC5B0AB699C65DA1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:86:56:4e:aa:fc:cb:64:8e:73:4a:94:34:e7:90:e7:9b:
         21:9a:a9:97:02:82:f6:86:5a:70:a3:69:fa:80:0f:75:e0:2d:
         17:fb:4c:a4:42:92:bb:2b:17:3f:2d:21:53:fe:cc:d9:ef:6c:
         33:90:7b:48:92:12:18:cb:d0:90:28:3a:3c:e6:61:0a:41:0f:
         84:6f:82:5a:8c:ff:8d:a7:42:1b:0a:d2:a9:6f:43:c7:fe:1a:
         73:ba:54:36:52:e4:3e:64:ce:15:3b:93:f6:ee:b2:97:2c:8c:
         fc:c8:89:6a:79:c0:00:c2:12:d4:66:bd:fc:d7:be:4b:27:4a:
         97:de:e6:d1:6c:ac:8d:fd:12:fe:5d:0d:ca:31:b5:b7:7f:7a:
         97:cb:d8:2b:4f:66:1b:fd:e4:fd:d1:58:6a:a9:13:e9:6b:ea:
         34:a0:53:2a:97:28:14:3b:23:db:c3:ef:a2:dd:b9:cf:d3:e9:
         bb:8b:1c:cc:80:b0:b9:11:92:41:4b:7d:15:25:69:2c:40:c3:
         36:74:8b:2b:c5:dd:ad:77:85:35:e3:c5:19:7e:f1:3e:7c:0c:
         3e:11:28:23:73:e3:53:ab:de:ec:5a:c0:8d:5e:72:6a:d3:d7:
         27:e4:83:f2:94:fa:f3:79:f9:32:f8:db:fd:07:a3:66:21:84:
         83:ef:27:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGu/ZIn3i194Oc4fZXlduRxaAE9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFQkEwRDhCMDFCNDFFNjY2RkM3MEY0QUM1QjBBQjY5
OUM2NURBMTAeFw0yNDA0MTUwMzA2MjRaFw0yNDA0MTYwNDQzMjRaMDMxMTAvBgNV
BAMTKDcwOERCQzEwNTg2MDZCNDFCODlDODdGNzY0MDQxOUU0NkI3NDQ1OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHzDvBZrV4wmAEOi+4jLOaif3
e6kCgHasGFMaVLmCIteBwborSKkNIY7EKVCFyO6MsfeFfAYS8bbZ3rBnF5r393Rl
+OYGBdORWwrX0dBdD2EMchXVLyhxSnxAkUsHSYHhpNSYwgU7G9cUQKuPv9tIa/Yt
MFrn5mcrUGeSF2QGVNPTArX4orA0GBCuGUizH23tJyWDejbqudW2RhDs6O58oZJ5
rkjnbFEjpl14397E3fK1NIkB0D+LzvmrAmKutLhBbwlIGaiwO73J8LgJgpcVoTFN
r6+0FZJ6ymYlePUJf5GDYqbIV/LOkC2kXZDTuz6iM0nb9OtxPG5B4J9SOOEfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcI28EFhga0G4nIf3ZAQZ5Gt0RZEwHwYDVR0j
BBgwFoAUPOug2LAbQeZm/HD0rFsKtpnGXaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3
cGQvMC8zQ0VCQTBEOEIwMUI0MUU2NjZGQzcwRjRBQzVCMEFCNjk5QzY1REExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRUJBMEQ4QjAxQjQxRTY2
NkZDNzBGNEFDNUIwQUI2OTlDNjVEQTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z
Q0VCQTBEOEIwMUI0MUU2NjZGQzcwRjRBQzVCMEFCNjk5QzY1REExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH7eGVk6q/MtkjnNKlDTnkOebIZqplwKC9oZacKNp+oAPdeAtF/tMpEKSuysX
Py0hU/7M2e9sM5B7SJISGMvQkCg6POZhCkEPhG+CWoz/jadCGwrSqW9Dx/4ac7pU
NlLkPmTOFTuT9u6ylyyM/MiJannAAMIS1Ga9/Ne+SydKl97m0Wysjf0S/l0NyjG1
t396l8vYK09mG/3k/dFYaqkT6WvqNKBTKpcoFDsj28Pvot25z9Ppu4sczICwuRGS
QUt9FSVpLEDDNnSLK8XdrXeFNePFGX7xPnwMPhEoI3PjU6ve7FrAjV5yatPXJ+SD
8pT683n5Mvjb/QejZiGEg+8ngw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org