Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.mft
File:                     9830096CEE8970F0B235CCA769E85A3CC1C70EC9.mft (raw, json)
Hash identifier:          QDSWINgNyI05n1wFYXABJXEzZYDo2nICOthPXqjjvlg=
Subject key identifier:   4A:AD:D1:E6:C0:21:B7:36:09:C5:FE:DF:11:04:35:A2:A0:78:0A:F5
Authority key identifier: 98:30:09:6C:EE:89:70:F0:B2:35:CC:A7:69:E8:5A:3C:C1:C7:0E:C9
Certificate issuer:       /CN=9830096CEE8970F0B235CCA769E85A3CC1C70EC9
Certificate serial:       59DD30B67DDE78C67636F6B046CC14FDBCF15EAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.mft
Manifest number:          AF
Signing time:             Mon 15 Apr 2024 10:57:09 +0000
Manifest this update:     Mon 15 Apr 2024 10:52:09 +0000
Manifest next update:     Tue 16 Apr 2024 12:50:09 +0000
Files and hashes:         1: 323830343a343134303a3a2f33322d3332203d3e20323637343233.roa (hash: Lrift257jHXduBGtQkBYeriSTT8kfafJOkKzzsKuWYk=)
                          2: 323830343a343134303a3a2f33342d3334203d3e20323637343233.roa (hash: Yl4TrxJo8WDAPhaZwSOu2bpUExNqJkNXAwpwkH3BUso=)
                          3: 3138312e3139312e3131372e302f32342d3234203d3e20323637343233.roa (hash: +ij9tWCKMIb6mp5l2ivlysocyujciw/BJu88AO6cLFs=)
                          4: 323830343a343134303a343030303a3a2f33342d3334203d3e20323637343233.roa (hash: o1waZRlkzlRhq9DI18ugQs9Yeimqgi2KpTLy+knILP0=)
                          5: 9830096CEE8970F0B235CCA769E85A3CC1C70EC9.crl (hash: AxiSREhhXQ6QxWC/s32F2ZQGGcrL+xnAuc6OiRyw0d0=)
                          6: 3138312e3139312e3131362e302f32342d3234203d3e20323637343233.roa (hash: tsDqImssJKgwbkg4S6eZBiiTiZETkFBD2bhHXoUUwb8=)
                          7: 3138312e3139312e3131392e302f32342d3234203d3e20323637343233.roa (hash: 3nf5kuBdvMoS3XxAuGX4LCJQABF2bLFqAQdMC1yvUTQ=)
                          8: 3138312e3139312e3131382e302f32342d3234203d3e20323637343233.roa (hash: GZxdbORLU3IXq+0e0GUv4Ok1X2RHF4eyGEc9Z4+t45w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dd:30:b6:7d:de:78:c6:76:36:f6:b0:46:cc:14:fd:bc:f1:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9830096CEE8970F0B235CCA769E85A3CC1C70EC9
        Validity
            Not Before: Apr 15 10:52:09 2024 GMT
            Not After : Apr 16 12:50:09 2024 GMT
        Subject: CN=4AADD1E6C021B73609C5FEDF110435A2A0780AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:4e:87:97:82:e5:63:12:0a:80:fa:6b:56:
                    45:9f:57:fc:57:87:5f:8a:56:d9:63:09:b5:d1:12:
                    a6:d4:2d:cf:44:59:44:32:86:d3:97:0d:66:13:05:
                    34:d9:52:76:44:18:04:4b:d4:22:3b:87:45:d4:72:
                    05:e7:49:bd:40:8b:6d:73:df:07:04:13:bc:60:05:
                    51:de:25:49:73:09:83:f1:67:41:06:66:a0:a3:b8:
                    db:51:92:6c:1c:4a:da:3e:1d:88:54:5d:49:88:b8:
                    15:a5:4b:54:e8:b0:56:db:65:80:41:2b:2d:70:36:
                    7c:10:dc:f0:ce:58:29:38:85:92:5b:52:05:f3:c6:
                    59:25:f3:f1:e5:40:83:d9:f2:3e:99:84:d8:47:64:
                    fd:66:f8:a0:a2:58:aa:ca:47:d8:5c:9b:42:2d:bb:
                    a5:f4:27:19:c0:16:fc:e3:ed:21:f4:76:cd:b4:1b:
                    3c:94:c0:9f:72:51:a3:fd:f8:4a:18:50:6c:d4:f6:
                    f9:23:cc:41:df:2d:ad:a9:c5:f7:1b:1d:29:e4:59:
                    dc:22:da:68:38:c6:a6:8f:37:bb:60:69:c6:29:0d:
                    3d:30:bc:ee:4a:09:84:16:87:72:eb:fb:f1:5a:66:
                    67:6b:bc:4c:d1:95:cf:ef:14:d7:af:f0:68:ea:1d:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:D1:E6:C0:21:B7:36:09:C5:FE:DF:11:04:35:A2:A0:78:0A:F5
            X509v3 Authority Key Identifier:
                keyid:98:30:09:6C:EE:89:70:F0:B2:35:CC:A7:69:E8:5A:3C:C1:C7:0E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/9830096CEE8970F0B235CCA769E85A3CC1C70EC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:ae:ca:59:c6:bb:37:e2:5b:fe:9c:b0:27:c7:ea:81:98:
         dd:f2:ae:cc:5c:5a:c4:c2:cd:f8:de:7e:b2:8b:a4:2b:33:fb:
         c7:49:d6:95:8f:16:ba:a4:57:88:66:5b:82:3d:ea:8d:4c:55:
         0a:f8:c7:67:7d:06:6b:4b:18:53:5a:f1:4c:09:04:4b:70:f4:
         6b:ca:0d:27:7b:30:0c:32:a2:82:72:cb:7c:e5:34:e7:70:7a:
         11:09:8c:b9:f8:10:e9:dd:89:cb:8c:48:38:26:85:8a:0e:6b:
         19:6d:d9:e4:58:ec:77:4c:d8:da:a9:bd:46:16:e4:72:1f:e3:
         e5:bf:3f:cb:5d:d6:2f:e8:b3:42:41:3c:81:9f:11:97:38:eb:
         c7:8a:90:a1:b6:30:0e:5e:50:a1:fa:6b:9f:1b:fa:1c:82:cc:
         e8:3f:41:79:3c:6e:02:1d:d0:83:81:8f:b6:58:56:f2:c6:06:
         89:28:01:ff:33:18:d0:24:c3:6f:49:52:04:63:63:26:54:4a:
         f4:d5:da:8d:b8:da:7d:1f:25:af:f6:58:c0:91:68:56:e8:3d:
         c3:2a:08:e8:27:a2:6b:75:bb:aa:2b:91:89:9d:d8:f8:1a:2b:
         0c:8f:39:51:22:f3:fc:ab:6a:49:d2:78:04:94:3a:b5:7b:79:
         6f:cf:fe:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWd0wtn3eeMZ2NvawRswU/bzxXqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMDA5NkNFRTg5NzBGMEIyMzVDQ0E3NjlFODVBM0ND
MUM3MEVDOTAeFw0yNDA0MTUxMDUyMDlaFw0yNDA0MTYxMjUwMDlaMDMxMTAvBgNV
BAMTKDRBQUREMUU2QzAyMUI3MzYwOUM1RkVERjExMDQzNUEyQTA3ODBBRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK06Hl4LlYxIKgPprVkWfV/xX
h1+KVtljCbXREqbULc9EWUQyhtOXDWYTBTTZUnZEGARL1CI7h0XUcgXnSb1Ai21z
3wcEE7xgBVHeJUlzCYPxZ0EGZqCjuNtRkmwcSto+HYhUXUmIuBWlS1TosFbbZYBB
Ky1wNnwQ3PDOWCk4hZJbUgXzxlkl8/HlQIPZ8j6ZhNhHZP1m+KCiWKrKR9hcm0It
u6X0JxnAFvzj7SH0ds20GzyUwJ9yUaP9+EoYUGzU9vkjzEHfLa2pxfcbHSnkWdwi
2mg4xqaPN7tgacYpDT0wvO5KCYQWh3Lr+/FaZmdrvEzRlc/vFNev8GjqHTC1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSq3R5sAhtzYJxf7fEQQ1oqB4CvUwHwYDVR0j
BBgwFoAUmDAJbO6JcPCyNcynaehaPMHHDskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkFQUUJjWk43VVVhVVNkRjlDWDh2Q0NIeGdia3FrbXZCWk5VaTFhcHFn
TDIvMC85ODMwMDk2Q0VFODk3MEYwQjIzNUNDQTc2OUU4NUEzQ0MxQzcwRUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4MzAwOTZDRUU4OTcwRjBC
MjM1Q0NBNzY5RTg1QTNDQzFDNzBFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkFQUUJjWk43VVVhVVNkRjlDWDh2Q0NIeGdia3FrbXZCWk5VaTFhcHFnTDIvMC85
ODMwMDk2Q0VFODk3MEYwQjIzNUNDQTc2OUU4NUEzQ0MxQzcwRUM5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX3OuylnGuzfiW/6csCfH6oGY3fKuzFxaxMLN+N5+soukKzP7x0nWlY8WuqRX
iGZbgj3qjUxVCvjHZ30Ga0sYU1rxTAkES3D0a8oNJ3swDDKignLLfOU053B6EQmM
ufgQ6d2Jy4xIOCaFig5rGW3Z5Fjsd0zY2qm9Rhbkch/j5b8/y13WL+izQkE8gZ8R
lzjrx4qQobYwDl5Qofprnxv6HILM6D9BeTxuAh3Qg4GPtlhW8sYGiSgB/zMY0CTD
b0lSBGNjJlRK9NXajbjafR8lr/ZYwJFoVug9wyoI6Ceia3W7qiuRiZ3Y+BorDI85
USLz/KtqSdJ4BJQ6tXt5b8/+RA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org