Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.mft
File:                     C25D54891EA6F0D39D38CB43F32502E47F952DA3.mft (raw, json)
Hash identifier:          dbXwiQ5iMMc3Ufu6xEt/0JdKQp7KaPOt9P64/W0ZVg4=
Subject key identifier:   59:3C:DE:5B:AD:7F:9C:34:CE:0C:36:34:33:FE:E4:9A:49:FB:92:A7
Authority key identifier: C2:5D:54:89:1E:A6:F0:D3:9D:38:CB:43:F3:25:02:E4:7F:95:2D:A3
Certificate issuer:       /CN=C25D54891EA6F0D39D38CB43F32502E47F952DA3
Certificate serial:       1BC4E93843238569E19AE35EFDAAD456EDA42B88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.mft
Manifest number:          0134
Signing time:             Mon 15 Apr 2024 06:43:05 +0000
Manifest this update:     Mon 15 Apr 2024 06:38:05 +0000
Manifest next update:     Tue 16 Apr 2024 10:19:05 +0000
Files and hashes:         1: C25D54891EA6F0D39D38CB43F32502E47F952DA3.crl (hash: ie4eIZAGtiR48Et1FQpujHDeGaZdn4IslPZiprTE28M=)
                          2: 34352e3138312e39362e302f32322d3332203d3e20323639313739.roa (hash: VQNoINtL18sW1AqK75ZSCOGANus3PKvk+DnIgGuP14o=)
                          3: 323830343a363039383a3a2f33322d313238203d3e20323639313739.roa (hash: nW32MjOBcGxiiD73D40HGkN2xCbJpHT796jK6SiapvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c4:e9:38:43:23:85:69:e1:9a:e3:5e:fd:aa:d4:56:ed:a4:2b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25D54891EA6F0D39D38CB43F32502E47F952DA3
        Validity
            Not Before: Apr 15 06:38:05 2024 GMT
            Not After : Apr 16 10:19:05 2024 GMT
        Subject: CN=593CDE5BAD7F9C34CE0C363433FEE49A49FB92A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:47:80:52:49:e4:b4:3b:6f:bc:4c:58:4c:
                    e7:d0:87:8a:bb:6d:8c:7f:5e:4e:6d:51:1e:46:cb:
                    fd:37:9b:b9:eb:c5:1a:8a:5a:0a:34:7c:dc:9c:3f:
                    8d:0e:e5:f1:5d:06:79:1a:a3:e8:48:4e:88:aa:c2:
                    a3:80:db:a6:96:12:0e:cc:83:a2:87:c6:b1:f1:cc:
                    68:b5:55:fe:fd:2c:64:8a:fe:56:4f:d0:a5:78:58:
                    65:95:47:30:71:db:63:35:d2:ca:55:99:35:f0:7c:
                    8a:a9:27:e3:5c:ac:c1:56:21:62:1a:a6:c6:3a:ef:
                    eb:d2:d3:5a:31:20:cf:b2:9f:fc:77:6e:1f:c5:5b:
                    34:21:1a:7e:57:e7:34:6c:4f:75:bf:f0:c4:2a:86:
                    61:92:c6:2e:ca:5c:50:1c:af:a1:b0:0a:8f:41:de:
                    d9:af:42:b2:68:fa:1b:e9:50:1b:04:23:ac:f2:08:
                    cb:16:8c:35:52:61:af:d2:77:68:f2:c1:22:9f:34:
                    db:00:e8:62:86:12:ef:30:f3:54:ec:38:30:2d:96:
                    e5:bd:a5:d5:50:8d:d8:b0:7a:f4:52:c6:b2:c2:5e:
                    1c:85:d5:7d:a6:f8:2c:35:57:da:1c:2e:24:ad:59:
                    2d:93:ad:79:ab:b6:71:57:6c:d1:f5:5d:25:5a:d2:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3C:DE:5B:AD:7F:9C:34:CE:0C:36:34:33:FE:E4:9A:49:FB:92:A7
            X509v3 Authority Key Identifier:
                keyid:C2:5D:54:89:1E:A6:F0:D3:9D:38:CB:43:F3:25:02:E4:7F:95:2D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:83:07:fa:a3:14:ab:09:e3:14:b8:91:4b:44:d5:2f:52:10:
         88:7b:83:0c:96:8f:6d:e8:61:32:4b:ea:88:48:8b:54:c6:a0:
         23:6c:49:ab:9a:71:ed:e9:76:ec:66:57:b1:e4:e0:7d:39:26:
         69:b0:8d:7d:f3:96:d1:67:d5:f7:11:85:6a:d1:43:e3:47:af:
         74:83:dd:e3:37:fe:0e:11:95:b8:56:e3:20:49:de:ad:26:8e:
         90:ea:47:f7:ef:c5:f7:aa:be:5c:b2:91:63:4e:53:a6:4e:45:
         ca:f8:5d:22:e5:b5:68:ad:71:38:48:9e:d0:7f:bb:e0:03:96:
         a9:7e:73:4a:ba:f2:d2:6c:f5:5a:7e:9b:db:64:2c:b2:23:6d:
         08:6e:74:67:43:b8:5c:d9:81:59:c3:02:83:80:10:ac:13:91:
         13:0b:80:43:8a:ed:28:00:46:50:11:cc:70:cb:58:8f:b3:c8:
         5c:bd:57:2f:93:8b:41:11:36:45:ed:7b:b0:17:f4:54:c4:0f:
         d2:3c:0a:e7:e8:20:98:c3:aa:8b:42:7a:11:34:0b:77:c1:3d:
         b6:ce:f4:ab:a6:60:fd:9e:01:0f:3c:db:c4:3d:ff:ed:fc:91:
         e2:2e:4f:13:d9:e5:ae:62:8e:bb:8d:c2:e3:41:58:54:20:d7:
         d7:98:06:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG8TpOEMjhWnhmuNe/arUVu2kK4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1RDU0ODkxRUE2RjBEMzlEMzhDQjQzRjMyNTAyRTQ3
Rjk1MkRBMzAeFw0yNDA0MTUwNjM4MDVaFw0yNDA0MTYxMDE5MDVaMDMxMTAvBgNV
BAMTKDU5M0NERTVCQUQ3RjlDMzRDRTBDMzYzNDMzRkVFNDlBNDlGQjkyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EEeAUknktDtvvExYTOfQh4q7
bYx/Xk5tUR5Gy/03m7nrxRqKWgo0fNycP40O5fFdBnkao+hIToiqwqOA26aWEg7M
g6KHxrHxzGi1Vf79LGSK/lZP0KV4WGWVRzBx22M10spVmTXwfIqpJ+NcrMFWIWIa
psY67+vS01oxIM+yn/x3bh/FWzQhGn5X5zRsT3W/8MQqhmGSxi7KXFAcr6GwCo9B
3tmvQrJo+hvpUBsEI6zyCMsWjDVSYa/Sd2jywSKfNNsA6GKGEu8w81TsODAtluW9
pdVQjdiwevRSxrLCXhyF1X2m+Cw1V9ocLiStWS2TrXmrtnFXbNH1XSVa0ielAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWTzeW61/nDTODDY0M/7kmkn7kqcwHwYDVR0j
BBgwFoAUwl1UiR6m8NOdOMtD8yUC5H+VLaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNDVkZOaFBHVDhObnFzRkhBVlA5M0N3NXBlc3NnSG5MQ0dDTG1WajNj
d0wvMC9DMjVENTQ4OTFFQTZGMEQzOUQzOENCNDNGMzI1MDJFNDdGOTUyREEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyNUQ1NDg5MUVBNkYwRDM5
RDM4Q0I0M0YzMjUwMkU0N0Y5NTJEQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkNDVkZOaFBHVDhObnFzRkhBVlA5M0N3NXBlc3NnSG5MQ0dDTG1WajNjd0wvMC9D
MjVENTQ4OTFFQTZGMEQzOUQzOENCNDNGMzI1MDJFNDdGOTUyREEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMYMH+qMUqwnjFLiRS0TVL1IQiHuDDJaPbehhMkvqiEiLVMagI2xJq5px7el2
7GZXseTgfTkmabCNffOW0WfV9xGFatFD40evdIPd4zf+DhGVuFbjIEnerSaOkOpH
9+/F96q+XLKRY05Tpk5FyvhdIuW1aK1xOEie0H+74AOWqX5zSrry0mz1Wn6b22Qs
siNtCG50Z0O4XNmBWcMCg4AQrBOREwuAQ4rtKABGUBHMcMtYj7PIXL1XL5OLQRE2
Re17sBf0VMQP0jwK5+ggmMOqi0J6ETQLd8E9ts70q6Zg/Z4BDzzbxD3/7fyR4i5P
E9nlrmKOu43C40FYVCDX15gGMQ==
-----END CERTIFICATE-----