Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.mft
File:                     39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.mft (raw, json)
Hash identifier:          3Nhlr9e8PlJ6+aFTgjW1wUbJ0Tum5s50+2D5b6THqDY=
Subject key identifier:   49:4A:98:53:24:22:C3:3F:5F:05:24:B9:88:07:A9:EF:4A:C9:34:79
Authority key identifier: 39:E8:5F:0F:E1:36:3D:1C:06:C5:87:48:6E:ED:D5:B3:62:BE:6A:F8
Certificate issuer:       /CN=39E85F0FE1363D1C06C587486EEDD5B362BE6AF8
Certificate serial:       4F2E91221CC902720639ACEE20A82A148F9B44CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.mft
Manifest number:          0115
Signing time:             Fri 13 Dec 2024 03:31:20 +0000
Manifest this update:     Fri 13 Dec 2024 03:26:20 +0000
Manifest next update:     Sat 14 Dec 2024 04:45:20 +0000
Files and hashes:         1: 39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.crl (hash: fj9zLe9kK5nbmehyJ3p+yFRXXlIjJC8mcVBdozkCglk=)
                          2: 34352e3137332e3232302e302f32322d3234203d3e20323638383239.roa (hash: mqQ3WWWgNLefjJ0PlEn28PP6NUOLc15a++0RklWEvPU=)
                          3: 34352e3232392e3230302e302f32322d3234203d3e20323638383239.roa (hash: 4K91C6ZJK1zp+9tGNTqzoZqSNXJVYfIHheancklrji0=)
                          4: 323830343a356234303a3a2f33322d313238203d3e20323638383239.roa (hash: 6F9VxEwYbXMAK/f2fdAaow+YSp1VhZ72hJaGExe+K0M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2e:91:22:1c:c9:02:72:06:39:ac:ee:20:a8:2a:14:8f:9b:44:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E85F0FE1363D1C06C587486EEDD5B362BE6AF8
        Validity
            Not Before: Dec 13 03:26:20 2024 GMT
            Not After : Dec 14 04:45:20 2024 GMT
        Subject: CN=494A98532422C33F5F0524B98807A9EF4AC93479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:bd:6c:3e:e7:ac:4d:85:a9:01:ef:3e:8f:
                    99:06:5c:fc:21:c4:a8:90:e9:b3:e6:ef:1e:6f:7d:
                    e3:42:a8:94:f2:3d:f0:ad:a9:7d:9c:e3:88:03:91:
                    52:88:00:d3:c9:59:f3:ef:5c:2a:03:a7:c3:76:98:
                    78:cf:30:a9:e6:da:cd:c8:24:76:81:25:ef:10:fd:
                    a8:73:d7:57:6e:73:90:b3:d4:73:60:8a:58:05:ee:
                    0a:3e:b0:35:2d:e4:05:2a:30:cd:2c:97:22:df:5b:
                    ac:82:65:8f:1c:de:4e:ae:ac:a5:ae:d8:f0:56:00:
                    11:d9:3a:8f:d4:14:05:75:d7:53:c0:bd:f5:12:45:
                    73:b1:34:53:e8:89:e4:45:0e:eb:68:de:be:c4:9b:
                    07:59:49:63:da:fc:ce:50:34:80:36:37:b4:18:d9:
                    26:20:f0:39:33:8a:f4:bd:60:8a:21:33:5b:63:15:
                    d0:11:30:aa:09:96:05:94:0b:6a:7e:ac:2a:f0:d4:
                    6e:50:b3:0b:29:d8:d8:8f:57:93:d9:eb:10:cc:67:
                    1b:fb:06:d8:5e:4b:2d:3e:19:7a:ef:2d:79:b5:b2:
                    29:41:43:45:03:d0:35:28:8d:36:52:3c:53:a2:0b:
                    48:d1:e5:11:93:45:ce:a9:40:93:5f:2e:91:e4:90:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4A:98:53:24:22:C3:3F:5F:05:24:B9:88:07:A9:EF:4A:C9:34:79
            X509v3 Authority Key Identifier:
                keyid:39:E8:5F:0F:E1:36:3D:1C:06:C5:87:48:6E:ED:D5:B3:62:BE:6A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/39E85F0FE1363D1C06C587486EEDD5B362BE6AF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:6e:df:1f:0f:fe:14:e9:52:7d:cb:28:c8:53:aa:cd:37:4c:
         47:22:4c:0a:c4:b3:1f:e6:4a:56:00:a4:f2:34:8e:5a:f5:36:
         1b:30:b8:ff:bf:ef:c5:82:11:d7:7e:f3:81:db:3f:9c:55:3c:
         a5:b3:f5:d9:62:b6:80:ea:c1:75:be:55:92:1a:24:5a:65:9e:
         a6:28:ed:cb:c2:07:1d:32:27:d3:f5:85:8e:c0:6f:e4:de:88:
         31:0e:db:d5:9a:98:1a:7f:28:ae:a0:11:da:26:29:38:05:3c:
         f3:ca:0b:71:84:bd:7c:15:20:a2:87:fb:ab:43:d3:3c:7b:97:
         f8:e6:83:aa:ce:94:22:4b:27:18:7a:e8:0a:7e:fc:dd:4a:96:
         ed:14:5c:73:61:ce:f4:77:a4:59:ac:47:e5:e4:d6:c1:4d:76:
         1b:51:da:7a:ea:b7:2f:c7:a2:11:eb:c9:64:14:02:6a:43:6d:
         a3:3c:11:da:5d:9d:47:54:c7:0f:4b:71:02:5d:4a:d0:f2:3f:
         9b:2e:61:d7:09:39:0f:b0:13:d4:02:8a:15:9c:be:4f:4f:ac:
         59:a5:bc:7f:2a:fc:05:d6:55:0b:75:41:f8:7c:3b:e7:e3:9d:
         ac:56:12:d6:6a:31:ed:29:75:4a:f5:7f:db:a5:24:a3:d9:0f:
         66:2f:77:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTy6RIhzJAnIGOazuIKgqFI+bRMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlFODVGMEZFMTM2M0QxQzA2QzU4NzQ4NkVFREQ1QjM2
MkJFNkFGODAeFw0yNDEyMTMwMzI2MjBaFw0yNDEyMTQwNDQ1MjBaMDMxMTAvBgNV
BAMTKDQ5NEE5ODUzMjQyMkMzM0Y1RjA1MjRCOTg4MDdBOUVGNEFDOTM0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43r1sPuesTYWpAe8+j5kGXPwh
xKiQ6bPm7x5vfeNCqJTyPfCtqX2c44gDkVKIANPJWfPvXCoDp8N2mHjPMKnm2s3I
JHaBJe8Q/ahz11duc5Cz1HNgilgF7go+sDUt5AUqMM0slyLfW6yCZY8c3k6urKWu
2PBWABHZOo/UFAV111PAvfUSRXOxNFPoieRFDuto3r7EmwdZSWPa/M5QNIA2N7QY
2SYg8DkzivS9YIohM1tjFdARMKoJlgWUC2p+rCrw1G5Qswsp2NiPV5PZ6xDMZxv7
BtheSy0+GXrvLXm1silBQ0UD0DUojTZSPFOiC0jR5RGTRc6pQJNfLpHkkIn5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSUqYUyQiwz9fBSS5iAep70rJNHkwHwYDVR0j
BBgwFoAUOehfD+E2PRwGxYdIbu3Vs2K+avgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZ
WnEvMC8zOUU4NUYwRkUxMzYzRDFDMDZDNTg3NDg2RUVERDVCMzYyQkU2QUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5RTg1RjBGRTEzNjNEMUMw
NkM1ODc0ODZFRURENUIzNjJCRTZBRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZWnEvMC8z
OUU4NUYwRkUxMzYzRDFDMDZDNTg3NDg2RUVERDVCMzYyQkU2QUY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3m7fHw/+FOlSfcsoyFOqzTdMRyJMCsSzH+ZKVgCk8jSOWvU2GzC4/7/vxYIR
137zgds/nFU8pbP12WK2gOrBdb5VkhokWmWepijty8IHHTIn0/WFjsBv5N6IMQ7b
1ZqYGn8orqAR2iYpOAU888oLcYS9fBUgoof7q0PTPHuX+OaDqs6UIksnGHroCn78
3UqW7RRcc2HO9HekWaxH5eTWwU12G1Haeuq3L8eiEevJZBQCakNtozwR2l2dR1TH
D0txAl1K0PI/my5h1wk5D7AT1AKKFZy+T0+sWaW8fyr8BdZVC3VB+Hw75+OdrFYS
1mox7Sl1SvV/26Uko9kPZi93CA==
-----END CERTIFICATE-----