Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.mft
File:                     22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.mft (raw, json)
Hash identifier:          /pCflHSwbfDT7/om08ZfiwI53tVESCO8KL8+bCXFd0M=
Subject key identifier:   66:AE:09:70:76:4D:87:BA:B7:79:C5:46:77:13:21:47:8F:A7:50:DB
Authority key identifier: 22:DF:D4:1F:37:2A:44:E5:97:D3:8C:D4:0E:1D:FA:D6:B8:9E:CF:83
Certificate issuer:       /CN=22DFD41F372A44E597D38CD40E1DFAD6B89ECF83
Certificate serial:       237231CEC5398D5EFE1CE8EC6FA4160F5E6BD9BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.mft
Manifest number:          5F
Signing time:             Fri 12 Jul 2024 10:56:07 +0000
Manifest this update:     Fri 12 Jul 2024 10:51:07 +0000
Manifest next update:     Sat 13 Jul 2024 14:39:07 +0000
Files and hashes:         1: 323830343a376462383a3a2f33322d3334203d3e20323731353738.roa (hash: 1Kt04MaA1+uEYxdTUAGq0eFTvwyovpHohpyVlCqi2rM=)
                          2: 22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.crl (hash: qDUNdkCrUXQFXwNy9l8Nae3lZnHpfQezAeC/4zHkL38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:72:31:ce:c5:39:8d:5e:fe:1c:e8:ec:6f:a4:16:0f:5e:6b:d9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DFD41F372A44E597D38CD40E1DFAD6B89ECF83
        Validity
            Not Before: Jul 12 10:51:07 2024 GMT
            Not After : Jul 13 14:39:07 2024 GMT
        Subject: CN=66AE0970764D87BAB779C546771321478FA750DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:8b:4a:95:56:40:96:ee:0b:c9:ba:2e:22:
                    e4:64:e6:e2:33:62:c6:d1:76:ec:a5:0a:5d:1e:36:
                    1f:94:cc:d6:1e:35:a1:37:95:21:5a:bb:a8:7f:49:
                    3a:cb:91:39:ca:fe:e7:40:fa:41:eb:cf:35:a6:86:
                    a7:5d:3d:65:bf:77:2f:3a:38:79:25:49:0d:e3:8b:
                    39:f3:81:b3:67:3f:50:21:4d:38:d9:17:1c:a6:50:
                    a4:b7:10:58:0a:bf:60:a8:41:b4:17:c3:ae:c1:38:
                    f4:b9:e0:c2:9a:e7:62:31:f2:95:75:81:30:de:03:
                    2c:4d:7e:0f:0e:23:f9:e7:8e:8e:a1:17:60:e0:6d:
                    01:25:ed:ca:b1:96:60:07:c8:b6:ff:fb:df:c2:ef:
                    97:fb:99:7f:6a:37:e6:2d:7b:e0:e9:86:fa:ec:b1:
                    47:0f:9c:da:6e:2f:74:33:a0:56:dd:5b:6a:12:fe:
                    89:cb:92:4a:dd:52:ce:71:a4:8f:6a:ab:ca:06:73:
                    1a:4f:f0:71:ea:18:ed:68:bc:3b:b1:90:4f:e6:f8:
                    24:dc:41:93:ee:a9:27:79:52:a2:e5:72:67:63:4b:
                    83:05:4a:ca:99:2c:21:b6:b7:9d:2a:5b:91:ca:26:
                    a6:66:65:53:ad:d1:ed:c3:ce:d9:df:0d:ec:bc:75:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AE:09:70:76:4D:87:BA:B7:79:C5:46:77:13:21:47:8F:A7:50:DB
            X509v3 Authority Key Identifier:
                keyid:22:DF:D4:1F:37:2A:44:E5:97:D3:8C:D4:0E:1D:FA:D6:B8:9E:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/0/22DFD41F372A44E597D38CD40E1DFAD6B89ECF83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c7:96:ed:80:53:0c:9b:93:07:28:78:3e:6b:72:4a:5b:88:
         77:98:e4:d5:9e:0d:60:9f:4d:1b:e1:19:aa:03:49:e0:c5:0d:
         88:b8:0b:b4:3f:25:a1:d4:55:db:44:18:cc:30:51:fb:3a:77:
         5b:04:ba:5b:f0:32:e1:bf:62:8f:41:06:ec:44:7e:80:32:ab:
         5a:06:7c:45:a6:f5:db:5e:5a:33:08:b3:72:f3:22:e1:db:e3:
         a2:7a:4f:ea:99:aa:35:ab:df:87:a8:e1:bb:8e:ed:7e:20:eb:
         79:fe:de:d1:24:d0:a6:c7:b4:34:3d:4e:35:e3:ac:8b:3c:d6:
         38:14:0e:e3:b0:57:66:29:82:b7:fb:70:1c:bc:fa:94:20:1d:
         3d:60:e9:e9:07:21:2c:68:fb:34:4b:e0:45:9b:7a:b9:36:92:
         15:70:71:73:cd:ba:57:e1:13:ba:ea:da:2e:4c:3d:d6:b8:0b:
         0f:58:bf:e4:f5:b1:04:df:81:d0:89:9f:a6:04:50:98:7c:01:
         5f:10:fe:77:fd:be:97:e0:e4:07:24:05:ee:32:2c:7f:50:6e:
         a3:7f:98:ec:d9:fc:e6:9c:98:32:fb:60:8b:43:12:0e:4d:33:
         98:0d:37:a7:99:05:ab:9f:e1:88:39:c6:c2:af:1e:5d:c7:ba:
         f2:88:32:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI3IxzsU5jV7+HOjsb6QWD15r2bswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJERkQ0MUYzNzJBNDRFNTk3RDM4Q0Q0MEUxREZBRDZC
ODlFQ0Y4MzAeFw0yNDA3MTIxMDUxMDdaFw0yNDA3MTMxNDM5MDdaMDMxMTAvBgNV
BAMTKDY2QUUwOTcwNzY0RDg3QkFCNzc5QzU0Njc3MTMyMTQ3OEZBNzUwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknItKlVZAlu4LybouIuRk5uIz
YsbRduylCl0eNh+UzNYeNaE3lSFau6h/STrLkTnK/udA+kHrzzWmhqddPWW/dy86
OHklSQ3jiznzgbNnP1AhTTjZFxymUKS3EFgKv2CoQbQXw67BOPS54MKa52Ix8pV1
gTDeAyxNfg8OI/nnjo6hF2DgbQEl7cqxlmAHyLb/+9/C75f7mX9qN+Yte+Dphvrs
sUcPnNpuL3QzoFbdW2oS/onLkkrdUs5xpI9qq8oGcxpP8HHqGO1ovDuxkE/m+CTc
QZPuqSd5UqLlcmdjS4MFSsqZLCG2t50qW5HKJqZmZVOt0e3DztnfDey8dTOpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZq4JcHZNh7q3ecVGdxMhR4+nUNswHwYDVR0j
BBgwFoAUIt/UHzcqROWX04zUDh361riez4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhURWNaeFdyaVZXd3dYczg2bm1XS3JVcDZhTmFwenNCbjRXYXRYVU54
ZTkvMC8yMkRGRDQxRjM3MkE0NEU1OTdEMzhDRDQwRTFERkFENkI4OUVDRjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyREZENDFGMzcyQTQ0RTU5
N0QzOENENDBFMURGQUQ2Qjg5RUNGODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkhURWNaeFdyaVZXd3dYczg2bm1XS3JVcDZhTmFwenNCbjRXYXRYVU54ZTkvMC8y
MkRGRDQxRjM3MkE0NEU1OTdEMzhDRDQwRTFERkFENkI4OUVDRjgzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaseW7YBTDJuTByh4PmtySluId5jk1Z4NYJ9NG+EZqgNJ4MUNiLgLtD8lodRV
20QYzDBR+zp3WwS6W/Ay4b9ij0EG7ER+gDKrWgZ8Rab1215aMwizcvMi4dvjonpP
6pmqNavfh6jhu47tfiDref7e0STQpse0ND1ONeOsizzWOBQO47BXZimCt/twHLz6
lCAdPWDp6QchLGj7NEvgRZt6uTaSFXBxc826V+ETuuraLkw91rgLD1i/5PWxBN+B
0ImfpgRQmHwBXxD+d/2+l+DkByQF7jIsf1Buo3+Y7Nn85pyYMvtgi0MSDk0zmA03
p5kFq5/hiDnGwq8eXce68ogyKw==
-----END CERTIFICATE-----