Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.mft
File:                     A96E260C23174D36DD4710A93B917F2DDF7BF23A.mft (raw, json)
Hash identifier:          I6DLnWEVI7KozydTaZLwxrco9OGsUv5o+0Lvd+8EOtc=
Subject key identifier:   9B:52:45:04:0C:DF:B1:8D:FA:97:06:4A:61:E4:17:F0:0D:7E:0B:E5
Authority key identifier: A9:6E:26:0C:23:17:4D:36:DD:47:10:A9:3B:91:7F:2D:DF:7B:F2:3A
Certificate issuer:       /CN=A96E260C23174D36DD4710A93B917F2DDF7BF23A
Certificate serial:       447376B7C2E80C543D7783A74F6BBF30089626DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.mft
Manifest number:          35
Signing time:             Sun 14 Apr 2024 23:24:57 +0000
Manifest this update:     Sun 14 Apr 2024 23:19:57 +0000
Manifest next update:     Tue 16 Apr 2024 02:30:57 +0000
Files and hashes:         1: 323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (hash: 3l9QEVNnyymfBil3gPtOrs14fcETJMytYUrBfXehXfk=)
                          2: A96E260C23174D36DD4710A93B917F2DDF7BF23A.crl (hash: T+BaWmqn6SCDZyf1AwGIuJPRtKZXBXa/s+ZYMHX5GhY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:73:76:b7:c2:e8:0c:54:3d:77:83:a7:4f:6b:bf:30:08:96:26:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A96E260C23174D36DD4710A93B917F2DDF7BF23A
        Validity
            Not Before: Apr 14 23:19:57 2024 GMT
            Not After : Apr 16 02:30:57 2024 GMT
        Subject: CN=9B5245040CDFB18DFA97064A61E417F00D7E0BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:f5:d7:ca:de:52:bb:58:0b:d2:26:7c:7c:
                    4d:6c:4a:c5:f4:25:9c:df:62:84:89:88:9f:9f:3f:
                    32:32:88:d5:03:6e:d1:65:16:94:fe:63:79:5f:d8:
                    5a:e5:35:ef:f9:97:3b:6e:ad:6c:38:92:b7:9d:7a:
                    87:13:74:1a:a3:45:95:76:f1:59:ee:f4:0f:43:33:
                    93:bf:1b:8f:1e:88:06:ee:7a:3c:d5:7d:dd:83:65:
                    e0:d4:0b:43:dd:c4:a5:46:d5:d7:b9:47:9f:2c:8f:
                    09:6b:65:df:04:a9:8b:08:01:2f:2a:52:4e:b9:a4:
                    cd:9e:d6:d5:11:55:b3:f6:33:39:85:81:3e:37:d9:
                    f6:32:72:60:b2:50:9e:6c:e9:b2:b1:d8:ce:c7:a0:
                    95:a4:b6:b0:37:bc:69:c8:4d:dd:6d:51:cf:99:ad:
                    71:e1:88:1f:2b:e6:9a:f9:00:1f:6f:fc:15:e1:f4:
                    a5:68:a6:07:84:0f:1d:f6:2e:7f:3e:f5:3a:eb:b3:
                    df:c2:4d:78:18:e9:b8:48:63:43:31:69:12:d7:cf:
                    b4:f4:b3:17:58:18:c0:6e:a0:77:83:52:19:b3:c1:
                    f1:36:a0:a2:6e:24:0a:8e:52:d7:60:27:f9:77:f1:
                    85:f1:39:e0:2b:39:df:57:f6:85:65:22:63:9f:d8:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:52:45:04:0C:DF:B1:8D:FA:97:06:4A:61:E4:17:F0:0D:7E:0B:E5
            X509v3 Authority Key Identifier:
                keyid:A9:6E:26:0C:23:17:4D:36:DD:47:10:A9:3B:91:7F:2D:DF:7B:F2:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/A96E260C23174D36DD4710A93B917F2DDF7BF23A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:1e:9a:c8:9c:07:06:ab:ff:70:60:2f:2a:b0:3c:c1:c5:16:
         e3:a8:4b:25:08:de:1f:4a:b5:6b:64:e6:07:58:5c:13:2c:1a:
         68:e5:87:84:0e:01:18:50:00:2a:d1:7b:40:d0:80:a8:4b:44:
         48:75:53:8f:d9:59:b0:f7:42:bf:96:5f:20:b8:20:63:c0:b9:
         33:ae:53:de:bf:23:8d:17:f4:81:3d:af:c1:59:ba:97:5d:71:
         dd:7b:ab:d9:1d:0b:d2:4e:bb:b4:9b:04:b8:0e:e5:73:8c:ee:
         72:b1:93:69:bd:3e:fe:2a:79:25:46:3a:58:13:ab:3d:4f:e3:
         ae:d6:cf:f9:38:38:c4:fc:b4:cd:0a:08:04:1e:11:1e:48:60:
         98:c3:95:f7:ed:95:27:e4:20:59:43:60:75:d3:8f:de:25:ac:
         15:5f:8e:0d:aa:14:6d:9a:d2:a6:32:3a:28:91:a2:9c:80:5a:
         1d:e8:56:3b:cc:2c:d7:ed:18:eb:52:cd:87:1c:4b:76:e0:45:
         6f:30:90:98:c6:3a:ff:56:34:71:00:03:e0:62:7e:6d:77:9e:
         5f:fd:14:8b:55:3f:32:40:80:8d:d2:e3:a7:9b:ab:b1:10:13:
         4c:f6:df:81:e1:e7:f6:d6:22:10:d4:dd:2e:33:6c:ba:9d:94:
         a4:50:71:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURHN2t8LoDFQ9d4OnT2u/MAiWJt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk2RTI2MEMyMzE3NEQzNkRENDcxMEE5M0I5MTdGMkRE
RjdCRjIzQTAeFw0yNDA0MTQyMzE5NTdaFw0yNDA0MTYwMjMwNTdaMDMxMTAvBgNV
BAMTKDlCNTI0NTA0MENERkIxOERGQTk3MDY0QTYxRTQxN0YwMEQ3RTBCRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdfXXyt5Su1gL0iZ8fE1sSsX0
JZzfYoSJiJ+fPzIyiNUDbtFlFpT+Y3lf2FrlNe/5lzturWw4kredeocTdBqjRZV2
8Vnu9A9DM5O/G48eiAbuejzVfd2DZeDUC0PdxKVG1de5R58sjwlrZd8EqYsIAS8q
Uk65pM2e1tURVbP2MzmFgT432fYycmCyUJ5s6bKx2M7HoJWktrA3vGnITd1tUc+Z
rXHhiB8r5pr5AB9v/BXh9KVopgeEDx32Ln8+9Trrs9/CTXgY6bhIY0MxaRLXz7T0
sxdYGMBuoHeDUhmzwfE2oKJuJAqOUtdgJ/l38YXxOeArOd9X9oVlImOf2FzPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUm1JFBAzfsY36lwZKYeQX8A1+C+UwHwYDVR0j
BBgwFoAUqW4mDCMXTTbdRxCpO5F/Ld978jowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allr
WXIvMC9BOTZFMjYwQzIzMTc0RDM2REQ0NzEwQTkzQjkxN0YyRERGN0JGMjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E5NkUyNjBDMjMxNzREMzZE
RDQ3MTBBOTNCOTE3RjJEREY3QkYyM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allrWXIvMC9B
OTZFMjYwQzIzMTc0RDM2REQ0NzEwQTkzQjkxN0YyRERGN0JGMjNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvB6ayJwHBqv/cGAvKrA8wcUW46hLJQjeH0q1a2TmB1hcEywaaOWHhA4BGFAA
KtF7QNCAqEtESHVTj9lZsPdCv5ZfILggY8C5M65T3r8jjRf0gT2vwVm6l11x3Xur
2R0L0k67tJsEuA7lc4zucrGTab0+/ip5JUY6WBOrPU/jrtbP+Tg4xPy0zQoIBB4R
HkhgmMOV9+2VJ+QgWUNgddOP3iWsFV+ODaoUbZrSpjI6KJGinIBaHehWO8ws1+0Y
61LNhxxLduBFbzCQmMY6/1Y0cQAD4GJ+bXeeX/0Ui1U/MkCAjdLjp5ursRATTPbf
geHn9tYiENTdLjNsup2UpFBx2g==
-----END CERTIFICATE-----