Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.mft
File:                     DC357FEDFFB446880B11B0B151C1736AD4C40D96.mft (raw, json)
Hash identifier:          YnXhJNJmYQkW4awKKoE+P29PCZOmO6lPMDVyETbsO1k=
Subject key identifier:   06:71:70:6B:28:5B:E7:8E:A2:6F:07:AA:8B:6D:92:5E:8E:70:EB:88
Authority key identifier: DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
Certificate issuer:       /CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Certificate serial:       6979416E7131A80627EA6894D086F322E79E8F4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.mft
Manifest number:          17
Signing time:             Thu 02 Nov 2023 21:18:36 +0000
Manifest this update:     Thu 02 Nov 2023 21:13:36 +0000
Manifest next update:     Fri 03 Nov 2023 23:19:36 +0000
Files and hashes:         1: 34352e372e3137322e302f32332d3233203d3e20323636353931.roa (hash: l8mNg91phhakfOonPr4J2KkcrracdaHwt6ZQY3ubKAA=)
                          2: 34352e372e3137322e302f32342d3234203d3e20323636353931.roa (hash: w0DmlXfBtE0YqEGC7k9W5pQQGS/Yz1rYeYbzEcfJsak=)
                          3: 34352e372e3137352e302f32342d3234203d3e20323636353931.roa (hash: Oj7iGM/Y2mNJ+azF4uDrQVtJrPHRZAau6KauJXfbpnM=)
                          4: 34352e372e3137342e302f32332d3233203d3e20323636353931.roa (hash: eRlfAwmeyAxeHXxibpDraArmABQlxDvFYSN2NrYhEnw=)
                          5: 34352e372e3137332e302f32342d3234203d3e20323636353931.roa (hash: HStnNwuBW017ZrS4zPbsvlHMcKbDjT7dN+wCVlJpywg=)
                          6: 34352e372e3137342e302f32342d3234203d3e20323636353931.roa (hash: UiM6/gQxcdnIq4b93tGRVKW1bOULLnTSLtGdhGhRkFY=)
                          7: DC357FEDFFB446880B11B0B151C1736AD4C40D96.crl (hash: FaA3CUb113evk4d3e9O1kvZqDxPEQn1J1fnu8ZYdarY=)
                          8: 34352e372e3137322e302f32322d3232203d3e20323636353931.roa (hash: UPQ6NFmu6sCS7guNKb2EcDcxax/JV/7UK3ZAyrIoyRU=)
                          9: 323830343a336535633a3a2f33322d3332203d3e20323636353931.roa (hash: mHrphd4lTgv0H0kT3sBYqPm/1gQqFG389p2dkALbjSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:79:41:6e:71:31:a8:06:27:ea:68:94:d0:86:f3:22:e7:9e:8f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
        Validity
            Not Before: Nov  2 21:13:36 2023 GMT
            Not After : Nov  3 23:19:36 2023 GMT
        Subject: CN=0671706B285BE78EA26F07AA8B6D925E8E70EB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:ac:af:79:d2:c5:f3:5f:96:7e:62:87:ec:
                    a1:c7:8a:32:a1:40:b3:c9:33:0b:a0:64:ac:80:34:
                    d5:12:da:9e:8f:bd:04:26:94:33:2a:cb:b6:42:f3:
                    1e:cb:ef:f4:b7:31:13:d6:62:fd:cd:68:78:81:f6:
                    39:97:72:da:fe:3b:41:c6:d4:d5:b8:51:45:f0:53:
                    65:6b:d7:08:f8:a4:8c:2b:dd:0e:c3:6c:ba:31:7e:
                    3b:08:6f:b5:3b:04:7d:4c:17:1c:d2:d4:a5:76:f7:
                    ad:24:b6:73:2d:62:44:79:d5:f2:de:c1:b3:21:63:
                    40:98:3b:5c:65:bc:8c:6a:b2:ad:74:e4:1b:4c:92:
                    fc:a6:2a:e8:0d:ee:d9:b3:a4:57:fd:ca:3f:fb:d6:
                    cf:db:50:d3:29:53:e0:bf:06:be:ef:42:06:c4:7a:
                    5d:8d:5c:3a:bc:5b:e3:e2:c9:c5:91:1f:47:8a:fe:
                    58:6f:de:ad:cf:6a:8a:3f:db:77:fc:d5:78:7d:b3:
                    28:60:8e:cf:61:f4:0c:45:6b:98:fd:e4:14:d2:e5:
                    7c:15:e8:18:d7:70:41:df:cd:24:22:15:b6:43:0a:
                    a5:8f:1d:fa:18:df:39:9b:8b:66:01:36:53:f2:5f:
                    6a:52:fe:e2:38:96:4c:ef:95:b0:e0:11:75:91:26:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:70:6B:28:5B:E7:8E:A2:6F:07:AA:8B:6D:92:5E:8E:70:EB:88
            X509v3 Authority Key Identifier:
                keyid:DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:8a:34:49:29:e6:03:77:22:c4:f7:b4:31:5f:35:63:e8:91:
         64:bd:f9:6d:b4:30:8f:53:2e:b4:c7:55:4c:68:07:fd:e1:fc:
         9d:2c:46:3d:87:34:64:e3:e2:4c:b5:f9:8e:13:a5:ee:7f:84:
         21:87:83:3f:b6:23:92:c0:14:2c:d7:2d:f4:c5:50:be:40:50:
         3f:13:b6:d7:0d:ef:34:70:be:e7:00:ca:82:2f:b2:fe:9c:f6:
         22:d8:3f:65:ec:68:5a:9d:05:51:22:bb:1b:3e:f0:2b:df:e1:
         cc:e2:d4:67:ac:d4:84:dd:71:d0:37:f1:a9:22:e3:c0:d8:ec:
         6a:bc:06:72:a6:13:b6:72:39:6a:e2:d6:30:ee:16:4e:71:8f:
         a5:67:d7:22:73:77:1f:51:cd:dc:7a:95:79:9a:9e:ef:5a:60:
         f3:45:f0:8d:fa:0b:10:fd:58:5f:88:24:57:fc:08:9b:c0:aa:
         c2:f6:e6:43:c4:1b:f9:21:69:86:51:00:2b:a7:fb:58:3b:a0:
         f5:f2:c5:e0:cc:eb:f3:40:a1:2b:0a:5a:29:72:e0:8d:d3:81:
         88:32:94:b6:5d:9a:54:ea:39:76:58:05:98:cc:e3:23:e3:71:
         df:22:68:b5:80:79:57:a6:e3:d0:cb:f4:d9:55:9a:6b:a6:27:
         3a:31:14:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaXlBbnExqAYn6miU0IbzIueej0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzNTdGRURGRkI0NDY4ODBCMTFCMEIxNTFDMTczNkFE
NEM0MEQ5NjAeFw0yMzExMDIyMTEzMzZaFw0yMzExMDMyMzE5MzZaMDMxMTAvBgNV
BAMTKDA2NzE3MDZCMjg1QkU3OEVBMjZGMDdBQThCNkQ5MjVFOEU3MEVCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC246yvedLF81+WfmKH7KHHijKh
QLPJMwugZKyANNUS2p6PvQQmlDMqy7ZC8x7L7/S3MRPWYv3NaHiB9jmXctr+O0HG
1NW4UUXwU2Vr1wj4pIwr3Q7DbLoxfjsIb7U7BH1MFxzS1KV2960ktnMtYkR51fLe
wbMhY0CYO1xlvIxqsq105BtMkvymKugN7tmzpFf9yj/71s/bUNMpU+C/Br7vQgbE
el2NXDq8W+PiycWRH0eK/lhv3q3Paoo/23f81Xh9syhgjs9h9AxFa5j95BTS5XwV
6BjXcEHfzSQiFbZDCqWPHfoY3zmbi2YBNlPyX2pS/uI4lkzvlbDgEXWRJnkFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBnFwayhb546ibweqi22SXo5w64gwHwYDVR0j
BBgwFoAU3DV/7f+0RogLEbCxUcFzatTEDZYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1RGNWh4UjNKclNWY0FoZ3hiM1dUU3FOSGJSYlJBNTZQekVoNnFrTEdq
QlMvMC9EQzM1N0ZFREZGQjQ0Njg4MEIxMUIwQjE1MUMxNzM2QUQ0QzQwRDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDMzU3RkVERkZCNDQ2ODgw
QjExQjBCMTUxQzE3MzZBRDRDNDBEOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1RGNWh4UjNKclNWY0FoZ3hiM1dUU3FOSGJSYlJBNTZQekVoNnFrTEdqQlMvMC9E
QzM1N0ZFREZGQjQ0Njg4MEIxMUIwQjE1MUMxNzM2QUQ0QzQwRDk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA04o0SSnmA3cixPe0MV81Y+iRZL35bbQwj1MutMdVTGgH/eH8nSxGPYc0ZOPi
TLX5jhOl7n+EIYeDP7YjksAULNct9MVQvkBQPxO21w3vNHC+5wDKgi+y/pz2Itg/
ZexoWp0FUSK7Gz7wK9/hzOLUZ6zUhN1x0DfxqSLjwNjsarwGcqYTtnI5auLWMO4W
TnGPpWfXInN3H1HN3HqVeZqe71pg80XwjfoLEP1YX4gkV/wIm8CqwvbmQ8Qb+SFp
hlEAK6f7WDug9fLF4Mzr80ChKwpaKXLgjdOBiDKUtl2aVOo5dlgFmMzjI+Nx3yJo
tYB5V6bj0Mv02VWaa6YnOjEUcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org