Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3FA6187385876E0C99E6A9477B130ED98460E752.mft
File:                     3FA6187385876E0C99E6A9477B130ED98460E752.mft (raw, json)
Hash identifier:          tyiq+Y/wZrPIQfRiDpMBuYYAz8LZSyRFBWprV8A2e/E=
Subject key identifier:   70:A9:73:2E:20:D8:B2:7B:35:1F:33:40:CB:3B:92:D0:34:C5:2D:AB
Authority key identifier: 3F:A6:18:73:85:87:6E:0C:99:E6:A9:47:7B:13:0E:D9:84:60:E7:52
Certificate issuer:       /CN=3FA6187385876E0C99E6A9477B130ED98460E752
Certificate serial:       2B063FB399244735ABE9C01DD996F7C46CB67F44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6187385876E0C99E6A9477B130ED98460E752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3FA6187385876E0C99E6A9477B130ED98460E752.mft
Manifest number:          52
Signing time:             Mon 03 Jun 2024 18:02:13 +0000
Manifest this update:     Mon 03 Jun 2024 17:57:13 +0000
Manifest next update:     Tue 04 Jun 2024 20:52:13 +0000
Files and hashes:         1: 3FA6187385876E0C99E6A9477B130ED98460E752.crl (hash: /JboG/obYkGoUdbzRkV4sb/2f5sWlEKQRok/OY7go6I=)
                          2: 323830343a373536303a3a2f33322d3334203d3e20323731303432.roa (hash: IMKY0TlIEu/FZc/qB4rFT5wYF8HLpzzwHZV8028N6BU=)
                          3: 3137372e33362e31362e302f32322d3234203d3e20323731303432.roa (hash: 61iQdpBf41jsqzMjU74hhvsnlN9O0prlpiYBCL2DU3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:06:3f:b3:99:24:47:35:ab:e9:c0:1d:d9:96:f7:c4:6c:b6:7f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6187385876E0C99E6A9477B130ED98460E752
        Validity
            Not Before: Jun  3 17:57:13 2024 GMT
            Not After : Jun  4 20:52:13 2024 GMT
        Subject: CN=70A9732E20D8B27B351F3340CB3B92D034C52DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:a9:be:53:84:fa:ca:44:02:dc:d6:80:5e:
                    09:94:5c:00:18:5c:f4:32:8c:d1:00:b1:61:fe:fa:
                    cb:bb:9b:1a:a7:37:66:3d:e5:f2:2e:78:4a:76:82:
                    b2:57:95:2c:22:50:63:af:23:33:4f:e2:b1:99:c4:
                    fb:8f:90:71:8b:31:ed:32:f2:64:d8:ee:3e:c6:2c:
                    2c:22:c3:b7:48:c0:30:2e:f6:20:68:b6:da:0b:35:
                    31:76:1e:65:6e:05:c4:80:7e:85:b8:6c:8e:a2:c2:
                    7e:24:dd:1e:35:c1:0b:94:2a:42:6e:36:47:51:ab:
                    c8:95:f8:10:12:c7:86:89:fd:6d:8f:b8:16:a5:66:
                    82:27:30:61:b2:9d:27:45:fd:7c:4d:38:4e:2d:11:
                    0b:e2:10:fd:6a:19:49:1d:c8:17:8d:1b:86:38:91:
                    e8:c5:c3:b5:b3:ca:66:fb:ae:50:ad:15:eb:40:bf:
                    1d:02:f0:cc:7a:4b:91:b0:cb:fe:ae:3d:a1:1b:ff:
                    a4:ed:fc:09:a2:15:c9:b5:41:7d:b1:ef:15:3e:4b:
                    49:fb:54:37:82:7c:c5:11:09:f4:9b:64:f1:61:6c:
                    ac:2d:b8:33:ad:d6:fe:28:a6:b9:37:c3:d1:a3:b1:
                    9c:3b:10:f9:d5:a8:72:3f:84:df:5e:e0:f3:15:06:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:73:2E:20:D8:B2:7B:35:1F:33:40:CB:3B:92:D0:34:C5:2D:AB
            X509v3 Authority Key Identifier:
                keyid:3F:A6:18:73:85:87:6E:0C:99:E6:A9:47:7B:13:0E:D9:84:60:E7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3FA6187385876E0C99E6A9477B130ED98460E752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6187385876E0C99E6A9477B130ED98460E752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3FA6187385876E0C99E6A9477B130ED98460E752.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:af:de:f8:5c:6f:3d:b7:69:e1:28:81:24:29:f1:fe:ab:8c:
         57:8f:73:68:41:9c:29:ed:40:31:8b:cd:72:66:b6:3e:d7:d2:
         3c:6f:23:59:3e:89:f6:20:ea:76:e3:d1:26:06:ba:1f:19:c9:
         8f:28:9a:1a:fe:ea:ad:85:45:42:96:d5:93:b0:a6:b1:20:4a:
         bc:d3:db:4f:71:b1:ae:df:6b:a5:95:51:14:2a:57:3a:90:e7:
         ad:24:d9:3e:6a:63:53:a4:c2:bd:57:36:e7:7a:b8:2e:02:e2:
         b0:42:06:d0:31:e3:e2:c7:5b:b6:e2:44:4c:80:29:1d:a9:ce:
         eb:9b:63:ad:80:ee:19:8d:15:d8:09:b0:bc:74:26:72:b8:84:
         0e:de:e5:97:54:f4:15:53:0d:83:0a:fe:c9:8c:41:64:01:b6:
         4b:3c:61:5d:c5:b5:e2:36:ee:b4:59:ed:b5:a1:ea:3b:25:dc:
         f3:62:fa:4f:52:b7:46:0a:ac:ab:b1:5b:c0:64:83:3c:e6:b3:
         8f:15:85:ca:02:ca:d8:48:a6:3a:0e:91:40:51:f8:e5:95:ad:
         92:3c:6f:84:31:c4:32:7f:3c:3b:42:dd:58:61:f1:f9:6a:9b:
         9a:a9:de:36:61:aa:33:83:d7:f9:06:c6:8d:e7:c0:05:0d:24:
         5b:f1:02:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKwY/s5kkRzWr6cAd2Zb3xGy2f0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjE4NzM4NTg3NkUwQzk5RTZBOTQ3N0IxMzBFRDk4
NDYwRTc1MjAeFw0yNDA2MDMxNzU3MTNaFw0yNDA2MDQyMDUyMTNaMDMxMTAvBgNV
BAMTKDcwQTk3MzJFMjBEOEIyN0IzNTFGMzM0MENCM0I5MkQwMzRDNTJEQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpKm+U4T6ykQC3NaAXgmUXAAY
XPQyjNEAsWH++su7mxqnN2Y95fIueEp2grJXlSwiUGOvIzNP4rGZxPuPkHGLMe0y
8mTY7j7GLCwiw7dIwDAu9iBottoLNTF2HmVuBcSAfoW4bI6iwn4k3R41wQuUKkJu
NkdRq8iV+BASx4aJ/W2PuBalZoInMGGynSdF/XxNOE4tEQviEP1qGUkdyBeNG4Y4
kejFw7Wzymb7rlCtFetAvx0C8Mx6S5Gwy/6uPaEb/6Tt/AmiFcm1QX2x7xU+S0n7
VDeCfMURCfSbZPFhbKwtuDOt1v4oprk3w9GjsZw7EPnVqHI/hN9e4PMVBr7zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcKlzLiDYsns1HzNAyzuS0DTFLaswHwYDVR0j
BBgwFoAUP6YYc4WHbgyZ5qlHexMO2YRg51IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJm
ZDgvMS8zRkE2MTg3Mzg1ODc2RTBDOTlFNkE5NDc3QjEzMEVEOTg0NjBFNzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTYxODczODU4NzZFMEM5
OUU2QTk0NzdCMTMwRUQ5ODQ2MEU3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJmZDgvMS8z
RkE2MTg3Mzg1ODc2RTBDOTlFNkE5NDc3QjEzMEVEOTg0NjBFNzUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ6/e+FxvPbdp4SiBJCnx/quMV49zaEGcKe1AMYvNcma2PtfSPG8jWT6J9iDq
duPRJga6HxnJjyiaGv7qrYVFQpbVk7CmsSBKvNPbT3Gxrt9rpZVRFCpXOpDnrSTZ
PmpjU6TCvVc253q4LgLisEIG0DHj4sdbtuJETIApHanO65tjrYDuGY0V2AmwvHQm
criEDt7ll1T0FVMNgwr+yYxBZAG2SzxhXcW14jbutFnttaHqOyXc82L6T1K3Rgqs
q7FbwGSDPOazjxWFygLK2EimOg6RQFH45ZWtkjxvhDHEMn88O0LdWGHx+Wqbmqne
NmGqM4PX+QbGjefABQ0kW/ECZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org