Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.mft
File:                     739C8421324751C7B11953D1A7B9E91FD7DF5830.mft (raw, json)
Hash identifier:          DiSPD3xdJafAeM1SdaBI5HYb9OjW+4gQyof73L5rLFc=
Subject key identifier:   5D:D7:11:0F:21:0E:F4:3C:81:58:0D:91:08:19:19:F6:2F:74:54:ED
Authority key identifier: 73:9C:84:21:32:47:51:C7:B1:19:53:D1:A7:B9:E9:1F:D7:DF:58:30
Certificate issuer:       /CN=739C8421324751C7B11953D1A7B9E91FD7DF5830
Certificate serial:       103370270C4D2DB624CC1666DFDB3277D84F194C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.mft
Manifest number:          14
Signing time:             Sun 14 Apr 2024 18:32:32 +0000
Manifest this update:     Sun 14 Apr 2024 18:27:32 +0000
Manifest next update:     Mon 15 Apr 2024 21:00:32 +0000
Files and hashes:         1: 739C8421324751C7B11953D1A7B9E91FD7DF5830.crl (hash: 8NyDEZkKgygQlhGps+cMXODOEXvV09VruapzrgBQgs0=)
                          2: 34352e3233392e35362e302f32322d3332203d3e20323638333534.roa (hash: JN8pQ35996I9LmQ8uJuUH837OCmcpXIgauRg1hOeZmo=)
                          3: 323830343a346664633a3a2f33322d313238203d3e20323638333534.roa (hash: CI8ESJPArXlHWr/2GMgm4kIwKTPIuWL8O18f0YXCGh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:33:70:27:0c:4d:2d:b6:24:cc:16:66:df:db:32:77:d8:4f:19:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739C8421324751C7B11953D1A7B9E91FD7DF5830
        Validity
            Not Before: Apr 14 18:27:32 2024 GMT
            Not After : Apr 15 21:00:32 2024 GMT
        Subject: CN=5DD7110F210EF43C81580D91081919F62F7454ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:84:ad:19:37:d1:dc:04:43:6a:5d:da:f4:
                    b5:c7:da:13:9f:4d:dc:fd:9a:3e:32:98:4a:ae:84:
                    13:53:0a:2d:ff:99:a3:fe:a0:48:b3:03:31:29:eb:
                    6d:cc:cb:4a:5c:76:54:ef:ba:3a:46:f2:cc:c3:12:
                    c4:3b:b8:8c:fc:d3:f6:51:d0:5a:bd:fe:e4:0f:55:
                    e4:ef:27:3c:6c:d6:38:d5:d9:e1:80:15:08:fb:10:
                    13:d8:89:a3:62:31:2f:45:40:fa:ab:fd:82:70:0b:
                    18:c1:70:aa:c3:72:9c:fc:00:e7:66:26:f8:53:7c:
                    62:b9:e6:04:ac:f0:2c:7f:da:41:fb:a6:1c:43:91:
                    25:24:26:5a:11:c5:84:a8:0c:10:eb:c9:c5:6d:8f:
                    90:97:a4:dc:66:fa:f1:fb:3e:60:46:d3:d7:fd:2b:
                    bc:86:bd:b3:12:9e:90:51:cc:4d:37:2c:4c:4b:d0:
                    be:19:5a:77:e3:e6:af:5b:a2:e5:59:32:d6:cf:63:
                    0c:6a:79:ac:2d:e0:12:f0:7f:f9:3f:a8:83:a4:32:
                    d4:51:1c:3b:34:91:27:e0:4a:cc:aa:7d:0c:dd:96:
                    bd:f5:40:39:06:30:74:49:9a:d8:db:73:61:24:90:
                    c7:ed:1c:72:8e:c5:9d:82:11:df:8d:e3:0a:eb:ac:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:11:0F:21:0E:F4:3C:81:58:0D:91:08:19:19:F6:2F:74:54:ED
            X509v3 Authority Key Identifier:
                keyid:73:9C:84:21:32:47:51:C7:B1:19:53:D1:A7:B9:E9:1F:D7:DF:58:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:37:8d:3b:cb:fc:8c:fe:1b:f0:94:1a:ae:91:d1:da:f3:
         48:cc:b4:19:46:44:33:6e:ea:bc:58:b7:6b:64:17:bc:2d:73:
         23:7c:55:3e:d7:69:05:27:5b:13:9c:30:bf:03:94:74:e1:48:
         83:d9:70:6d:2b:cb:ba:26:24:78:8c:5c:4b:28:2c:db:f8:88:
         a3:70:17:a9:82:00:23:c9:76:35:d6:eb:52:e3:ee:3a:b5:78:
         bb:ac:95:db:30:97:40:93:27:02:2d:f9:db:22:c5:2f:cb:cd:
         05:a8:09:d5:89:73:c7:e7:3b:c3:1b:02:14:86:76:ea:aa:90:
         a3:2b:91:0f:44:a9:65:e4:69:93:76:5b:fd:36:9c:ee:64:bb:
         c2:69:92:a7:c6:db:72:ee:7c:e1:be:95:92:96:03:2f:53:12:
         26:cc:d0:d7:ee:1e:0c:b5:c8:f4:fb:8c:b6:25:0e:8e:c7:8a:
         09:6a:c2:82:d4:28:1f:5b:20:42:62:3b:a3:44:0a:56:5d:5f:
         fc:fe:99:a2:f6:eb:b7:b0:e0:ad:d1:f7:60:36:02:98:58:58:
         9e:3d:e0:ca:49:17:b6:32:ad:d5:14:cb:93:b6:d1:25:bd:5c:
         11:52:f4:7b:1e:bf:5a:7b:98:0c:9e:80:8d:c5:de:6f:56:46:
         6c:eb:31:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEDNwJwxNLbYkzBZm39syd9hPGUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM5Qzg0MjEzMjQ3NTFDN0IxMTk1M0QxQTdCOUU5MUZE
N0RGNTgzMDAeFw0yNDA0MTQxODI3MzJaFw0yNDA0MTUyMTAwMzJaMDMxMTAvBgNV
BAMTKDVERDcxMTBGMjEwRUY0M0M4MTU4MEQ5MTA4MTkxOUY2MkY3NDU0RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUIStGTfR3ARDal3a9LXH2hOf
Tdz9mj4ymEquhBNTCi3/maP+oEizAzEp623My0pcdlTvujpG8szDEsQ7uIz80/ZR
0Fq9/uQPVeTvJzxs1jjV2eGAFQj7EBPYiaNiMS9FQPqr/YJwCxjBcKrDcpz8AOdm
JvhTfGK55gSs8Cx/2kH7phxDkSUkJloRxYSoDBDrycVtj5CXpNxm+vH7PmBG09f9
K7yGvbMSnpBRzE03LExL0L4ZWnfj5q9bouVZMtbPYwxqeawt4BLwf/k/qIOkMtRR
HDs0kSfgSsyqfQzdlr31QDkGMHRJmtjbc2EkkMftHHKOxZ2CEd+N4wrrrHb3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXdcRDyEO9DyBWA2RCBkZ9i90VO0wHwYDVR0j
BBgwFoAUc5yEITJHUcexGVPRp7npH9ffWDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2g1NHJpRTRQWHQ0NFN6djR5eWVSOGlidjFuN2FZOWhVY2ZGSlNkb0Ri
QVIvMC83MzlDODQyMTMyNDc1MUM3QjExOTUzRDFBN0I5RTkxRkQ3REY1ODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczOUM4NDIxMzI0NzUxQzdC
MTE5NTNEMUE3QjlFOTFGRDdERjU4MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2g1NHJpRTRQWHQ0NFN6djR5eWVSOGlidjFuN2FZOWhVY2ZGSlNkb0RiQVIvMC83
MzlDODQyMTMyNDc1MUM3QjExOTUzRDFBN0I5RTkxRkQ3REY1ODMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm+A3jTvL/Iz+G/CUGq6R0drzSMy0GUZEM27qvFi3a2QXvC1zI3xVPtdpBSdb
E5wwvwOUdOFIg9lwbSvLuiYkeIxcSygs2/iIo3AXqYIAI8l2NdbrUuPuOrV4u6yV
2zCXQJMnAi352yLFL8vNBagJ1Ylzx+c7wxsCFIZ26qqQoyuRD0SpZeRpk3Zb/Tac
7mS7wmmSp8bbcu584b6VkpYDL1MSJszQ1+4eDLXI9PuMtiUOjseKCWrCgtQoH1sg
QmI7o0QKVl1f/P6Zovbrt7DgrdH3YDYCmFhYnj3gykkXtjKt1RTLk7bRJb1cEVL0
ex6/WnuYDJ6AjcXeb1ZGbOsxNA==
-----END CERTIFICATE-----