Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft
File:                     2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft (raw, json)
Hash identifier:          vTLG3shrdsfiVYtWolDrrhmLihlB5bkASksTtyl3lJ4=
Subject key identifier:   52:AB:31:9D:F2:D2:F3:BF:65:46:C0:AD:A5:2B:ED:61:46:B2:BF:4D
Authority key identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
Certificate issuer:       /CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
Certificate serial:       3D539DE34F17610A43E10E3FCAF330E1795A6232
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft
Manifest number:          A9
Signing time:             Wed 02 Oct 2024 04:59:33 +0000
Manifest this update:     Wed 02 Oct 2024 04:54:33 +0000
Manifest next update:     Thu 03 Oct 2024 08:22:33 +0000
Files and hashes:         1: 2A371CF8C86799E154504B6C023890DAD3CAF1BB.crl (hash: Tv74kdKHA3WJ7zu22049DnTeufsh0fNDpABNEUMOOR4=)
                          2: 3230312e35352e3136302e302f32302d3332203d3e20323632353835.roa (hash: Lig/o25qifjHXqJbcLJyA/BBq+zUfP623epqHxOUU04=)
                          3: 323830343a386637303a3a2f33322d313238203d3e20323632353835.roa (hash: mT60PmRXYOfxNx8KBhXDDjRWZPJCUc5ejw4wwKq745c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:53:9d:e3:4f:17:61:0a:43:e1:0e:3f:ca:f3:30:e1:79:5a:62:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
        Validity
            Not Before: Oct  2 04:54:33 2024 GMT
            Not After : Oct  3 08:22:33 2024 GMT
        Subject: CN=52AB319DF2D2F3BF6546C0ADA52BED6146B2BF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:a9:da:33:34:f5:53:ea:26:98:f3:e5:dc:
                    09:d0:07:37:22:c6:d4:c1:7d:1f:cf:cf:0f:70:ff:
                    41:94:93:43:71:b6:36:1d:dd:b0:13:96:01:85:8b:
                    ec:46:03:2c:a1:ff:47:47:c1:68:b4:f6:c6:40:6e:
                    c9:a7:0b:3c:74:72:ac:30:a1:90:18:1f:78:e4:9a:
                    15:71:2a:e5:79:14:9d:0c:46:87:86:ed:6d:6c:29:
                    80:be:49:1f:b8:98:b5:e1:e7:a3:7d:47:cd:9c:6b:
                    59:ef:6d:c3:26:0d:29:94:2a:84:5f:50:7a:6a:4c:
                    4c:1d:8d:6d:3b:b1:61:6d:c9:7b:53:5b:b9:6c:18:
                    db:c0:53:1a:56:32:cb:3b:3d:a4:97:35:20:46:1d:
                    8a:a1:37:56:77:ac:9d:b0:2a:35:dd:ee:c3:fa:fc:
                    e6:a9:0f:bf:63:c0:99:52:77:ac:5c:0e:11:a1:03:
                    a6:1b:cd:ff:ff:a6:54:42:0f:c4:0c:49:96:ab:41:
                    d2:fe:07:2f:4a:ba:a2:99:9e:01:34:ef:67:f1:4f:
                    11:40:4a:d6:69:6f:f7:17:0c:34:5e:ff:dd:60:41:
                    16:b8:c6:ce:6c:c9:b8:92:9a:9e:35:75:ae:c2:2f:
                    ab:67:be:9b:2a:00:24:e7:7f:18:b3:f7:49:17:23:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:31:9D:F2:D2:F3:BF:65:46:C0:AD:A5:2B:ED:61:46:B2:BF:4D
            X509v3 Authority Key Identifier:
                keyid:2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:31:4d:59:bf:dc:ed:ec:68:3a:b3:05:55:21:e7:47:65:e5:
         47:ac:46:2f:fe:ba:4d:f9:34:96:21:41:bf:d2:b9:dc:a0:61:
         80:68:7e:dd:07:5e:93:14:3f:45:fa:77:b4:c9:1e:11:79:9d:
         4a:82:e4:64:e0:67:10:aa:18:08:93:6c:9c:5d:4f:ba:71:54:
         11:c7:a0:82:73:a9:ac:94:67:26:01:fc:19:5b:11:ec:17:d5:
         c0:16:a3:ab:b2:46:39:34:97:a6:db:1e:89:d2:ad:58:eb:f0:
         d9:59:a1:3a:36:d9:4a:04:fd:98:2a:bb:cb:98:a3:32:cb:b6:
         2c:26:d2:8d:e9:00:92:81:25:f1:45:b3:e3:b3:51:44:b3:8c:
         6b:80:d9:1b:59:77:05:52:52:e9:85:3d:ba:44:30:8e:05:44:
         dc:49:5e:ca:ef:06:48:05:41:68:d9:41:79:d5:75:51:33:78:
         13:b0:29:a0:d6:bd:a6:05:a0:c5:92:33:1b:92:c3:cb:37:1d:
         b5:f3:63:68:b8:51:b7:7f:8c:b7:7c:cc:f7:3b:3d:42:34:d3:
         63:2e:3f:1e:09:e0:f4:a8:8d:44:0e:3e:db:3f:34:6d:e1:92:
         57:17:00:c7:b0:2f:b8:92:8e:48:fb:8a:65:6e:ed:64:1a:30:
         8a:d1:e9:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPVOd408XYQpD4Q4/yvMw4XlaYjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzNzFDRjhDODY3OTlFMTU0NTA0QjZDMDIzODkwREFE
M0NBRjFCQjAeFw0yNDEwMDIwNDU0MzNaFw0yNDEwMDMwODIyMzNaMDMxMTAvBgNV
BAMTKDUyQUIzMTlERjJEMkYzQkY2NTQ2QzBBREE1MkJFRDYxNDZCMkJGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+janaMzT1U+ommPPl3AnQBzci
xtTBfR/Pzw9w/0GUk0NxtjYd3bATlgGFi+xGAyyh/0dHwWi09sZAbsmnCzx0cqww
oZAYH3jkmhVxKuV5FJ0MRoeG7W1sKYC+SR+4mLXh56N9R82ca1nvbcMmDSmUKoRf
UHpqTEwdjW07sWFtyXtTW7lsGNvAUxpWMss7PaSXNSBGHYqhN1Z3rJ2wKjXd7sP6
/OapD79jwJlSd6xcDhGhA6Ybzf//plRCD8QMSZarQdL+By9KuqKZngE072fxTxFA
StZpb/cXDDRe/91gQRa4xs5sybiSmp41da7CL6tnvpsqACTnfxiz90kXI9YHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUUqsxnfLS879lRsCtpSvtYUayv00wHwYDVR0j
BBgwFoAUKjcc+MhnmeFUUEtsAjiQ2tPK8bswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21uUmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWta
ZnQvMC8yQTM3MUNGOEM4Njc5OUUxNTQ1MDRCNkMwMjM4OTBEQUQzQ0FGMUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzcxQ0Y4Qzg2Nzk5RTE1
NDUwNEI2QzAyMzg5MERBRDNDQUYxQkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R21uUmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWtaZnQvMC8y
QTM3MUNGOEM4Njc5OUUxNTQ1MDRCNkMwMjM4OTBEQUQzQ0FGMUJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1TFNWb/c7exoOrMFVSHnR2XlR6xGL/66Tfk0liFBv9K53KBhgGh+3QdekxQ/
Rfp3tMkeEXmdSoLkZOBnEKoYCJNsnF1PunFUEceggnOprJRnJgH8GVsR7BfVwBaj
q7JGOTSXptseidKtWOvw2VmhOjbZSgT9mCq7y5ijMsu2LCbSjekAkoEl8UWz47NR
RLOMa4DZG1l3BVJS6YU9ukQwjgVE3Eleyu8GSAVBaNlBedV1UTN4E7ApoNa9pgWg
xZIzG5LDyzcdtfNjaLhRt3+Mt3zM9zs9QjTTYy4/Hgng9KiNRA4+2z80beGSVxcA
x7AvuJKOSPuKZW7tZBowitHpMg==
-----END CERTIFICATE-----
Generated at Tue Oct 8 05:01:27 2024 by rpki-client on console-ams.rpki-client.org