Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.mft
File:                     4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.mft (raw, json)
Hash identifier:          E9d3qRhFWZ30HTcUdLEYCW2XeAMedIlm9yJvvrLNwbI=
Subject key identifier:   94:7F:DC:6C:6C:DE:0F:D1:B5:E6:5C:C2:91:67:B7:0F:A2:1B:3B:04
Authority key identifier: 4A:B9:F7:6A:FA:CD:9C:F9:14:E3:52:CF:47:F1:E3:C9:02:20:2C:E0
Certificate issuer:       /CN=4AB9F76AFACD9CF914E352CF47F1E3C902202CE0
Certificate serial:       78D893304968BEB0D30055F93D45CB829C7CB41C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.mft
Manifest number:          3E
Signing time:             Mon 15 Apr 2024 07:33:16 +0000
Manifest this update:     Mon 15 Apr 2024 07:28:16 +0000
Manifest next update:     Tue 16 Apr 2024 08:10:16 +0000
Files and hashes:         1: 4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.crl (hash: dui4V9WtJze1dBdV7GQLJXIngxDmBFBxwo+aBFMILXE=)
                          2: 323830343a353930633a3a2f33322d3332203d3e20323638313636.roa (hash: 3RKAB8+cH89lwzNaAi21iqGcj83z4ymCOE/AVlvF6f8=)
                          3: 34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa (hash: mXIAN00AQAYHZV1KISYD9+MQ6c3qkImbirBViavsD2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d8:93:30:49:68:be:b0:d3:00:55:f9:3d:45:cb:82:9c:7c:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB9F76AFACD9CF914E352CF47F1E3C902202CE0
        Validity
            Not Before: Apr 15 07:28:16 2024 GMT
            Not After : Apr 16 08:10:16 2024 GMT
        Subject: CN=947FDC6C6CDE0FD1B5E65CC29167B70FA21B3B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:59:c6:92:01:8a:52:27:db:bf:30:56:41:
                    8a:12:63:ad:2c:70:f7:85:ab:92:4a:7d:f5:7e:3c:
                    07:bb:c3:3c:58:4c:ed:3c:7c:f2:9b:a5:3c:cf:fc:
                    68:c7:45:3c:81:33:26:7a:c5:2a:76:6f:c8:03:bb:
                    a9:18:9c:66:f6:12:0d:da:1f:05:cc:76:4b:84:49:
                    66:2e:2e:a3:68:22:d4:2f:85:aa:81:0b:cc:2c:2f:
                    f4:67:9e:fe:31:87:31:f2:06:66:a7:61:0b:ca:3a:
                    32:de:5b:44:a0:b0:89:1c:a2:dc:20:aa:bc:e0:f3:
                    23:d7:a3:01:7a:c1:7e:9b:a1:d1:eb:94:a1:eb:6d:
                    b6:f3:61:cd:ad:f5:1c:9a:08:d8:e0:ea:36:d2:a9:
                    9f:a5:e5:62:aa:6f:cb:11:9d:f0:78:e9:6d:04:36:
                    72:41:54:6a:07:bc:08:50:0c:a2:82:40:c9:1b:5e:
                    5e:e8:17:9d:3e:36:df:42:b7:4f:00:a0:d6:4d:2e:
                    a6:a2:18:f4:be:b4:82:15:f1:cf:eb:da:24:f3:6f:
                    79:75:23:f7:42:a9:82:e4:7e:00:e4:1c:1d:dc:22:
                    9d:e4:ee:61:ba:c9:d7:f9:12:39:e3:e6:73:26:06:
                    49:80:0f:eb:1d:95:b0:6d:5e:e6:46:97:02:52:60:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7F:DC:6C:6C:DE:0F:D1:B5:E6:5C:C2:91:67:B7:0F:A2:1B:3B:04
            X509v3 Authority Key Identifier:
                keyid:4A:B9:F7:6A:FA:CD:9C:F9:14:E3:52:CF:47:F1:E3:C9:02:20:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/0/4AB9F76AFACD9CF914E352CF47F1E3C902202CE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:96:1e:57:f7:8e:13:47:5c:57:1a:7c:4d:06:83:e4:27:69:
         20:a4:b0:fe:ac:5d:5f:8f:d0:59:b8:aa:22:02:ad:7f:1e:2e:
         f1:f3:e2:01:bc:e9:a9:de:03:3b:88:d7:2d:68:61:85:ec:43:
         7a:56:25:5c:48:7e:a8:67:5a:5b:bd:f5:1c:36:b0:b1:36:a3:
         5b:e3:be:9c:83:34:2a:ed:98:7d:32:26:4c:80:33:f6:2c:5a:
         38:12:47:68:f2:4b:20:10:c8:38:32:bb:45:ac:4b:a5:7a:41:
         03:31:a2:a5:4b:bb:bd:70:b5:df:96:f9:ac:0c:3b:55:91:15:
         65:0a:cf:1f:16:7f:d1:f6:82:c1:f7:b6:f0:9e:94:e8:63:7f:
         8e:49:08:4c:58:5f:e1:e1:d4:01:b7:03:07:e3:db:77:44:96:
         59:b9:cc:e6:53:01:f1:27:b8:f6:c9:4c:a2:15:3a:c1:66:34:
         c7:4e:89:ac:b7:94:7c:a5:fb:d1:74:08:9c:a2:55:1c:3a:a2:
         e8:71:eb:47:a7:cb:ee:85:b6:8b:c5:56:2a:29:1f:76:89:f3:
         c9:38:fa:c5:f3:74:f8:9a:da:91:af:8d:2b:da:e4:64:b0:ea:
         6f:1d:c8:14:d5:bf:61:1f:53:59:33:4f:9d:ad:da:d3:0b:ef:
         89:93:16:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeNiTMElovrDTAFX5PUXLgpx8tBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFCOUY3NkFGQUNEOUNGOTE0RTM1MkNGNDdGMUUzQzkw
MjIwMkNFMDAeFw0yNDA0MTUwNzI4MTZaFw0yNDA0MTYwODEwMTZaMDMxMTAvBgNV
BAMTKDk0N0ZEQzZDNkNERTBGRDFCNUU2NUNDMjkxNjdCNzBGQTIxQjNCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkFnGkgGKUifbvzBWQYoSY60s
cPeFq5JKffV+PAe7wzxYTO08fPKbpTzP/GjHRTyBMyZ6xSp2b8gDu6kYnGb2Eg3a
HwXMdkuESWYuLqNoItQvhaqBC8wsL/Rnnv4xhzHyBmanYQvKOjLeW0SgsIkcotwg
qrzg8yPXowF6wX6bodHrlKHrbbbzYc2t9RyaCNjg6jbSqZ+l5WKqb8sRnfB46W0E
NnJBVGoHvAhQDKKCQMkbXl7oF50+Nt9Ct08AoNZNLqaiGPS+tIIV8c/r2iTzb3l1
I/dCqYLkfgDkHB3cIp3k7mG6ydf5Ejnj5nMmBkmAD+sdlbBtXuZGlwJSYHI7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlH/cbGzeD9G15lzCkWe3D6IbOwQwHwYDVR0j
BBgwFoAUSrn3avrNnPkU41LPR/HjyQIgLOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BDS1RTVlZWSmN2YnlVd29MQjV6YVFhbjh3M3hUUkFGYmdhNWN2U1Zi
UWsvMC80QUI5Rjc2QUZBQ0Q5Q0Y5MTRFMzUyQ0Y0N0YxRTNDOTAyMjAyQ0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBQjlGNzZBRkFDRDlDRjkx
NEUzNTJDRjQ3RjFFM0M5MDIyMDJDRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3BDS1RTVlZWSmN2YnlVd29MQjV6YVFhbjh3M3hUUkFGYmdhNWN2U1ZiUWsvMC80
QUI5Rjc2QUZBQ0Q5Q0Y5MTRFMzUyQ0Y0N0YxRTNDOTAyMjAyQ0UwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA25YeV/eOE0dcVxp8TQaD5CdpIKSw/qxdX4/QWbiqIgKtfx4u8fPiAbzpqd4D
O4jXLWhhhexDelYlXEh+qGdaW731HDawsTajW+O+nIM0Ku2YfTImTIAz9ixaOBJH
aPJLIBDIODK7RaxLpXpBAzGipUu7vXC135b5rAw7VZEVZQrPHxZ/0faCwfe28J6U
6GN/jkkITFhf4eHUAbcDB+Pbd0SWWbnM5lMB8Se49slMohU6wWY0x06JrLeUfKX7
0XQInKJVHDqi6HHrR6fL7oW2i8VWKikfdonzyTj6xfN0+Jraka+NK9rkZLDqbx3I
FNW/YR9TWTNPna3a0wvviZMWlg==
-----END CERTIFICATE-----