Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.mft
File:                     70A4487B1E4C02FB38ED862258E884E8D24BFC48.mft (raw, json)
Hash identifier:          pBRH/VJBl0bAkj6L1Jkwn6/YeySRNsqiTbMxpRk9HjE=
Subject key identifier:   B4:E8:20:86:47:2A:9A:95:28:88:5B:8C:CE:93:7F:A4:6A:25:AC:6D
Authority key identifier: 70:A4:48:7B:1E:4C:02:FB:38:ED:86:22:58:E8:84:E8:D2:4B:FC:48
Certificate issuer:       /CN=70A4487B1E4C02FB38ED862258E884E8D24BFC48
Certificate serial:       FC24CEC1C60F454749EE228EB6D89EB93A1519
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.mft
Manifest number:          18
Signing time:             Fri 19 Apr 2024 02:56:00 +0000
Manifest this update:     Fri 19 Apr 2024 02:51:00 +0000
Manifest next update:     Sat 20 Apr 2024 02:56:00 +0000
Files and hashes:         1: 70A4487B1E4C02FB38ED862258E884E8D24BFC48.crl (hash: xj6FUqGyfTpMCyG7tttdBX+n6w76r+D3M/Tmrwc2dUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fc:24:ce:c1:c6:0f:45:47:49:ee:22:8e:b6:d8:9e:b9:3a:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70A4487B1E4C02FB38ED862258E884E8D24BFC48
        Validity
            Not Before: Apr 19 02:51:00 2024 GMT
            Not After : Apr 26 02:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:75:9a:00:5f:43:70:14:f2:f5:3f:67:ea:
                    48:7b:e9:be:9a:52:f3:97:a5:70:8a:0c:57:db:7b:
                    3a:2b:2c:b7:2a:37:22:0e:32:da:ed:43:ee:9d:0e:
                    eb:3d:18:3a:65:b9:9c:a7:de:4a:39:57:ef:fd:bd:
                    87:ce:cd:49:34:ec:18:d3:22:4a:7b:fe:9e:ae:2c:
                    43:ee:bc:30:e9:bb:f5:f1:ca:49:ce:36:36:7c:df:
                    e5:20:4d:e7:98:f5:0a:ca:55:d3:37:0b:1f:f4:5b:
                    7a:5a:a5:fb:82:07:6f:86:e5:ca:9a:4d:38:61:4f:
                    a2:bd:2a:05:9d:af:67:35:57:97:04:28:07:10:70:
                    2e:b8:1e:15:08:13:52:67:0c:9e:93:de:c8:81:4d:
                    cb:8d:77:b2:d9:3b:b9:0c:1f:98:4e:d9:31:d9:03:
                    21:f1:02:02:25:d5:40:ef:d5:5a:37:2e:a7:cd:7f:
                    04:ac:04:df:da:4d:77:4b:41:c6:22:74:00:da:8c:
                    ad:af:cc:e8:53:3c:5e:1b:6c:bf:14:d4:ac:24:ac:
                    22:22:83:cd:5f:97:54:8b:cd:79:4e:2e:32:55:68:
                    99:3a:0c:88:23:71:22:f8:83:ff:e7:dc:34:38:de:
                    c5:b2:c5:a8:b5:33:91:8d:60:e5:78:93:6b:8e:ae:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:20:86:47:2A:9A:95:28:88:5B:8C:CE:93:7F:A4:6A:25:AC:6D
            X509v3 Authority Key Identifier:
                keyid:70:A4:48:7B:1E:4C:02:FB:38:ED:86:22:58:E8:84:E8:D2:4B:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/1/70A4487B1E4C02FB38ED862258E884E8D24BFC48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:51:98:c9:27:a3:8f:11:19:81:b3:37:fe:e0:75:ea:9d:
         ed:19:ca:9d:c1:c0:92:8c:bb:5b:fc:6a:89:41:57:14:c3:7f:
         15:42:4c:ba:48:28:71:19:6c:26:be:c2:b4:e2:49:26:da:aa:
         3c:17:c3:7a:48:fa:0c:33:e8:8a:c1:60:61:22:c8:20:c0:75:
         8d:14:13:bb:2e:69:b4:88:49:66:8f:85:9d:d1:79:37:61:37:
         1b:d8:0a:4a:6a:5e:8c:7d:a9:70:ae:41:e4:b9:84:23:ce:ec:
         d3:ec:0f:7a:5e:d6:4e:30:a2:ae:07:6e:c6:69:82:e7:e4:ca:
         62:88:3c:8e:ff:3e:26:ca:8e:56:55:cb:47:78:ca:9c:60:5e:
         08:cd:be:d1:88:f8:af:33:a3:19:c1:64:0c:04:1a:6b:73:3c:
         5f:d1:df:1e:2d:4d:46:38:16:ba:32:cc:2b:84:fd:79:4c:41:
         d0:10:e5:87:2a:b5:42:5e:d9:b5:d2:07:12:1f:ca:14:f6:3b:
         e8:77:47:7e:f0:e6:a8:f2:e2:89:71:79:71:ee:4f:28:28:75:
         03:88:ee:d7:17:0b:6d:de:0e:50:b4:f2:af:a2:ea:5b:04:8a:
         7e:09:1a:76:2a:55:c3:62:28:12:6f:29:89:98:e9:29:35:a5:
         b8:06:57:1f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUAPwkzsHGD0VHSe4ijrbYnrk6FRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBBNDQ4N0IxRTRDMDJGQjM4RUQ4NjIyNThFODg0RThE
MjRCRkM0ODAeFw0yNDA0MTkwMjUxMDBaFw0yNDA0MjYwMjU2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI3Qzc1OUEwMDVGNDM3MDE0
RjJGNTNGNjdFQTQ4N0JFOUJFOUE1MkYzOTdBNTcwOEEwQzU3REI3QjNBMkIyQ0I3
MkEzNzIyMEUzMkRBRUQ0M0VFOUQwRUVCM0QxODNBNjVCOTlDQTdERTRBMzk1N0VG
RkRCRDg3Q0VDRDQ5MzRFQzE4RDMyMjRBN0JGRTlFQUUyQzQzRUVCQzMwRTlCQkY1
RjFDQTQ5Q0UzNjM2N0NERkU1MjA0REU3OThGNTBBQ0E1NUQzMzcwQjFGRjQ1QjdB
NUFBNUZCODIwNzZGODZFNUNBOUE0RDM4NjE0RkEyQkQyQTA1OURBRjY3MzU1Nzk3
MDQyODA3MTA3MDJFQjgxRTE1MDgxMzUyNjcwQzlFOTNERUM4ODE0RENCOEQ3N0Iy
RDkzQkI5MEMxRjk4NEVEOTMxRDkwMzIxRjEwMjAyMjVENTQwRUZENTVBMzcyRUE3
Q0Q3RjA0QUMwNERGREE0RDc3NEI0MUM2MjI3NDAwREE4Q0FEQUZDQ0U4NTMzQzVF
MUI2Q0JGMTRENEFDMjRBQzIyMjI4M0NENUY5NzU0OEJDRDc5NEUyRTMyNTU2ODk5
M0EwQzg4MjM3MTIyRjg4M0ZGRTdEQzM0MzhERUM1QjJDNUE4QjUzMzkxOEQ2MEU1
Nzg5MzZCOEVBRURFODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq3x1mgBfQ3AU8vU/Z+pIe+m+mlLzl6VwigxX23s6Kyy3KjciDjLa
7UPunQ7rPRg6Zbmcp95KOVfv/b2Hzs1JNOwY0yJKe/6erixD7rww6bv18cpJzjY2
fN/lIE3nmPUKylXTNwsf9Ft6WqX7ggdvhuXKmk04YU+ivSoFna9nNVeXBCgHEHAu
uB4VCBNSZwyek97IgU3LjXey2Tu5DB+YTtkx2QMh8QICJdVA79VaNy6nzX8ErATf
2k13S0HGInQA2oytr8zoUzxeG2y/FNSsJKwiIoPNX5dUi815Ti4yVWiZOgyII3Ei
+IP/59w0ON7FssWotTORjWDleJNrjq7eiQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLToIIZHKpqVKIhbjM6Tf6RqJaxtMB8GA1UdIwQYMBaAFHCkSHseTAL7OO2GIljo
hOjSS/xIMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dxZ0ZGeDc0WUd0UEdx
bzhSUzNGdHkxQ2pUeGVwaVBSMXlZSjZzdnFxZVRKLzEvNzBBNDQ4N0IxRTRDMDJG
QjM4RUQ4NjIyNThFODg0RThEMjRCRkM0OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83MEE0NDg3QjFFNEMwMkZCMzhFRDg2MjI1OEU4ODRFOEQyNEJG
QzQ4LmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dxZ0ZGeDc0WUd0UEdxbzhSUzNG
dHkxQ2pUeGVwaVBSMXlZSjZzdnFxZVRKLzEvNzBBNDQ4N0IxRTRDMDJGQjM4RUQ4
NjIyNThFODg0RThEMjRCRkM0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA0oUZjJJ6OPERmBszf+4HXq
ne0Zyp3BwJKMu1v8aolBVxTDfxVCTLpIKHEZbCa+wrTiSSbaqjwXw3pI+gwz6IrB
YGEiyCDAdY0UE7suabSISWaPhZ3ReTdhNxvYCkpqXox9qXCuQeS5hCPO7NPsD3pe
1k4woq4HbsZpgufkymKIPI7/PibKjlZVy0d4ypxgXgjNvtGI+K8zoxnBZAwEGmtz
PF/R3x4tTUY4FroyzCuE/XlMQdAQ5YcqtUJe2bXSBxIfyhT2O+h3R37w5qjy4olx
eXHuTygodQOI7tcXC23eDlC08q+i6lsEin4JGnYqVcNiKBJvKYmY6Sk1pbgGVx8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org