Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.mft
File:                     B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.mft (raw, json)
Hash identifier:          Bt8sY/yzzShOzybdwVGHglJJj9IszG5Hi1OAKRqwboU=
Subject key identifier:   88:76:77:28:01:F0:2C:76:E2:E5:99:49:AE:53:84:FE:75:53:52:65
Authority key identifier: B7:6B:86:5F:A2:7B:E8:AC:2B:68:91:60:DA:BD:BA:58:A0:AD:75:F1
Certificate issuer:       /CN=B76B865FA27BE8AC2B689160DABDBA58A0AD75F1
Certificate serial:       23034B9D7C56CCB2D2DA4A1491323C3ED1956031
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.mft
Manifest number:          77
Signing time:             Sun 14 Apr 2024 22:31:23 +0000
Manifest this update:     Sun 14 Apr 2024 22:26:23 +0000
Manifest next update:     Mon 15 Apr 2024 22:37:23 +0000
Files and hashes:         1: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: /pxf5NXxtzbLVKgpbdjJUsDbUWS82gt4m6/TeP1Euww=)
                          2: B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.crl (hash: JJ0q0AQON8iMbUzpquXl0J2eEo8wHLn75E9OaLgzmTE=)
                          3: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: cszVn2xVYNCXTi+Cjal02XretwyDyGhZliElG5aTFXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:03:4b:9d:7c:56:cc:b2:d2:da:4a:14:91:32:3c:3e:d1:95:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B76B865FA27BE8AC2B689160DABDBA58A0AD75F1
        Validity
            Not Before: Apr 14 22:26:23 2024 GMT
            Not After : Apr 15 22:37:23 2024 GMT
        Subject: CN=8876772801F02C76E2E59949AE5384FE75535265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:eb:5f:13:54:1f:b1:65:d9:8c:f2:a1:f2:
                    d5:17:0d:ee:cd:17:b5:e7:47:0f:6e:fe:f6:89:2d:
                    be:20:ed:08:65:17:46:31:c7:d5:6c:a7:bc:e2:8a:
                    36:41:29:21:5c:14:a2:e9:6f:99:04:a6:c2:df:a6:
                    04:ed:61:e5:45:d5:a6:9f:93:0b:04:ed:09:82:fc:
                    71:a0:3f:4c:06:af:7c:63:49:ee:53:19:49:9a:d4:
                    13:07:cc:52:59:ea:85:da:e4:92:bd:d3:5e:5d:bd:
                    60:0a:1b:41:a3:66:f5:08:de:6d:22:85:c8:dc:7c:
                    3d:3f:02:7e:15:a5:05:ec:7b:20:61:27:01:0e:e8:
                    f7:27:0d:41:2e:1c:84:51:49:51:f2:d9:6b:c1:2c:
                    74:a9:97:f7:ac:bd:f8:d3:3e:ae:37:b0:d3:19:69:
                    b2:83:c9:02:be:f7:58:b4:ff:9e:2d:45:1a:31:61:
                    cc:6f:38:7f:8f:3e:74:94:f2:1b:d4:e3:b1:e6:45:
                    83:ea:27:0b:05:b0:31:00:26:e9:4a:7d:b8:ad:22:
                    63:bd:b7:97:7b:74:92:5d:06:cc:83:f9:d5:bc:1e:
                    31:d0:46:4c:8c:15:8f:96:c6:13:90:fd:02:2f:28:
                    07:9e:1e:00:9d:69:fb:3d:c3:6f:c5:d5:14:62:4e:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:76:77:28:01:F0:2C:76:E2:E5:99:49:AE:53:84:FE:75:53:52:65
            X509v3 Authority Key Identifier:
                keyid:B7:6B:86:5F:A2:7B:E8:AC:2B:68:91:60:DA:BD:BA:58:A0:AD:75:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/B76B865FA27BE8AC2B689160DABDBA58A0AD75F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:e4:82:a7:37:9e:0e:6a:5d:97:50:a4:89:fd:d8:e2:16:
         96:27:6f:37:27:cd:8e:79:ee:3c:46:59:cc:a6:06:48:95:37:
         5c:c8:4e:aa:17:1e:37:b9:56:4c:7b:5b:21:fc:b0:3d:04:75:
         23:d5:ae:5e:ba:85:1f:75:e9:4d:85:a1:b7:e7:21:80:85:bf:
         6b:45:1e:16:97:eb:55:b8:33:91:85:7b:84:bf:54:32:96:75:
         7b:6d:d5:7e:dc:f6:17:1b:6c:95:b8:15:49:e4:3a:5a:06:2c:
         67:aa:65:cb:3a:4b:66:a8:40:15:39:47:3d:0e:5c:c5:31:67:
         79:63:cf:40:78:c5:b5:e5:3c:d9:05:21:c9:cf:0c:73:f9:57:
         a7:b4:96:3d:d1:19:6d:0d:cb:ab:94:1c:df:f8:b8:88:d9:74:
         5c:f7:46:6c:ec:ab:1d:b8:b5:14:7f:b6:d5:94:3f:64:44:65:
         e9:27:16:75:c0:42:88:39:20:ce:1d:91:14:c2:40:fb:be:e5:
         4c:d3:ba:9c:98:12:a2:ef:b6:22:be:95:ca:6f:14:2c:d3:b1:
         1c:03:7a:5f:8d:02:81:5a:a7:64:75:25:f3:0b:2b:d7:a1:70:
         b6:84:c5:82:42:9a:db:10:e3:de:70:bf:3d:d3:04:11:e6:d1:
         15:1b:25:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIwNLnXxWzLLS2koUkTI8PtGVYDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc2Qjg2NUZBMjdCRThBQzJCNjg5MTYwREFCREJBNThB
MEFENzVGMTAeFw0yNDA0MTQyMjI2MjNaFw0yNDA0MTUyMjM3MjNaMDMxMTAvBgNV
BAMTKDg4NzY3NzI4MDFGMDJDNzZFMkU1OTk0OUFFNTM4NEZFNzU1MzUyNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgutfE1QfsWXZjPKh8tUXDe7N
F7XnRw9u/vaJLb4g7QhlF0Yxx9Vsp7ziijZBKSFcFKLpb5kEpsLfpgTtYeVF1aaf
kwsE7QmC/HGgP0wGr3xjSe5TGUma1BMHzFJZ6oXa5JK9015dvWAKG0GjZvUI3m0i
hcjcfD0/An4VpQXseyBhJwEO6PcnDUEuHIRRSVHy2WvBLHSpl/esvfjTPq43sNMZ
abKDyQK+91i0/54tRRoxYcxvOH+PPnSU8hvU47HmRYPqJwsFsDEAJulKfbitImO9
t5d7dJJdBsyD+dW8HjHQRkyMFY+WxhOQ/QIvKAeeHgCdafs9w2/F1RRiToxjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiHZ3KAHwLHbi5ZlJrlOE/nVTUmUwHwYDVR0j
BBgwFoAUt2uGX6J76KwraJFg2r26WKCtdfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa
QWgvMC9CNzZCODY1RkEyN0JFOEFDMkI2ODkxNjBEQUJEQkE1OEEwQUQ3NUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3NkI4NjVGQTI3QkU4QUMy
QjY4OTE2MERBQkRCQTU4QTBBRDc1RjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZaQWgvMC9C
NzZCODY1RkEyN0JFOEFDMkI2ODkxNjBEQUJEQkE1OEEwQUQ3NUYxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXVXkgqc3ng5qXZdQpIn92OIWlidvNyfNjnnuPEZZzKYGSJU3XMhOqhceN7lW
THtbIfywPQR1I9WuXrqFH3XpTYWht+chgIW/a0UeFpfrVbgzkYV7hL9UMpZ1e23V
ftz2FxtslbgVSeQ6WgYsZ6plyzpLZqhAFTlHPQ5cxTFneWPPQHjFteU82QUhyc8M
c/lXp7SWPdEZbQ3Lq5Qc3/i4iNl0XPdGbOyrHbi1FH+21ZQ/ZERl6ScWdcBCiDkg
zh2RFMJA+77lTNO6nJgSou+2Ir6Vym8ULNOxHAN6X40CgVqnZHUl8wsr16FwtoTF
gkKa2xDj3nC/PdMEEebRFRsl6A==
-----END CERTIFICATE-----