Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.mft
File:                     4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.mft (raw, json)
Hash identifier:          XpcNIBbzWMnpsFLmpoI26XuZkZkhaOYWO5Rwxt8jN2M=
Subject key identifier:   40:1A:D4:57:06:68:95:0B:50:69:D4:1C:C0:6C:BA:C0:BB:E6:41:18
Authority key identifier: 42:88:B4:C9:2C:50:CB:FA:D8:4B:9A:EE:EA:D7:A4:A4:BB:B3:BF:F8
Certificate issuer:       /CN=4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8
Certificate serial:       1D4F45482AD9614604C8CBE87FBED1BC012DD527
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.mft
Manifest number:          4A
Signing time:             Tue 29 Oct 2024 05:59:42 +0000
Manifest this update:     Tue 29 Oct 2024 05:54:42 +0000
Manifest next update:     Wed 30 Oct 2024 09:46:42 +0000
Files and hashes:         1: 4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.crl (hash: Y5NwnXBa9vcZQFkGNG/UEE39IA0zSkuKExo7AkInnXM=)
                          2: 3138312e3232342e34382e302f32322d3234203d3e20323731343936.roa (hash: LtyQY2Ocy/+M874E6JRiT8Z7waDywld2O46YHTGTc8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4f:45:48:2a:d9:61:46:04:c8:cb:e8:7f:be:d1:bc:01:2d:d5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8
        Validity
            Not Before: Oct 29 05:54:42 2024 GMT
            Not After : Oct 30 09:46:42 2024 GMT
        Subject: CN=401AD4570668950B5069D41CC06CBAC0BBE64118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:3a:ab:e2:34:f4:38:e0:8e:1b:14:84:c5:
                    0a:03:d8:86:f6:8a:67:2b:36:e1:50:64:bd:56:b7:
                    31:e9:6c:c0:ed:69:f9:9e:c4:98:f8:04:99:02:6d:
                    2e:ca:b3:11:0f:94:f1:40:34:7d:4a:64:b8:43:db:
                    c9:8b:e0:ca:27:01:dd:67:10:31:f5:24:53:9d:81:
                    f6:ae:aa:dd:41:a7:43:f4:c1:6a:e6:3e:d2:08:6b:
                    74:50:1d:c7:06:05:ae:42:04:5e:de:7b:87:fe:a2:
                    00:76:f0:57:1b:c3:0d:04:a7:82:e5:00:db:bf:cb:
                    01:d1:76:93:30:38:10:c7:ad:0e:b2:74:87:4b:f9:
                    61:61:74:54:a0:30:ed:67:57:40:21:34:d5:03:43:
                    a1:99:a8:3e:67:89:b9:83:bf:5c:b3:68:65:3b:33:
                    70:70:74:a1:81:8d:f9:a4:ad:85:d4:d5:e0:b9:b6:
                    65:38:28:77:81:c9:77:ad:23:ed:1b:b4:51:57:b3:
                    4a:8b:6a:9b:2c:61:6d:42:51:47:03:10:26:be:6d:
                    19:6f:14:dd:4e:ec:18:43:64:8a:32:26:25:97:8f:
                    13:79:bd:c8:c4:3f:8e:e5:33:13:2a:97:14:5e:f3:
                    0d:02:8b:43:36:d6:5d:24:e3:ef:d9:c1:c6:cd:72:
                    27:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1A:D4:57:06:68:95:0B:50:69:D4:1C:C0:6C:BA:C0:BB:E6:41:18
            X509v3 Authority Key Identifier:
                keyid:42:88:B4:C9:2C:50:CB:FA:D8:4B:9A:EE:EA:D7:A4:A4:BB:B3:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/4288B4C92C50CBFAD84B9AEEEAD7A4A4BBB3BFF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:9f:77:46:d0:06:ed:d7:7c:ab:0a:17:9e:8e:6e:98:ee:
         87:c8:04:cb:52:9e:6a:6d:74:06:eb:c3:49:ef:9d:ee:4a:4e:
         8a:27:77:c5:d1:a8:dd:5a:1f:6a:92:34:1d:ff:b0:1e:12:55:
         58:bf:37:bd:df:24:e2:18:68:5e:2b:f4:4f:00:4e:84:15:08:
         fd:0e:bc:95:70:ae:54:e0:87:ab:d4:2a:3f:b2:32:df:e8:2d:
         20:c1:41:2c:69:d5:df:da:4c:20:a8:00:8a:5f:46:88:59:4e:
         c1:d6:a6:eb:b2:51:5c:20:c7:88:92:b9:ba:08:2d:ff:de:9c:
         61:88:d1:a3:47:a1:3d:33:f3:f5:70:50:6f:5d:a8:41:78:91:
         f1:ba:59:9a:ec:09:ff:96:3a:a9:8b:fb:32:af:26:03:46:20:
         50:35:06:1d:9e:7c:c1:da:75:45:6a:85:cb:1e:ae:4b:a7:dd:
         6d:47:85:61:32:39:ec:4f:47:0e:89:f2:6b:fa:d6:06:3a:c6:
         0f:1c:d4:5b:01:35:b2:14:f5:ad:6c:8a:01:0e:f4:f9:f4:c9:
         7e:41:2e:2d:b8:04:36:8a:71:e6:2d:4a:d5:e7:f6:3e:71:ae:
         6a:90:16:84:bc:e7:4e:b6:8b:a1:8f:54:b3:af:15:b4:b2:bb:
         84:2f:11:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHU9FSCrZYUYEyMvof77RvAEt1ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI4OEI0QzkyQzUwQ0JGQUQ4NEI5QUVFRUFEN0E0QTRC
QkIzQkZGODAeFw0yNDEwMjkwNTU0NDJaFw0yNDEwMzAwOTQ2NDJaMDMxMTAvBgNV
BAMTKDQwMUFENDU3MDY2ODk1MEI1MDY5RDQxQ0MwNkNCQUMwQkJFNjQxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aTqr4jT0OOCOGxSExQoD2Ib2
imcrNuFQZL1WtzHpbMDtafmexJj4BJkCbS7KsxEPlPFANH1KZLhD28mL4MonAd1n
EDH1JFOdgfauqt1Bp0P0wWrmPtIIa3RQHccGBa5CBF7ee4f+ogB28Fcbww0Ep4Ll
ANu/ywHRdpMwOBDHrQ6ydIdL+WFhdFSgMO1nV0AhNNUDQ6GZqD5nibmDv1yzaGU7
M3BwdKGBjfmkrYXU1eC5tmU4KHeByXetI+0btFFXs0qLapssYW1CUUcDECa+bRlv
FN1O7BhDZIoyJiWXjxN5vcjEP47lMxMqlxRe8w0Ci0M21l0k4+/ZwcbNcif5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQBrUVwZolQtQadQcwGy6wLvmQRgwHwYDVR0j
BBgwFoAUQoi0ySxQy/rYS5ru6tekpLuzv/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3dLNnl1QXdqNmFINVRuY0JzRGFKU0p0TXFiVDNETXZOR3dDZkpSQnNu
UWMvMC80Mjg4QjRDOTJDNTBDQkZBRDg0QjlBRUVFQUQ3QTRBNEJCQjNCRkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyODhCNEM5MkM1MENCRkFE
ODRCOUFFRUVBRDdBNEE0QkJCM0JGRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3dLNnl1QXdqNmFINVRuY0JzRGFKU0p0TXFiVDNETXZOR3dDZkpSQnNuUWMvMC80
Mjg4QjRDOTJDNTBDQkZBRDg0QjlBRUVFQUQ3QTRBNEJCQjNCRkY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsTufd0bQBu3XfKsKF56Obpjuh8gEy1Keam10BuvDSe+d7kpOiid3xdGo3Vof
apI0Hf+wHhJVWL83vd8k4hhoXiv0TwBOhBUI/Q68lXCuVOCHq9QqP7Iy3+gtIMFB
LGnV39pMIKgAil9GiFlOwdam67JRXCDHiJK5uggt/96cYYjRo0ehPTPz9XBQb12o
QXiR8bpZmuwJ/5Y6qYv7Mq8mA0YgUDUGHZ58wdp1RWqFyx6uS6fdbUeFYTI57E9H
Donya/rWBjrGDxzUWwE1shT1rWyKAQ70+fTJfkEuLbgENopx5i1K1ef2PnGuapAW
hLznTraLoY9Us68VtLK7hC8RxA==
-----END CERTIFICATE-----
Generated at Mon Nov 4 07:08:46 2024 by rpki-client on console-fra.rpki-client.org