Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/28CB542702CFE330E20AB9139A8CC743D360ABD3.mft
File:                     28CB542702CFE330E20AB9139A8CC743D360ABD3.mft (raw, json)
Hash identifier:          srstVChmgd1iVbDWsqrAxT+vQIAU+faigxViTDvyHKE=
Subject key identifier:   C4:1F:D7:C4:93:C6:58:9E:61:58:EB:79:65:49:5A:FB:0E:7C:AD:7A
Authority key identifier: 28:CB:54:27:02:CF:E3:30:E2:0A:B9:13:9A:8C:C7:43:D3:60:AB:D3
Certificate issuer:       /CN=28CB542702CFE330E20AB9139A8CC743D360ABD3
Certificate serial:       7366D88ECF44F5CE3699F14FB7DC4ADB3BA15B79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28CB542702CFE330E20AB9139A8CC743D360ABD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/28CB542702CFE330E20AB9139A8CC743D360ABD3.mft
Manifest number:          1E
Signing time:             Mon 27 May 2024 07:19:05 +0000
Manifest this update:     Mon 27 May 2024 07:14:05 +0000
Manifest next update:     Tue 28 May 2024 07:45:05 +0000
Files and hashes:         1: 28CB542702CFE330E20AB9139A8CC743D360ABD3.crl (hash: pWOB4xtd8Qu3Ky86fwfY++Zj796i9RTaoan1hEJCafs=)
                          2: 3137302e38302e3131322e302f32322d3332203d3e20323636333736.roa (hash: hX2P1lPFYX5M7FbNQzYJI+vY1uA+/2ZTiCnyPpbbvp8=)
                          3: 323830343a333664383a3a2f33322d313238203d3e20323636333736.roa (hash: I7j4IEvf18uvpFQcq2CBIGohjXijQLVTBpk/uN1wjRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:d8:8e:cf:44:f5:ce:36:99:f1:4f:b7:dc:4a:db:3b:a1:5b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CB542702CFE330E20AB9139A8CC743D360ABD3
        Validity
            Not Before: May 27 07:14:05 2024 GMT
            Not After : May 28 07:45:05 2024 GMT
        Subject: CN=C41FD7C493C6589E6158EB7965495AFB0E7CAD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:8a:e6:8d:fa:6f:e5:35:ef:84:43:9d:02:
                    ab:ea:c3:8a:15:ba:f8:78:9a:fc:e6:7c:e4:43:71:
                    8f:62:66:7e:3f:01:09:b3:96:2e:d6:df:4e:c4:20:
                    f1:a8:ce:c3:2e:13:c3:79:48:f2:02:e0:de:31:88:
                    fb:0e:86:e2:a4:c2:15:0e:c8:9e:a5:4c:b1:2b:13:
                    fd:d7:2c:04:84:0f:1d:84:40:9c:e2:f9:40:00:d7:
                    8b:e7:6b:87:a0:09:df:95:fa:b8:ce:dc:96:25:33:
                    da:78:c6:a7:16:75:44:8d:dc:0f:c3:d1:0a:a9:22:
                    ec:1f:67:90:82:52:fe:98:ca:e2:c6:50:a8:e6:c5:
                    7c:5b:8d:f8:23:e3:0c:e1:c3:1e:1b:b6:59:ed:e0:
                    bc:9f:9e:00:9b:a5:89:55:ce:16:89:2a:b7:54:ea:
                    36:e4:e8:fb:84:91:7d:42:2b:53:2f:77:05:c3:d6:
                    7d:c3:2b:df:c8:f5:de:05:d4:89:58:fe:5b:da:ef:
                    b2:67:f4:e3:ba:d4:cb:5b:c5:b5:80:92:d3:1d:40:
                    63:14:e4:00:2a:57:72:5e:92:d8:ce:43:fc:4d:b1:
                    5d:9f:26:c5:cc:34:f0:4e:21:44:c6:03:28:99:1b:
                    9d:4c:e0:ba:2d:62:f7:b8:81:28:0d:f1:72:55:ed:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1F:D7:C4:93:C6:58:9E:61:58:EB:79:65:49:5A:FB:0E:7C:AD:7A
            X509v3 Authority Key Identifier:
                keyid:28:CB:54:27:02:CF:E3:30:E2:0A:B9:13:9A:8C:C7:43:D3:60:AB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/28CB542702CFE330E20AB9139A8CC743D360ABD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28CB542702CFE330E20AB9139A8CC743D360ABD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/28CB542702CFE330E20AB9139A8CC743D360ABD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:46:60:6a:f4:a7:c1:87:41:fd:fa:b7:cf:57:c4:a1:d0:
         46:8d:cc:07:ec:38:2e:52:2c:5a:8d:08:be:c6:01:da:47:3f:
         ba:1c:8e:ab:90:1c:d0:a5:6c:3b:a4:b2:f4:68:a5:d2:77:6f:
         a1:13:54:72:cc:de:3a:7d:e9:6d:cb:f8:6b:81:9e:c2:a7:56:
         89:a1:89:ce:09:3e:89:b8:6f:95:31:04:f9:2a:74:94:60:6b:
         5c:a6:3c:67:4c:16:95:18:27:02:17:32:06:9d:eb:76:2e:ff:
         c3:30:a2:b0:13:4f:be:9f:f6:03:27:85:52:6d:94:09:02:d4:
         4a:77:01:9d:1f:27:76:7c:29:6c:df:d1:39:82:21:84:9c:ca:
         ec:3e:4a:f5:57:b0:c6:9a:8c:21:00:84:5c:a8:86:49:06:fd:
         c1:05:6b:d6:3c:b9:f0:8f:81:ba:a9:38:af:04:86:53:c9:17:
         17:41:2b:89:aa:aa:81:93:7c:86:78:9a:b4:4f:59:52:d0:4c:
         40:28:11:c4:f1:fa:60:9e:cd:8f:b1:76:3f:29:b7:5a:81:8b:
         9a:3b:e5:34:3f:54:18:3e:28:c6:83:ad:48:dc:df:19:30:8d:
         04:dd:10:09:12:db:c6:d0:b8:ad:6e:22:7c:b8:40:5a:16:fa:
         5f:55:99:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUc2bYjs9E9c42mfFPt9xK2zuhW3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDQjU0MjcwMkNGRTMzMEUyMEFCOTEzOUE4Q0M3NDNE
MzYwQUJEMzAeFw0yNDA1MjcwNzE0MDVaFw0yNDA1MjgwNzQ1MDVaMDMxMTAvBgNV
BAMTKEM0MUZEN0M0OTNDNjU4OUU2MTU4RUI3OTY1NDk1QUZCMEU3Q0FEN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFormjfpv5TXvhEOdAqvqw4oV
uvh4mvzmfORDcY9iZn4/AQmzli7W307EIPGozsMuE8N5SPIC4N4xiPsOhuKkwhUO
yJ6lTLErE/3XLASEDx2EQJzi+UAA14vna4egCd+V+rjO3JYlM9p4xqcWdUSN3A/D
0QqpIuwfZ5CCUv6YyuLGUKjmxXxbjfgj4wzhwx4btlnt4LyfngCbpYlVzhaJKrdU
6jbk6PuEkX1CK1MvdwXD1n3DK9/I9d4F1IlY/lva77Jn9OO61MtbxbWAktMdQGMU
5AAqV3JektjOQ/xNsV2fJsXMNPBOIUTGAyiZG51M4LotYve4gSgN8XJV7e9hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxB/XxJPGWJ5hWOt5ZUla+w58rXowHwYDVR0j
BBgwFoAUKMtUJwLP4zDiCrkTmozHQ9Ngq9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ljZnU5WWV0TFBOWHhhSFNkNndKckpkRHQ2ZDhVTWE5RTFBRFgxallQ
ajgvMC8yOENCNTQyNzAyQ0ZFMzMwRTIwQUI5MTM5QThDQzc0M0QzNjBBQkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Q0I1NDI3MDJDRkUzMzBF
MjBBQjkxMzlBOENDNzQzRDM2MEFCRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3ljZnU5WWV0TFBOWHhhSFNkNndKckpkRHQ2ZDhVTWE5RTFBRFgxallQajgvMC8y
OENCNTQyNzAyQ0ZFMzMwRTIwQUI5MTM5QThDQzc0M0QzNjBBQkQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI11GYGr0p8GHQf36t89XxKHQRo3MB+w4LlIsWo0IvsYB2kc/uhyOq5Ac0KVs
O6Sy9Gil0ndvoRNUcszeOn3pbcv4a4GewqdWiaGJzgk+ibhvlTEE+Sp0lGBrXKY8
Z0wWlRgnAhcyBp3rdi7/wzCisBNPvp/2AyeFUm2UCQLUSncBnR8ndnwpbN/ROYIh
hJzK7D5K9VewxpqMIQCEXKiGSQb9wQVr1jy58I+Buqk4rwSGU8kXF0EriaqqgZN8
hniatE9ZUtBMQCgRxPH6YJ7Nj7F2Pym3WoGLmjvlND9UGD4oxoOtSNzfGTCNBN0Q
CRLbxtC4rW4ifLhAWhb6X1WZjw==
-----END CERTIFICATE-----