Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.mft
File:                     CBE0558E5B593300A63F71D0FF0F7F19660FD146.mft (raw, json)
Hash identifier:          UmVEG6RKURuvslWt6d1wbPWByhbV1iWHkyNH4qtWVgg=
Subject key identifier:   BA:9D:0E:A7:E1:D9:50:04:67:EB:72:20:32:5F:3B:A9:20:33:54:7C
Authority key identifier: CB:E0:55:8E:5B:59:33:00:A6:3F:71:D0:FF:0F:7F:19:66:0F:D1:46
Certificate issuer:       /CN=CBE0558E5B593300A63F71D0FF0F7F19660FD146
Certificate serial:       1AD57BABC647324F2632EF960709EC8ACEE50F46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.mft
Manifest number:          0292
Signing time:             Mon 15 Apr 2024 04:59:25 +0000
Manifest this update:     Mon 15 Apr 2024 04:54:25 +0000
Manifest next update:     Tue 16 Apr 2024 06:34:25 +0000
Files and hashes:         1: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: ebrE5DAkc3kO9l38/eNS3Ctxqd8r5URZdUvgEWIpck8=)
                          2: CBE0558E5B593300A63F71D0FF0F7F19660FD146.crl (hash: guBsozkoXYlp4esj9zZQEX7lagggb6ctKdvniceHhSY=)
                          3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: 729o7mlMTUIsFYooqZA1SAdNUYp69/YBE9VNoDylmZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d5:7b:ab:c6:47:32:4f:26:32:ef:96:07:09:ec:8a:ce:e5:0f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE0558E5B593300A63F71D0FF0F7F19660FD146
        Validity
            Not Before: Apr 15 04:54:25 2024 GMT
            Not After : Apr 16 06:34:25 2024 GMT
        Subject: CN=BA9D0EA7E1D9500467EB7220325F3BA92033547C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:d4:4b:54:6e:c2:4b:10:8e:64:1a:eb:92:
                    a1:8b:29:ad:bd:6a:57:f4:86:a8:af:a8:30:f8:4b:
                    57:7c:91:59:1e:ac:4e:a9:c3:c6:f6:94:00:ed:79:
                    34:19:e3:b6:5e:1d:86:36:65:e5:fb:2f:b9:59:c6:
                    b9:31:10:01:a3:94:b3:66:27:47:75:f1:6a:c3:ba:
                    0e:dc:15:15:5d:49:5f:47:00:55:9b:ce:f2:66:0f:
                    97:e6:68:d2:7c:a2:2e:03:08:8f:55:2a:b9:d0:87:
                    0d:cc:7a:42:95:71:51:67:f5:37:8e:d4:c7:9b:50:
                    7a:9f:44:7e:46:7e:c3:51:c8:fb:c7:e9:a9:8a:42:
                    8d:b0:45:a8:d0:e9:91:a8:46:f7:c3:3d:ff:29:1a:
                    7b:c1:60:60:d0:ab:79:d6:d2:fa:37:f9:db:2e:02:
                    cb:30:c3:11:a5:95:ff:f7:4b:b9:a7:7a:78:de:75:
                    a6:50:09:e2:96:06:e9:7c:17:46:89:68:2d:ed:49:
                    8f:7e:df:0b:b8:61:ac:da:13:0a:c6:ab:2b:f4:15:
                    d9:85:18:43:a9:bf:8d:ac:58:51:c1:5b:d0:ca:d6:
                    77:00:33:0a:fb:7a:9e:53:d2:15:61:4c:8f:25:29:
                    14:65:f3:bc:0b:f0:8c:1a:49:2e:0c:4b:1e:6d:fd:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:0E:A7:E1:D9:50:04:67:EB:72:20:32:5F:3B:A9:20:33:54:7C
            X509v3 Authority Key Identifier:
                keyid:CB:E0:55:8E:5B:59:33:00:A6:3F:71:D0:FF:0F:7F:19:66:0F:D1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:f7:09:23:6c:e0:5f:a0:6b:ac:e4:f5:33:d8:c5:58:77:
         7a:2d:23:d3:1b:6c:56:7a:b3:70:84:ec:8c:47:40:e8:8c:f6:
         dd:58:c0:fe:49:26:70:fa:fb:96:55:4d:04:ad:3d:2a:11:08:
         df:9c:00:db:dc:7e:f4:8a:40:7f:00:6a:fe:77:ed:ff:18:14:
         9a:d7:28:a8:2c:2f:8c:8e:25:a1:7f:53:20:1a:19:2c:94:bc:
         5d:eb:f3:db:95:52:3c:22:8d:a1:6f:51:24:b1:74:9a:5e:c8:
         70:15:0a:dc:4f:49:b9:6b:08:d8:19:dc:c8:e5:a3:64:3f:f0:
         d9:95:01:61:b9:9a:09:44:97:35:f6:7e:34:3d:62:fa:34:f8:
         24:bc:cd:4d:22:0b:07:ce:8c:91:ef:ba:7d:d2:f6:c2:d1:95:
         91:e2:a5:0e:f7:87:27:a4:84:0b:f4:79:39:72:6a:4c:e6:a5:
         22:c1:70:ac:21:7d:d6:42:f5:80:7a:8f:e1:93:25:d4:af:9b:
         bd:80:8a:46:1b:7e:0e:57:21:93:b2:e0:c2:64:41:e1:94:fd:
         32:9d:6f:1b:9c:4d:59:55:91:55:cc:bd:1d:30:49:a9:29:e0:
         b5:85:6a:33:64:1d:3a:fa:06:ca:6f:cc:e8:71:47:cc:ea:3b:
         30:c4:cf:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGtV7q8ZHMk8mMu+WBwnsis7lD0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFMDU1OEU1QjU5MzMwMEE2M0Y3MUQwRkYwRjdGMTk2
NjBGRDE0NjAeFw0yNDA0MTUwNDU0MjVaFw0yNDA0MTYwNjM0MjVaMDMxMTAvBgNV
BAMTKEJBOUQwRUE3RTFEOTUwMDQ2N0VCNzIyMDMyNUYzQkE5MjAzMzU0N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpNRLVG7CSxCOZBrrkqGLKa29
alf0hqivqDD4S1d8kVkerE6pw8b2lADteTQZ47ZeHYY2ZeX7L7lZxrkxEAGjlLNm
J0d18WrDug7cFRVdSV9HAFWbzvJmD5fmaNJ8oi4DCI9VKrnQhw3MekKVcVFn9TeO
1MebUHqfRH5GfsNRyPvH6amKQo2wRajQ6ZGoRvfDPf8pGnvBYGDQq3nW0vo3+dsu
AsswwxGllf/3S7mnenjedaZQCeKWBul8F0aJaC3tSY9+3wu4YazaEwrGqyv0FdmF
GEOpv42sWFHBW9DK1ncAMwr7ep5T0hVhTI8lKRRl87wL8IwaSS4MSx5t/c9HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUup0Op+HZUARn63IgMl87qSAzVHwwHwYDVR0j
BBgwFoAUy+BVjltZMwCmP3HQ/w9/GWYP0UYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy
UkgvMC9DQkUwNTU4RTVCNTkzMzAwQTYzRjcxRDBGRjBGN0YxOTY2MEZEMTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCRTA1NThFNUI1OTMzMDBB
NjNGNzFEMEZGMEY3RjE5NjYwRkQxNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMC9D
QkUwNTU4RTVCNTkzMzAwQTYzRjcxRDBGRjBGN0YxOTY2MEZEMTQ2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdg73CSNs4F+ga6zk9TPYxVh3ei0j0xtsVnqzcITsjEdA6Iz23VjA/kkmcPr7
llVNBK09KhEI35wA29x+9IpAfwBq/nft/xgUmtcoqCwvjI4loX9TIBoZLJS8Xevz
25VSPCKNoW9RJLF0ml7IcBUK3E9JuWsI2BncyOWjZD/w2ZUBYbmaCUSXNfZ+ND1i
+jT4JLzNTSILB86Mke+6fdL2wtGVkeKlDveHJ6SEC/R5OXJqTOalIsFwrCF91kL1
gHqP4ZMl1K+bvYCKRht+Dlchk7LgwmRB4ZT9Mp1vG5xNWVWRVcy9HTBJqSngtYVq
M2QdOvoGym/M6HFHzOo7MMTPpA==
-----END CERTIFICATE-----