Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.mft
File:                     E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.mft (raw, json)
Hash identifier:          XELetZSU+xeSxfWYeBdaw8a8kPW4OgmIm/FRawm4FAQ=
Subject key identifier:   10:27:CD:42:F9:8D:7F:E7:DC:B9:F5:7D:74:D8:BC:34:98:07:EF:FA
Authority key identifier: E1:2F:39:B2:CB:F3:6F:4D:1F:9D:52:03:A9:FA:87:ED:93:E0:C9:C7
Certificate issuer:       /CN=E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7
Certificate serial:       3EBF271F396BEF517841849AC81331EDE0C37671
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.mft
Manifest number:          31
Signing time:             Mon 15 Apr 2024 06:34:54 +0000
Manifest this update:     Mon 15 Apr 2024 06:29:54 +0000
Manifest next update:     Tue 16 Apr 2024 10:16:54 +0000
Files and hashes:         1: 34352e372e3134382e302f32322d3233203d3e20323636353836.roa (hash: r9G3xqYewY7aeGw308kT5kxpzQBbdoDXLEr3INK5H1U=)
                          2: 323830343a336534633a3a2f33322d3438203d3e20323636353836.roa (hash: lazqmYgWnuTXWe9ioGgenoKaQvl01qzaKgR5crjgjUw=)
                          3: E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.crl (hash: ZEciQaGCeYFLnz542FjcpoO8jdFRqIZ3qXuu744L1jI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bf:27:1f:39:6b:ef:51:78:41:84:9a:c8:13:31:ed:e0:c3:76:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7
        Validity
            Not Before: Apr 15 06:29:54 2024 GMT
            Not After : Apr 16 10:16:54 2024 GMT
        Subject: CN=1027CD42F98D7FE7DCB9F57D74D8BC349807EFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:ea:43:c5:ac:07:44:86:a5:60:b8:17:5f:
                    b3:b2:8a:ba:ab:ea:47:c4:ba:b7:24:31:a5:c6:d4:
                    e8:b8:3e:30:46:04:d3:ad:5b:64:32:ae:89:c1:b4:
                    0b:74:c6:61:e6:48:93:8d:fc:25:13:1d:69:68:ab:
                    94:dc:69:94:f7:c5:f8:5c:23:69:5b:c1:77:63:e7:
                    cf:51:58:58:05:c6:09:8b:2e:b6:c6:50:ca:7e:3c:
                    a4:1c:ec:6d:3d:ef:12:b4:e1:e1:80:42:02:e2:70:
                    d9:39:04:93:84:03:26:53:27:15:3e:f8:1f:cd:be:
                    65:59:14:46:06:56:33:7c:fb:0b:1f:2a:41:a2:3d:
                    8f:cd:7e:b7:79:5b:fc:07:79:a2:f6:af:ec:47:60:
                    a2:c0:18:d3:75:cf:05:be:63:d7:da:7a:68:ee:4b:
                    2d:cc:14:f9:ce:8e:ed:d1:b8:8b:83:f1:30:f3:fb:
                    4e:82:5b:6c:a3:82:11:5a:6c:39:4b:3c:86:64:ab:
                    0d:bb:0d:2a:ec:a3:40:41:20:fc:1a:a7:d8:46:81:
                    d5:f4:18:45:45:52:b4:2f:4b:52:58:e2:eb:f0:35:
                    f5:be:b4:38:f6:40:bc:69:1c:2e:9d:70:cf:68:a2:
                    07:0d:a6:d1:e7:81:60:51:f5:33:21:3e:e3:ad:5c:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:CD:42:F9:8D:7F:E7:DC:B9:F5:7D:74:D8:BC:34:98:07:EF:FA
            X509v3 Authority Key Identifier:
                keyid:E1:2F:39:B2:CB:F3:6F:4D:1F:9D:52:03:A9:FA:87:ED:93:E0:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/E12F39B2CBF36F4D1F9D5203A9FA87ED93E0C9C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4a:06:52:f0:5f:51:56:ff:ac:5d:5e:35:02:a3:a8:cb:98:
         64:e5:c1:a1:18:b6:96:01:2e:25:ef:10:5a:e5:e4:93:5c:aa:
         3b:28:19:95:7c:94:9e:52:76:7a:db:e6:d0:55:58:1c:bd:2d:
         de:b3:a7:f0:56:90:21:16:84:bc:88:37:48:aa:d0:6f:be:9a:
         07:6c:95:9c:34:fe:51:ac:e6:9e:d6:d6:02:8e:3e:a9:cc:8e:
         37:4a:05:d8:74:b4:d4:e7:05:af:b3:cb:0d:bd:69:22:99:6b:
         77:03:1d:60:c7:6e:eb:e3:ea:a3:ef:55:e7:9a:01:bc:4b:c3:
         ad:be:0e:bb:fb:94:f4:b1:6e:78:52:f9:a1:63:4c:ec:90:89:
         33:0a:47:11:e3:df:c3:0b:bc:82:16:a0:8f:c6:e1:75:ee:70:
         a6:19:26:e0:58:34:ae:26:01:c3:56:05:03:bd:94:7c:77:27:
         7c:35:ca:2e:8b:03:93:3a:58:12:56:82:72:c4:25:d5:91:5c:
         5f:55:e2:35:39:e1:21:87:c1:0c:82:f9:81:57:8b:64:bc:e0:
         fc:aa:ac:3b:23:51:f1:5e:72:19:a6:7b:11:d7:19:54:41:6e:
         5d:98:cf:ee:e3:06:c5:eb:44:46:95:25:59:cd:71:0f:cc:d3:
         65:a1:d8:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPr8nHzlr71F4QYSayBMx7eDDdnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTEyRjM5QjJDQkYzNkY0RDFGOUQ1MjAzQTlGQTg3RUQ5
M0UwQzlDNzAeFw0yNDA0MTUwNjI5NTRaFw0yNDA0MTYxMDE2NTRaMDMxMTAvBgNV
BAMTKDEwMjdDRDQyRjk4RDdGRTdEQ0I5RjU3RDc0RDhCQzM0OTgwN0VGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgW+pDxawHRIalYLgXX7Oyirqr
6kfEurckMaXG1Oi4PjBGBNOtW2QyronBtAt0xmHmSJON/CUTHWloq5TcaZT3xfhc
I2lbwXdj589RWFgFxgmLLrbGUMp+PKQc7G097xK04eGAQgLicNk5BJOEAyZTJxU+
+B/NvmVZFEYGVjN8+wsfKkGiPY/Nfrd5W/wHeaL2r+xHYKLAGNN1zwW+Y9faemju
Sy3MFPnOju3RuIuD8TDz+06CW2yjghFabDlLPIZkqw27DSrso0BBIPwap9hGgdX0
GEVFUrQvS1JY4uvwNfW+tDj2QLxpHC6dcM9oogcNptHngWBR9TMhPuOtXGBrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUECfNQvmNf+fcufV9dNi8NJgH7/owHwYDVR0j
BBgwFoAU4S85ssvzb00fnVIDqfqH7ZPgyccwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFpaTZoTmt0QlltS1c1SnVqemdlc2prbUJyaEptNjJkN0RkYmpSYzln
VjUvMC9FMTJGMzlCMkNCRjM2RjREMUY5RDUyMDNBOUZBODdFRDkzRTBDOUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UxMkYzOUIyQ0JGMzZGNEQx
RjlENTIwM0E5RkE4N0VEOTNFMEM5QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGFpaTZoTmt0QlltS1c1SnVqemdlc2prbUJyaEptNjJkN0RkYmpSYzlnVjUvMC9F
MTJGMzlCMkNCRjM2RjREMUY5RDUyMDNBOUZBODdFRDkzRTBDOUM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQUoGUvBfUVb/rF1eNQKjqMuYZOXBoRi2lgEuJe8QWuXkk1yqOygZlXyUnlJ2
etvm0FVYHL0t3rOn8FaQIRaEvIg3SKrQb76aB2yVnDT+UazmntbWAo4+qcyON0oF
2HS01OcFr7PLDb1pIplrdwMdYMdu6+Pqo+9V55oBvEvDrb4Ou/uU9LFueFL5oWNM
7JCJMwpHEePfwwu8ghagj8bhde5wphkm4Fg0riYBw1YFA72UfHcnfDXKLosDkzpY
ElaCcsQl1ZFcX1XiNTnhIYfBDIL5gVeLZLzg/KqsOyNR8V5yGaZ7EdcZVEFuXZjP
7uMGxetERpUlWc1xD8zTZaHYEg==
-----END CERTIFICATE-----