Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.mft
File:                     AA9C922523E2807EB8815AAA762240EEC9AE442D.mft (raw, json)
Hash identifier:          6CSNAqEbNiWKCTAMC+yvQPz3YYBveTLcS0gTsQcG4Vk=
Subject key identifier:   1E:BF:F2:B8:62:4D:25:93:4A:24:36:4A:EE:0B:78:EE:32:8A:75:CE
Authority key identifier: AA:9C:92:25:23:E2:80:7E:B8:81:5A:AA:76:22:40:EE:C9:AE:44:2D
Certificate issuer:       /CN=AA9C922523E2807EB8815AAA762240EEC9AE442D
Certificate serial:       66FF4EC340C0556D008C93262F8B414E6C0B6E02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.mft
Manifest number:          03
Signing time:             Sat 23 Mar 2024 20:35:36 +0000
Manifest this update:     Sat 23 Mar 2024 20:30:36 +0000
Manifest next update:     Sun 24 Mar 2024 22:09:36 +0000
Files and hashes:         1: 323830343a373437633a3a2f33322d313238203d3e20323730393834.roa (hash: iNOJrk96yPaF+Vc/BEeIEyAWu69aCTRGXfguQJtAv0Y=)
                          2: AA9C922523E2807EB8815AAA762240EEC9AE442D.crl (hash: SGYQ3lte0ehRnJtYtNpIGu8zw/78rgiL+ONIdYlie5c=)
                          3: 3133312e3232312e3134302e302f32322d3332203d3e20323730393834.roa (hash: aek0vZiADHeVNWo9ksrhCJ+0LENFVDpAoUQtjO+w6WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ff:4e:c3:40:c0:55:6d:00:8c:93:26:2f:8b:41:4e:6c:0b:6e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9C922523E2807EB8815AAA762240EEC9AE442D
        Validity
            Not Before: Mar 23 20:30:36 2024 GMT
            Not After : Mar 24 22:09:36 2024 GMT
        Subject: CN=1EBFF2B8624D25934A24364AEE0B78EE328A75CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:7a:4f:dd:d6:42:9c:d5:77:a6:b4:70:4e:
                    f4:50:9d:f6:84:84:91:3e:5f:3e:e3:04:c0:93:78:
                    b0:6d:c4:1c:64:86:4b:09:22:b3:7a:f7:7d:ec:17:
                    68:3a:f5:ff:f4:86:4f:76:ef:37:b8:31:f8:f1:4a:
                    3d:6a:1f:92:61:e7:eb:4e:ec:68:52:63:20:63:d4:
                    82:98:8d:96:ae:48:e5:49:1f:e1:e5:74:58:c3:5f:
                    48:82:00:30:55:43:8c:68:2c:3e:5a:3f:16:41:83:
                    3c:bb:01:93:f4:c7:ea:08:99:ad:30:48:7a:01:cc:
                    e6:77:7c:a2:59:d1:bd:e1:d4:24:7b:20:36:2a:22:
                    31:9f:fe:ac:b9:ed:98:b2:32:a6:29:0f:a1:01:28:
                    63:58:a6:36:54:61:db:c5:3c:59:51:9a:75:ce:c5:
                    d3:3b:83:97:06:13:e7:0e:3d:dc:d9:c9:7f:18:3e:
                    a3:23:33:ba:c1:1a:91:7f:23:82:19:c5:f6:7f:b0:
                    ad:23:27:df:a3:f5:0a:39:fb:d0:b8:bf:a2:29:cb:
                    d6:33:7d:cf:85:6f:7d:9c:5e:f9:09:20:71:ab:cc:
                    59:f0:1f:5b:50:5a:41:8e:ab:22:17:ba:a8:cd:25:
                    ad:32:b8:58:6e:8a:71:d0:24:73:20:d6:8d:43:a9:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BF:F2:B8:62:4D:25:93:4A:24:36:4A:EE:0B:78:EE:32:8A:75:CE
            X509v3 Authority Key Identifier:
                keyid:AA:9C:92:25:23:E2:80:7E:B8:81:5A:AA:76:22:40:EE:C9:AE:44:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:b0:d6:7b:3a:bd:90:a1:08:c9:4e:65:ee:75:a1:12:fe:
         d0:75:d6:b5:cf:49:af:8c:64:b5:61:8a:bf:b3:9d:80:31:39:
         22:e9:62:b2:21:23:7b:00:d6:c5:46:52:95:0e:98:96:f1:91:
         36:e9:eb:ca:a7:12:61:d7:fb:c3:ff:3f:e7:8d:de:10:d7:6b:
         c6:df:70:ac:ad:1e:9c:09:00:3d:8a:9e:f7:76:64:4b:6e:be:
         b4:47:8d:be:06:89:74:4e:2c:57:4a:26:9e:57:d0:87:f3:38:
         5a:de:e6:f0:29:b9:d4:a8:11:11:ad:7e:95:d2:fd:d7:e3:3b:
         eb:cc:e4:b9:3c:77:1d:e3:38:7c:b6:33:88:6e:67:e4:79:18:
         5f:71:da:5e:4d:d0:0c:0b:3b:50:d0:f0:42:f5:d7:eb:86:d0:
         99:67:e1:e4:27:17:a5:c3:d1:45:7b:d6:48:5b:b6:1c:8e:04:
         75:f3:f8:1c:69:50:39:30:44:58:3c:ae:56:a2:e5:af:38:94:
         48:bf:05:77:2c:e3:d8:31:79:2d:8e:0b:02:e5:2c:81:fe:01:
         db:50:31:17:38:8b:47:de:10:fe:42:b0:b9:99:39:08:1e:2c:
         b3:7e:46:ec:22:9f:b3:57:d6:7a:43:cd:a8:26:24:25:43:dc:
         e7:05:b5:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZv9Ow0DAVW0AjJMmL4tBTmwLbgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE5QzkyMjUyM0UyODA3RUI4ODE1QUFBNzYyMjQwRUVD
OUFFNDQyRDAeFw0yNDAzMjMyMDMwMzZaFw0yNDAzMjQyMjA5MzZaMDMxMTAvBgNV
BAMTKDFFQkZGMkI4NjI0RDI1OTM0QTI0MzY0QUVFMEI3OEVFMzI4QTc1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVXpP3dZCnNV3prRwTvRQnfaE
hJE+Xz7jBMCTeLBtxBxkhksJIrN6933sF2g69f/0hk927ze4MfjxSj1qH5Jh5+tO
7GhSYyBj1IKYjZauSOVJH+HldFjDX0iCADBVQ4xoLD5aPxZBgzy7AZP0x+oIma0w
SHoBzOZ3fKJZ0b3h1CR7IDYqIjGf/qy57ZiyMqYpD6EBKGNYpjZUYdvFPFlRmnXO
xdM7g5cGE+cOPdzZyX8YPqMjM7rBGpF/I4IZxfZ/sK0jJ9+j9Qo5+9C4v6Ipy9Yz
fc+Fb32cXvkJIHGrzFnwH1tQWkGOqyIXuqjNJa0yuFhuinHQJHMg1o1DqT6ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHr/yuGJNJZNKJDZK7gt47jKKdc4wHwYDVR0j
BBgwFoAUqpySJSPigH64gVqqdiJA7smuRC0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGp1R1J0QmRxWkxWOFBkajF3TGNwU3poQVV0ZEoyam1BVFU2WjVzU0hG
Q28vMC9BQTlDOTIyNTIzRTI4MDdFQjg4MTVBQUE3NjIyNDBFRUM5QUU0NDJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBOUM5MjI1MjNFMjgwN0VC
ODgxNUFBQTc2MjI0MEVFQzlBRTQ0MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGp1R1J0QmRxWkxWOFBkajF3TGNwU3poQVV0ZEoyam1BVFU2WjVzU0hGQ28vMC9B
QTlDOTIyNTIzRTI4MDdFQjg4MTVBQUE3NjIyNDBFRUM5QUU0NDJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZI6w1ns6vZChCMlOZe51oRL+0HXWtc9Jr4xktWGKv7OdgDE5IulisiEjewDW
xUZSlQ6YlvGRNunryqcSYdf7w/8/543eENdrxt9wrK0enAkAPYqe93ZkS26+tEeN
vgaJdE4sV0omnlfQh/M4Wt7m8Cm51KgREa1+ldL91+M768zkuTx3HeM4fLYziG5n
5HkYX3HaXk3QDAs7UNDwQvXX64bQmWfh5CcXpcPRRXvWSFu2HI4EdfP4HGlQOTBE
WDyuVqLlrziUSL8Fdyzj2DF5LY4LAuUsgf4B21AxFziLR94Q/kKwuZk5CB4ss35G
7CKfs1fWekPNqCYkJUPc5wW1rA==
-----END CERTIFICATE-----