Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.mft
File:                     2504E16F52BD73EF878EA49008DBB404C890352F.mft (raw, json)
Hash identifier:          SCwhRrFbnP8408vnDh4xNu6aXJ5BQUYqcVHASzWQJUM=
Subject key identifier:   F9:51:C9:9C:61:B9:40:74:DA:4F:A6:F0:A9:02:23:C1:5D:50:21:73
Authority key identifier: 25:04:E1:6F:52:BD:73:EF:87:8E:A4:90:08:DB:B4:04:C8:90:35:2F
Certificate issuer:       /CN=2504E16F52BD73EF878EA49008DBB404C890352F
Certificate serial:       70A655F636A32B009D3205E4484AF4C98883E373
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.mft
Manifest number:          7D
Signing time:             Wed 24 Jul 2024 13:08:43 +0000
Manifest this update:     Wed 24 Jul 2024 13:03:43 +0000
Manifest next update:     Thu 25 Jul 2024 16:07:43 +0000
Files and hashes:         1: 2504E16F52BD73EF878EA49008DBB404C890352F.crl (hash: A/dZNNLfyMjDprDYbnLD+mIPB1S6AbLd1NkHdf56dfE=)
                          2: 323830343a326239343a3a2f33322d313238203d3e20323635313631.roa (hash: RYD2V7r+R7EIheYrwu3bHGjiB4E8s96/D167dIA81DM=)
                          3: 3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa (hash: PCpTMMBg3QL+4NNrQdVdok1gNhrWCShnoW15eLeujSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a6:55:f6:36:a3:2b:00:9d:32:05:e4:48:4a:f4:c9:88:83:e3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2504E16F52BD73EF878EA49008DBB404C890352F
        Validity
            Not Before: Jul 24 13:03:43 2024 GMT
            Not After : Jul 25 16:07:43 2024 GMT
        Subject: CN=F951C99C61B94074DA4FA6F0A90223C15D502173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:66:f9:e6:30:18:48:c2:5f:2f:9e:9e:87:
                    e5:68:88:a8:a0:c6:53:b3:2e:8d:0f:43:03:5a:72:
                    08:71:eb:ef:d9:ae:34:41:f7:68:c4:5d:bb:f5:79:
                    a1:98:f4:cc:8a:8a:89:27:51:61:c4:74:8c:a1:78:
                    48:d7:00:f4:ba:d0:9a:ec:b6:b7:1e:9e:27:d9:af:
                    b5:9c:3c:1b:ea:03:65:dc:26:46:cb:cb:08:41:3c:
                    7e:be:8a:b2:38:d0:cb:db:36:5d:8f:2c:e4:e0:72:
                    ac:1e:cc:1a:58:a0:e6:7c:8a:f2:96:cc:b1:09:b2:
                    7b:f7:46:47:da:fa:77:64:9f:ca:a8:59:f8:5d:15:
                    67:1f:1b:35:2f:13:21:6d:fb:c6:ad:d6:91:86:d8:
                    c2:4a:90:fe:62:75:2b:cf:5c:07:1c:0e:02:82:63:
                    92:26:b9:c0:23:89:79:13:34:d8:61:d6:70:ef:dd:
                    7e:06:26:40:b5:22:42:60:ae:4a:93:03:54:36:e9:
                    d1:b2:20:b7:39:73:3b:32:08:5c:3c:28:6d:d3:e6:
                    99:52:4f:d4:8d:90:a7:ca:0c:cc:78:d6:a2:f2:fd:
                    44:9c:7b:78:da:bf:5b:08:7d:f0:25:bd:e6:94:4b:
                    e8:7d:0a:23:f1:cd:99:f0:31:1e:ca:cc:bb:83:f4:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:51:C9:9C:61:B9:40:74:DA:4F:A6:F0:A9:02:23:C1:5D:50:21:73
            X509v3 Authority Key Identifier:
                keyid:25:04:E1:6F:52:BD:73:EF:87:8E:A4:90:08:DB:B4:04:C8:90:35:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:9e:b5:17:03:29:94:52:5b:6e:65:c1:ca:14:ca:b2:dd:
         06:cc:1b:94:46:ee:9f:09:c1:fa:6c:75:54:07:8a:0f:15:ce:
         ce:a3:2b:fe:46:a9:86:20:2e:46:5a:0a:59:70:c5:64:5d:f4:
         27:2e:fe:9e:f1:3d:52:6e:5d:10:0c:c7:c5:78:63:74:6d:f8:
         a7:88:7f:ac:8e:a7:8c:e3:24:d9:25:ce:ef:c5:75:5a:94:45:
         d8:a6:8b:b8:6d:fd:c6:2f:9c:55:3b:f5:b3:ac:51:6d:9e:d0:
         6e:90:83:21:bb:c3:02:5c:a0:6f:cc:af:83:61:ca:5f:77:b4:
         26:e7:32:ae:c7:41:fc:83:06:ec:94:20:c6:aa:0a:c0:9a:d6:
         12:cb:ad:c3:04:c7:0c:f1:cb:dd:7a:05:51:43:e6:fc:ab:0a:
         b1:96:7f:96:c4:59:d7:8c:53:c3:22:b3:c2:c9:f2:e6:cc:0b:
         95:1a:3d:85:fa:03:95:d5:b4:b5:6d:30:f5:47:d7:b0:6f:94:
         64:9c:ba:13:2d:8f:e1:ec:20:30:1a:8e:fc:2a:27:7a:cf:84:
         26:00:41:cd:00:6d:10:74:10:d1:88:8b:e5:32:4b:70:cb:b9:
         02:cf:48:98:19:4c:b6:77:b3:47:59:ee:ec:16:48:ba:12:bf:
         51:43:80:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcKZV9jajKwCdMgXkSEr0yYiD43MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUwNEUxNkY1MkJENzNFRjg3OEVBNDkwMDhEQkI0MDRD
ODkwMzUyRjAeFw0yNDA3MjQxMzAzNDNaFw0yNDA3MjUxNjA3NDNaMDMxMTAvBgNV
BAMTKEY5NTFDOTlDNjFCOTQwNzREQTRGQTZGMEE5MDIyM0MxNUQ1MDIxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tWb55jAYSMJfL56eh+VoiKig
xlOzLo0PQwNacghx6+/ZrjRB92jEXbv1eaGY9MyKioknUWHEdIyheEjXAPS60Jrs
trcenifZr7WcPBvqA2XcJkbLywhBPH6+irI40MvbNl2PLOTgcqwezBpYoOZ8ivKW
zLEJsnv3Rkfa+ndkn8qoWfhdFWcfGzUvEyFt+8at1pGG2MJKkP5idSvPXAccDgKC
Y5ImucAjiXkTNNhh1nDv3X4GJkC1IkJgrkqTA1Q26dGyILc5czsyCFw8KG3T5plS
T9SNkKfKDMx41qLy/USce3jav1sIffAlveaUS+h9CiPxzZnwMR7KzLuD9KLzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+VHJnGG5QHTaT6bwqQIjwV1QIXMwHwYDVR0j
BBgwFoAUJQThb1K9c++HjqSQCNu0BMiQNS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHk4YXF3OHJidzhOVnRNejRYQWNXWnYzeW9BbXY2cWIxQm9ZdkJLdkdi
aEgvMC8yNTA0RTE2RjUyQkQ3M0VGODc4RUE0OTAwOERCQjQwNEM4OTAzNTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1MDRFMTZGNTJCRDczRUY4
NzhFQTQ5MDA4REJCNDA0Qzg5MDM1MkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHk4YXF3OHJidzhOVnRNejRYQWNXWnYzeW9BbXY2cWIxQm9ZdkJLdkdiaEgvMC8y
NTA0RTE2RjUyQkQ3M0VGODc4RUE0OTAwOERCQjQwNEM4OTAzNTJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHWqetRcDKZRSW25lwcoUyrLdBswblEbunwnB+mx1VAeKDxXOzqMr/kaphiAu
RloKWXDFZF30Jy7+nvE9Um5dEAzHxXhjdG34p4h/rI6njOMk2SXO78V1WpRF2KaL
uG39xi+cVTv1s6xRbZ7QbpCDIbvDAlygb8yvg2HKX3e0JucyrsdB/IMG7JQgxqoK
wJrWEsutwwTHDPHL3XoFUUPm/KsKsZZ/lsRZ14xTwyKzwsny5swLlRo9hfoDldW0
tW0w9UfXsG+UZJy6Ey2P4ewgMBqO/Cones+EJgBBzQBtEHQQ0YiL5TJLcMu5As9I
mBlMtnezR1nu7BZIuhK/UUOA/Q==
-----END CERTIFICATE-----