Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.mft
File:                     4DD43D290C6B438D838E22B1B66200783B627EC5.mft (raw, json)
Hash identifier:          hJioSN9A4HlEp+IySWgeHJCeXWpo7Vj0wFzo8SqqMG4=
Subject key identifier:   70:20:F3:36:B6:92:C8:97:C7:C0:22:A7:8E:FC:18:19:78:74:50:FD
Authority key identifier: 4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5
Certificate issuer:       /CN=4DD43D290C6B438D838E22B1B66200783B627EC5
Certificate serial:       2941A85D284ABA2E2E3D9A6285B76302AF031A54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.mft
Manifest number:          01F6
Signing time:             Sun 14 Apr 2024 13:34:00 +0000
Manifest this update:     Sun 14 Apr 2024 13:29:00 +0000
Manifest next update:     Mon 15 Apr 2024 16:50:00 +0000
Files and hashes:         1: 4DD43D290C6B438D838E22B1B66200783B627EC5.crl (hash: lVSRfaTAfwaigL3H/f8Fp/tQ2WH+DaahlUNATv2wia8=)
                          2: 34352e3136362e32342e302f32332d3234203d3e20323637393530.roa (hash: R5Zg0rgltenv49NFGH3SqF6bMl9PlDIu8Uq9QL/WZTY=)
                          3: 323830343a353562303a3a2f33322d313238203d3e20323637393530.roa (hash: 8M9OUOOnWSEZGzlXsMloUU7cfKWbtR8DXRw0yRgDs0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:41:a8:5d:28:4a:ba:2e:2e:3d:9a:62:85:b7:63:02:af:03:1a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD43D290C6B438D838E22B1B66200783B627EC5
        Validity
            Not Before: Apr 14 13:29:00 2024 GMT
            Not After : Apr 15 16:50:00 2024 GMT
        Subject: CN=7020F336B692C897C7C022A78EFC1819787450FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:d4:51:4f:0f:0b:dd:1b:16:c6:9b:56:41:
                    da:00:ef:85:ad:97:4c:8d:c8:22:f5:53:29:3d:e7:
                    31:d1:7c:a7:6f:a3:f2:32:bc:ef:75:92:78:03:d6:
                    ac:3a:0a:0d:ea:62:fe:37:7e:23:21:ea:72:be:c4:
                    88:26:6e:6a:18:a9:9d:af:a3:2b:62:44:8f:88:de:
                    4b:fe:1d:e5:b4:02:ad:ef:f1:95:8c:1b:1b:3a:94:
                    5d:16:ac:e3:2d:9a:72:0c:32:b3:ac:4c:00:bc:20:
                    82:db:87:ea:f3:a0:99:84:4f:5b:e5:f3:a7:18:c5:
                    16:e5:8f:46:17:92:a2:5f:68:c4:79:a3:aa:19:b2:
                    ac:53:15:2e:77:c2:71:17:1d:68:6b:4b:72:bf:12:
                    59:f6:5f:2a:bc:ee:8f:8d:b3:cc:67:e5:96:8c:ee:
                    78:05:2c:10:8a:c4:99:96:c5:d4:72:e0:9f:a7:e4:
                    96:ac:a6:d2:e6:16:48:d7:33:ca:ec:2c:3b:19:22:
                    ec:c3:62:c1:e2:1d:fc:b0:31:96:ca:e7:69:5c:e7:
                    5a:42:d6:ee:d1:eb:5c:dc:8d:5a:ae:7a:65:e6:a7:
                    f1:80:9c:14:24:65:ec:3c:c1:38:5d:0a:e3:0b:27:
                    11:82:0c:5e:43:5e:4b:ee:0b:36:14:14:0e:d5:7d:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:20:F3:36:B6:92:C8:97:C7:C0:22:A7:8E:FC:18:19:78:74:50:FD
            X509v3 Authority Key Identifier:
                keyid:4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:58:72:15:f4:94:26:af:10:c7:1e:55:f2:34:e7:29:67:
         40:f2:07:fe:30:37:1c:98:d7:13:23:ba:75:04:8c:a5:1a:dd:
         49:be:e0:90:3d:97:80:6e:8c:12:35:44:2e:0f:c1:a4:e7:96:
         23:e6:cd:1f:ee:1c:9c:31:24:e2:86:19:94:e9:91:14:36:b1:
         a8:83:fe:64:42:ad:f1:b9:46:37:23:c5:6b:3c:65:62:9f:19:
         51:b2:d2:d5:b9:6b:d2:87:14:0e:31:83:38:dc:0b:5a:2b:8a:
         09:29:b1:6f:3b:e2:2a:ea:f1:5a:05:22:1b:60:54:ef:70:09:
         e1:d4:e2:74:24:e9:ef:2c:77:64:63:ae:32:8c:17:31:f1:67:
         fc:55:be:a6:f5:90:10:7b:a7:70:b4:bf:2c:dd:80:10:73:f8:
         5e:fc:db:12:ba:9c:93:ed:1a:1d:0c:a4:8c:a1:e7:46:44:c3:
         49:26:73:8d:c0:71:db:90:a2:f3:0c:d0:c2:ef:cb:a3:a4:96:
         24:f4:52:04:fb:70:ab:36:8d:b5:a9:95:35:2b:c0:22:3f:27:
         3c:38:9e:ae:51:6a:bf:3d:64:6b:cd:42:b9:e2:5c:d9:3a:fc:
         b6:db:fc:90:48:33:fd:35:45:5a:49:0b:1a:d7:e4:1a:7d:05:
         de:96:27:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKUGoXShKui4uPZpihbdjAq8DGlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERENDNEMjkwQzZCNDM4RDgzOEUyMkIxQjY2MjAwNzgz
QjYyN0VDNTAeFw0yNDA0MTQxMzI5MDBaFw0yNDA0MTUxNjUwMDBaMDMxMTAvBgNV
BAMTKDcwMjBGMzM2QjY5MkM4OTdDN0MwMjJBNzhFRkMxODE5Nzg3NDUwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxNRRTw8L3RsWxptWQdoA74Wt
l0yNyCL1Uyk95zHRfKdvo/IyvO91kngD1qw6Cg3qYv43fiMh6nK+xIgmbmoYqZ2v
oytiRI+I3kv+HeW0Aq3v8ZWMGxs6lF0WrOMtmnIMMrOsTAC8IILbh+rzoJmET1vl
86cYxRblj0YXkqJfaMR5o6oZsqxTFS53wnEXHWhrS3K/Eln2Xyq87o+Ns8xn5ZaM
7ngFLBCKxJmWxdRy4J+n5JasptLmFkjXM8rsLDsZIuzDYsHiHfywMZbK52lc51pC
1u7R61zcjVquemXmp/GAnBQkZew8wThdCuMLJxGCDF5DXkvuCzYUFA7VfXXtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcCDzNraSyJfHwCKnjvwYGXh0UP0wHwYDVR0j
BBgwFoAUTdQ9KQxrQ42DjiKxtmIAeDtifsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYVUt1ektGa2VKcFIzSHdSOENlMWloRXhQZksyNmRjVWR6M0JzZUZn
RncvMC80REQ0M0QyOTBDNkI0MzhEODM4RTIyQjFCNjYyMDA3ODNCNjI3RUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRERDQzRDI5MEM2QjQzOEQ4
MzhFMjJCMUI2NjIwMDc4M0I2MjdFQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SkJYVUt1ektGa2VKcFIzSHdSOENlMWloRXhQZksyNmRjVWR6M0JzZUZnRncvMC80
REQ0M0QyOTBDNkI0MzhEODM4RTIyQjFCNjYyMDA3ODNCNjI3RUM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ7xYchX0lCavEMceVfI05ylnQPIH/jA3HJjXEyO6dQSMpRrdSb7gkD2XgG6M
EjVELg/BpOeWI+bNH+4cnDEk4oYZlOmRFDaxqIP+ZEKt8blGNyPFazxlYp8ZUbLS
1blr0ocUDjGDONwLWiuKCSmxbzviKurxWgUiG2BU73AJ4dTidCTp7yx3ZGOuMowX
MfFn/FW+pvWQEHuncLS/LN2AEHP4XvzbErqck+0aHQykjKHnRkTDSSZzjcBx25Ci
8wzQwu/Lo6SWJPRSBPtwqzaNtamVNSvAIj8nPDierlFqvz1ka81CueJc2Tr8ttv8
kEgz/TVFWkkLGtfkGn0F3pYnmA==
-----END CERTIFICATE-----