Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.mft
File:                     9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.mft (raw, json)
Hash identifier:          1wUNkPiHgoFuSBa0CIZOxoEyzMXFkOOb+h03Iiq0qSE=
Subject key identifier:   94:50:F3:FF:B1:B4:DD:42:58:61:44:8D:75:10:1C:5F:94:0A:05:0C
Authority key identifier: 91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A
Certificate issuer:       /CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
Certificate serial:       40F23D13DAD511C393106D77F9C8A12AC36080D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.mft
Manifest number:          026D
Signing time:             Mon 15 Apr 2024 09:09:32 +0000
Manifest this update:     Mon 15 Apr 2024 09:04:32 +0000
Manifest next update:     Tue 16 Apr 2024 12:50:32 +0000
Files and hashes:         1: 9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.crl (hash: Z0oaR78MJzDFxEfp6jzNxkWZNxEvyYU3c1pvAC+/AYA=)
                          2: 323830343a343436303a343030303a3a2f33362d3336203d3e20323637363239.roa (hash: pK3U0XkkxPuqJ0GQmht09CrCZdTKYnYwxK3hYPFeU8o=)
                          3: 323830343a343436303a3a2f33322d313238203d3e20323637363239.roa (hash: TYa4+VVdjnLr/QPcKO318AoUH+eXlhPFoHadelsuVjg=)
                          4: 34352e37312e3231362e302f32322d3332203d3e20323637363239.roa (hash: LFg/46c901fjMcxNPTniZFrs3+g+x597rhePueaoDoA=)
                          5: 323830343a343436303a633030303a3a2f33362d3336203d3e20323637363239.roa (hash: OiSwSOSdowxWnLRjE1c7F+67HMRO4UvuZmIZuhKZFEw=)
                          6: 323830343a343436303a383030303a3a2f33362d3336203d3e20323637363239.roa (hash: ttGSb7ewhqwzI3jCVyZtl4K6i0j75M9aBrO8Bbnrtx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f2:3d:13:da:d5:11:c3:93:10:6d:77:f9:c8:a1:2a:c3:60:80:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
        Validity
            Not Before: Apr 15 09:04:32 2024 GMT
            Not After : Apr 16 12:50:32 2024 GMT
        Subject: CN=9450F3FFB1B4DD425861448D75101C5F940A050C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:d4:32:8d:39:ff:25:49:68:f9:e5:20:ab:
                    71:e7:6d:5a:65:8b:75:1b:56:c4:bb:ff:9e:f5:65:
                    e0:c2:ed:25:14:b0:7b:e4:6c:50:66:b8:66:66:2f:
                    78:30:0f:0a:a5:8d:e6:66:91:2a:bd:5c:06:37:9c:
                    1e:37:f3:ac:ce:91:05:f4:e3:d4:53:ea:a8:4e:de:
                    4c:b0:1d:29:cd:5f:f8:cc:62:ac:f5:d9:cb:0a:12:
                    eb:70:57:b1:23:8e:4e:0d:ff:03:07:76:3d:cf:91:
                    63:9a:ef:53:5f:bf:89:8b:cb:e4:74:99:c9:f5:4e:
                    76:34:15:bd:6d:59:40:38:74:a2:1b:de:c3:2e:f9:
                    a2:de:17:d6:32:66:f3:cf:47:eb:ed:bc:36:c9:39:
                    6f:36:06:fd:da:9d:2a:e4:d3:b2:33:7f:23:b2:14:
                    d3:80:3a:ac:64:f2:73:f3:3b:f1:7e:fa:fc:5c:78:
                    99:ff:02:db:c4:80:8f:c6:f3:62:14:75:38:82:90:
                    15:9e:cc:ba:05:cf:b6:11:3a:07:38:ca:65:b3:3f:
                    14:74:dc:87:10:8f:99:bb:c0:c1:b8:6f:e7:44:92:
                    91:b7:4b:d7:2b:82:02:e0:39:4b:cd:99:e5:74:e2:
                    23:b6:01:9a:ab:66:5c:6e:3c:80:4a:74:bd:95:a2:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:50:F3:FF:B1:B4:DD:42:58:61:44:8D:75:10:1C:5F:94:0A:05:0C
            X509v3 Authority Key Identifier:
                keyid:91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:4c:85:a3:04:e0:6b:33:73:5c:05:02:79:6a:bc:11:b2:
         c8:16:6b:ad:de:a7:4a:6e:bb:a3:35:d1:dc:bf:40:ee:de:22:
         bd:a5:e4:d5:d0:81:07:c2:c0:9c:6f:aa:22:6d:ca:1e:d3:86:
         a5:94:aa:92:5e:a2:1b:df:45:41:d1:c9:91:01:06:26:93:54:
         42:8e:fa:d3:59:15:17:c1:2d:9a:43:d2:77:34:ba:1c:96:f7:
         b3:c2:39:ea:c2:89:7c:a2:f8:ab:c3:6d:2b:fc:d3:9b:39:28:
         78:b2:df:20:3b:cb:ea:76:cc:79:2b:9b:5c:b5:d2:72:c7:6d:
         90:93:97:ac:e9:14:34:8e:be:6e:7e:27:b7:91:dd:bf:be:45:
         e5:ff:f0:30:27:7a:89:2d:9e:d2:9a:1b:b1:e7:17:f4:68:55:
         24:d9:81:3c:70:f4:95:f4:a9:38:5c:7f:b0:33:d4:ed:af:d7:
         53:7b:72:ae:70:50:62:64:c1:57:39:ef:4c:0e:2e:0e:ca:52:
         a2:70:9d:a0:4d:d3:f5:c2:74:34:a8:e3:ec:41:9c:31:6d:b3:
         0e:70:2b:d4:76:bf:2b:88:86:4a:c1:6b:ac:cb:4a:fe:6c:82:
         1b:03:18:2a:e0:28:35:f9:87:41:3d:a4:73:ed:17:c9:41:c6:
         e4:0a:97:e4
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQPI9E9rVEcOTEG13+cihKsNggNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTExNEIzMEJDMjk1OERGOEE5OEZEREQ1MzU2MDVBMkRB
NkU1QTM3QTAeFw0yNDA0MTUwOTA0MzJaFw0yNDA0MTYxMjUwMzJaMDMxMTAvBgNV
BAMTKDk0NTBGM0ZGQjFCNERENDI1ODYxNDQ4RDc1MTAxQzVGOTQwQTA1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqNQyjTn/JUlo+eUgq3HnbVpl
i3UbVsS7/571ZeDC7SUUsHvkbFBmuGZmL3gwDwqljeZmkSq9XAY3nB4386zOkQX0
49RT6qhO3kywHSnNX/jMYqz12csKEutwV7Ejjk4N/wMHdj3PkWOa71Nfv4mLy+R0
mcn1TnY0Fb1tWUA4dKIb3sMu+aLeF9YyZvPPR+vtvDbJOW82Bv3anSrk07IzfyOy
FNOAOqxk8nPzO/F++vxceJn/AtvEgI/G82IUdTiCkBWezLoFz7YROgc4ymWzPxR0
3IcQj5m7wMG4b+dEkpG3S9crggLgOUvNmeV04iO2AZqrZlxuPIBKdL2VonrdAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUlFDz/7G03UJYYUSNdRAcX5QKBQwwHwYDVR0j
BBgwFoAUkRSzC8KVjfipj93VNWBaLablo3owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NWXNXaDFKQnRTcEFjclVSY0tzQXUxUms4aG8zUk1kYUhHSnJQVWc0VjFR
LzAvOTExNEIzMEJDMjk1OERGOEE5OEZEREQ1MzU2MDVBMkRBNkU1QTM3QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC85MTE0QjMwQkMyOTU4REY4QTk4
RkRERDUzNTYwNUEyREE2RTVBMzdBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL01Z
c1doMUpCdFNwQWNyVVJjS3NBdTFSazhobzNSTWRhSEdKclBVZzRWMVEvMC85MTE0
QjMwQkMyOTU4REY4QTk4RkRERDUzNTYwNUEyREE2RTVBMzdBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
M6hMhaME4Gszc1wFAnlqvBGyyBZrrd6nSm67ozXR3L9A7t4ivaXk1dCBB8LAnG+q
Im3KHtOGpZSqkl6iG99FQdHJkQEGJpNUQo7601kVF8EtmkPSdzS6HJb3s8I56sKJ
fKL4q8NtK/zTmzkoeLLfIDvL6nbMeSubXLXScsdtkJOXrOkUNI6+bn4nt5Hdv75F
5f/wMCd6iS2e0pobsecX9GhVJNmBPHD0lfSpOFx/sDPU7a/XU3tyrnBQYmTBVznv
TA4uDspSonCdoE3T9cJ0NKjj7EGcMW2zDnAr1Ha/K4iGSsFrrMtK/myCGwMYKuAo
NfmHQT2kc+0XyUHG5AqX5A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org