Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.mft
File:                     0F96EA68BF39E7F0151222F70D6162CEF573FC9D.mft (raw, json)
Hash identifier:          X5FAZiNygUcqO2hK+VSCzULyC+iFa4kpiuR2paapRas=
Subject key identifier:   D4:D0:B6:CA:B1:DA:B9:7E:0C:84:0B:32:38:27:86:CB:04:14:28:1D
Authority key identifier: 0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D
Certificate issuer:       /CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
Certificate serial:       69C2B7885A4E8782DB00658CF5313B99074C6B82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.mft
Manifest number:          010C
Signing time:             Sun 11 Feb 2024 18:55:14 +0000
Manifest this update:     Sun 11 Feb 2024 18:50:14 +0000
Manifest next update:     Mon 12 Feb 2024 19:27:14 +0000
Files and hashes:         1: 34352e3232382e32342e302f32322d3332203d3e203532373035.roa (hash: jOOUSHsAX+uWRhZCuc6Spip32/psdvaPgyVJhlGTnhU=)
                          2: 3137372e37332e3134382e302f32322d3332203d3e203532373035.roa (hash: 9sJmDZHIirxjzfQ5tgG9eBUtfSdq4eWyQN7eULejoO8=)
                          3: 0F96EA68BF39E7F0151222F70D6162CEF573FC9D.crl (hash: FreG9Rf4jb8JorocjqG0Tog+O+D5EfTsgVCwYH58rFQ=)
                          4: 323830343a323430383a3a2f33322d313238203d3e203532373035.roa (hash: KQSZWidNlYtlf9YuLYs3ybvlxVacZygs5xOgHBrlnqU=)
                          5: 3136382e3232382e3233362e302f32322d3332203d3e203532373035.roa (hash: dcvO03DRv57K5nRgXV2i0cm3DBjfp1neuTTysNbfTG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c2:b7:88:5a:4e:87:82:db:00:65:8c:f5:31:3b:99:07:4c:6b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
        Validity
            Not Before: Feb 11 18:50:14 2024 GMT
            Not After : Feb 12 19:27:14 2024 GMT
        Subject: CN=D4D0B6CAB1DAB97E0C840B32382786CB0414281D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:38:e4:0b:24:fc:72:8b:4c:5a:59:eb:3b:
                    1b:d0:e4:86:99:b4:0f:09:9e:15:9e:30:5d:18:e7:
                    2a:cf:48:f9:b2:f5:81:96:f1:0a:d5:31:31:08:8f:
                    be:be:9c:c9:8c:82:0c:29:93:61:78:00:8a:79:98:
                    40:b2:bc:b9:19:28:2f:d3:4f:07:0e:65:65:a2:34:
                    a1:4c:aa:fd:fb:3b:36:a8:af:65:a5:a3:4f:85:8f:
                    3e:a3:c8:b7:b1:da:80:dc:39:bd:74:ad:1b:8a:cb:
                    12:1e:da:9c:12:61:82:a0:6a:65:fa:07:ba:d5:b3:
                    42:49:a2:49:cb:1a:e7:41:3a:42:6d:d5:86:ef:3e:
                    6e:8e:cd:5c:80:b7:e3:57:04:00:86:74:bc:4c:7d:
                    7e:cb:84:0a:43:d6:a9:50:d5:6f:7a:3c:4d:d3:ce:
                    06:79:f4:6e:c2:90:66:ea:e9:99:91:3b:8e:89:7a:
                    ea:f8:39:a9:35:72:01:de:58:e0:44:81:03:08:d2:
                    7c:a1:ea:c1:e0:6f:b3:89:1f:36:08:8a:f9:88:09:
                    e4:e7:9e:95:6a:4f:14:a3:57:a0:a1:5b:01:cb:4b:
                    56:c8:e7:3f:89:e4:cc:36:aa:6c:7a:bc:5b:a5:91:
                    ff:be:11:a3:7f:6b:a6:4e:34:e9:4c:5c:e1:3d:ff:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D0:B6:CA:B1:DA:B9:7E:0C:84:0B:32:38:27:86:CB:04:14:28:1D
            X509v3 Authority Key Identifier:
                keyid:0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6f:68:2c:53:6e:63:5f:79:c2:c2:74:1e:ff:6c:44:88:5d:
         79:ed:5c:c1:21:1f:cc:9b:0a:84:35:94:1d:e8:43:8f:8f:84:
         3c:fd:a9:a1:48:49:d3:85:5a:23:83:85:a2:eb:4e:ec:08:7b:
         ad:9c:ea:f9:ee:63:76:82:9a:84:3e:27:e0:08:3f:d9:e2:2d:
         e2:14:49:c4:f9:d5:b9:7f:50:b5:db:c6:78:f6:7c:b5:db:61:
         83:8f:f6:95:b7:25:ad:55:3c:cf:ef:08:68:a7:11:b7:ef:ad:
         fe:cd:34:b9:97:d4:0b:1b:83:02:03:d5:cf:d4:7d:ec:3d:47:
         c3:50:87:f1:1a:e1:87:0c:59:c4:2f:84:71:c4:a9:4c:43:c2:
         37:dd:41:04:89:3f:ae:78:10:9f:05:72:c2:57:ff:00:b7:34:
         95:26:4b:f0:ba:28:81:56:85:cc:fe:6a:39:6e:a9:ec:38:41:
         74:11:2e:f2:12:75:35:ff:fa:60:eb:21:f7:7a:60:75:8c:cc:
         b0:67:26:46:4c:3b:85:89:93:c0:15:6a:37:d3:f5:c8:28:c6:
         01:65:da:18:08:36:10:b7:49:5a:ab:75:83:fe:f3:64:91:54:
         e1:8a:8a:11:e5:c8:0d:49:21:73:92:1d:1a:09:4e:9c:eb:8c:
         15:d8:9b:9b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUacK3iFpOh4LbAGWM9TE7mQdMa4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NkVBNjhCRjM5RTdGMDE1MTIyMkY3MEQ2MTYyQ0VG
NTczRkM5RDAeFw0yNDAyMTExODUwMTRaFw0yNDAyMTIxOTI3MTRaMDMxMTAvBgNV
BAMTKEQ0RDBCNkNBQjFEQUI5N0UwQzg0MEIzMjM4Mjc4NkNCMDQxNDI4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNTjkCyT8cotMWlnrOxvQ5IaZ
tA8JnhWeMF0Y5yrPSPmy9YGW8QrVMTEIj76+nMmMggwpk2F4AIp5mECyvLkZKC/T
TwcOZWWiNKFMqv37Ozaor2Wlo0+Fjz6jyLex2oDcOb10rRuKyxIe2pwSYYKgamX6
B7rVs0JJoknLGudBOkJt1YbvPm6OzVyAt+NXBACGdLxMfX7LhApD1qlQ1W96PE3T
zgZ59G7CkGbq6ZmRO46Jeur4Oak1cgHeWOBEgQMI0nyh6sHgb7OJHzYIivmICeTn
npVqTxSjV6ChWwHLS1bI5z+J5Mw2qmx6vFulkf++EaN/a6ZONOlMXOE9/7evAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU1NC2yrHauX4MhAsyOCeGywQUKB0wHwYDVR0j
BBgwFoAUD5bqaL855/AVEiL3DWFizvVz/J0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RSHFGNDVtbUhONHdOR3hlRVJUdmk0RHNUNVBqcXNzZ1dUS1BjVXZ0QXNS
LzAvMEY5NkVBNjhCRjM5RTdGMDE1MTIyMkY3MEQ2MTYyQ0VGNTczRkM5RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wRjk2RUE2OEJGMzlFN0YwMTUx
MjIyRjcwRDYxNjJDRUY1NzNGQzlELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1FI
cUY0NW1tSE40d05HeGVFUlR2aTREc1Q1UGpxc3NnV1RLUGNVdnRBc1IvMC8wRjk2
RUE2OEJGMzlFN0YwMTUxMjIyRjcwRDYxNjJDRUY1NzNGQzlELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
nG9oLFNuY195wsJ0Hv9sRIhdee1cwSEfzJsKhDWUHehDj4+EPP2poUhJ04VaI4OF
outO7Ah7rZzq+e5jdoKahD4n4Ag/2eIt4hRJxPnVuX9QtdvGePZ8tdthg4/2lbcl
rVU8z+8IaKcRt++t/s00uZfUCxuDAgPVz9R97D1Hw1CH8RrhhwxZxC+EccSpTEPC
N91BBIk/rngQnwVywlf/ALc0lSZL8LoogVaFzP5qOW6p7DhBdBEu8hJ1Nf/6YOsh
93pgdYzMsGcmRkw7hYmTwBVqN9P1yCjGAWXaGAg2ELdJWqt1g/7zZJFU4YqKEeXI
DUkhc5IdGglOnOuMFdibmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org