Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.mft
File:                     808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.mft (raw, json)
Hash identifier:          2ViFSWfOBxuOZrpdjOBnrfINab5FtWyso3sF8kWv8uc=
Subject key identifier:   33:C2:11:6C:DA:81:AE:60:2F:43:A6:F1:01:10:97:8E:21:8D:B5:93
Authority key identifier: 80:8F:B3:FE:05:D9:E4:04:2C:6F:70:B9:62:DC:A3:6F:1B:A9:8F:79
Certificate issuer:       /CN=808FB3FE05D9E4042C6F70B962DCA36F1BA98F79
Certificate serial:       0A3537737B0B9842B2DAE935E9C810F947A7D52A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.mft
Manifest number:          3E
Signing time:             Sun 19 May 2024 12:47:16 +0000
Manifest this update:     Sun 19 May 2024 12:42:16 +0000
Manifest next update:     Mon 20 May 2024 13:55:16 +0000
Files and hashes:         1: 323830343a376531633a3a2f33322d3332203d3e20323731363033.roa (hash: dvwA/8DwcYqb4kXNpO6FdsyEb5fTksjt/CmiCQar2LY=)
                          2: 3139302e332e3136342e302f32322d3232203d3e20323731363033.roa (hash: HzCqfMvyINPsNEwn528fV+2iB/gq2XMEa+kg+mX+lwk=)
                          3: 3139302e332e3136372e302f32342d3234203d3e20323731363033.roa (hash: 2JW4Ka2+SIT/lmcnPXJXjUAIF6gxobpTeOY74j4hgY4=)
                          4: 3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (hash: pskdVrzl8kQxHKgIsvnG0NL43eNJ/5jXwtqjTAF7b28=)
                          5: 3139302e332e3136342e302f32322d3234203d3e20323731363033.roa (hash: 10XHX0L7n9lU6oyV+1Y/MGQEpg0QooeNlHJDhsGUX1A=)
                          6: 3139302e332e3136342e302f32342d3234203d3e20323731363033.roa (hash: S/ipwaMwiYN7Hj0OMZC0YnqE2gsy2eZqbKjShMA2Jhg=)
                          7: 808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.crl (hash: vjy4Zfybw6G3LFt9PqZ7WtNVJfT3ER/hGFXxJZjTU0Q=)
                          8: 3139302e332e3136352e302f32342d3234203d3e20323731363033.roa (hash: VaMVU9296snPr6N1F2zTNXt7NEYdJRm/+VPJcx8mOK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:37:73:7b:0b:98:42:b2:da:e9:35:e9:c8:10:f9:47:a7:d5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808FB3FE05D9E4042C6F70B962DCA36F1BA98F79
        Validity
            Not Before: May 19 12:42:16 2024 GMT
            Not After : May 20 13:55:16 2024 GMT
        Subject: CN=33C2116CDA81AE602F43A6F10110978E218DB593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:cd:ba:36:c0:58:5b:5b:0c:c9:98:e5:6c:
                    21:56:88:72:4e:3a:de:45:a6:1f:4b:0b:2a:5a:3d:
                    6d:33:86:60:e0:94:1f:cc:69:b0:98:0c:fd:56:9b:
                    b4:52:15:21:a2:35:48:61:10:26:6d:91:ab:d7:ba:
                    5e:1d:da:4f:45:ec:f3:fd:2f:69:d2:2e:12:6b:37:
                    a3:60:7d:91:b7:2c:69:9a:3e:cb:f1:55:71:66:78:
                    ce:f9:31:65:99:b3:d0:14:e0:4d:eb:48:96:a5:aa:
                    1b:f3:f6:82:89:05:3b:4c:56:ff:6b:b0:69:a8:1b:
                    f7:ee:1d:03:c3:92:85:9a:09:2f:aa:01:6a:d3:be:
                    29:b0:dd:03:43:c9:83:f9:84:4d:c6:7b:11:17:35:
                    53:ef:81:11:5c:b5:78:3e:41:ae:e4:c9:6e:d0:67:
                    67:67:22:58:df:78:4e:8a:e4:50:a9:68:71:e9:df:
                    13:3a:07:ad:aa:7b:69:5c:6d:7f:d0:fa:5d:66:f4:
                    5c:0e:18:69:2f:55:81:c7:f8:17:c8:77:d0:64:6a:
                    c8:a4:69:1d:94:f1:17:07:77:21:01:50:c9:1b:90:
                    a4:ff:25:0d:c7:8d:5f:94:03:84:c4:ab:0a:1a:4f:
                    fd:4f:e1:53:c8:c1:49:fd:ca:03:9c:30:66:5f:f8:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C2:11:6C:DA:81:AE:60:2F:43:A6:F1:01:10:97:8E:21:8D:B5:93
            X509v3 Authority Key Identifier:
                keyid:80:8F:B3:FE:05:D9:E4:04:2C:6F:70:B9:62:DC:A3:6F:1B:A9:8F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/1/808FB3FE05D9E4042C6F70B962DCA36F1BA98F79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:51:bf:e7:e9:b8:ba:02:7b:be:cc:bf:cd:8d:64:16:07:a5:
         f0:60:ba:96:26:42:05:df:52:d5:8b:87:36:4f:2f:f9:cb:b4:
         af:bb:77:07:ba:6c:bd:f9:98:0f:6b:13:ce:b2:29:38:f1:18:
         b3:34:d4:0b:94:63:e5:fb:0b:9c:40:ce:f5:29:e3:9e:03:bb:
         9f:92:32:a2:a7:16:34:6d:28:fa:ab:19:18:89:cf:4d:47:f5:
         59:73:ea:9d:9c:e9:97:d0:36:79:36:29:8a:8a:91:a4:71:cd:
         8f:8e:00:55:c9:20:3d:85:c3:6a:87:58:57:86:0a:f7:57:58:
         db:77:14:58:56:27:bd:b6:57:7d:ff:90:f2:a2:c6:c7:83:fd:
         89:3b:ed:8d:f0:68:ad:17:1c:bd:c1:a6:be:c5:93:b7:47:f9:
         0c:d5:b1:f2:b3:d0:60:88:5c:91:f5:87:c6:f6:7a:1d:df:a1:
         03:7f:a3:e8:35:12:56:91:9c:9e:b1:58:b6:da:5d:b5:c9:6f:
         d5:90:1d:03:df:aa:9e:41:8d:dd:5c:aa:cc:18:1a:56:30:b4:
         e4:f4:91:9e:d0:f1:f6:2d:48:4a:1f:3b:e9:14:b5:0b:b9:c9:
         9f:c0:4c:e9:ef:a8:ca:ac:7c:15:0b:aa:f2:53:a4:2f:c7:24:
         52:74:14:ae
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCjU3c3sLmEKy2uk16cgQ+Uen1SowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA4RkIzRkUwNUQ5RTQwNDJDNkY3MEI5NjJEQ0EzNkYx
QkE5OEY3OTAeFw0yNDA1MTkxMjQyMTZaFw0yNDA1MjAxMzU1MTZaMDMxMTAvBgNV
BAMTKDMzQzIxMTZDREE4MUFFNjAyRjQzQTZGMTAxMTA5NzhFMjE4REI1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn5s26NsBYW1sMyZjlbCFWiHJO
Ot5Fph9LCypaPW0zhmDglB/MabCYDP1Wm7RSFSGiNUhhECZtkavXul4d2k9F7PP9
L2nSLhJrN6NgfZG3LGmaPsvxVXFmeM75MWWZs9AU4E3rSJalqhvz9oKJBTtMVv9r
sGmoG/fuHQPDkoWaCS+qAWrTvimw3QNDyYP5hE3GexEXNVPvgRFctXg+Qa7kyW7Q
Z2dnIljfeE6K5FCpaHHp3xM6B62qe2lcbX/Q+l1m9FwOGGkvVYHH+BfId9Bkasik
aR2U8RcHdyEBUMkbkKT/JQ3HjV+UA4TEqwoaT/1P4VPIwUn9ygOcMGZf+GH1AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUM8IRbNqBrmAvQ6bxARCXjiGNtZMwHwYDVR0j
BBgwFoAUgI+z/gXZ5AQsb3C5Ytyjbxupj3kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SZEpuNUVmbW1nYkhuWkxDOEZaaVd1Vmo2eEhEYXgzTXduV1lUYVVhd3lL
LzEvODA4RkIzRkUwNUQ5RTQwNDJDNkY3MEI5NjJEQ0EzNkYxQkE5OEY3OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MDhGQjNGRTA1RDlFNDA0MkM2
RjcwQjk2MkRDQTM2RjFCQTk4Rjc5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Jk
Sm41RWZtbWdiSG5aTEM4RlppV3VWajZ4SERheDNNd25XWVRhVWF3eUsvMS84MDhG
QjNGRTA1RDlFNDA0MkM2RjcwQjk2MkRDQTM2RjFCQTk4Rjc5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ElG/5+m4ugJ7vsy/zY1kFgel8GC6liZCBd9S1YuHNk8v+cu0r7t3B7psvfmYD2sT
zrIpOPEYszTUC5Rj5fsLnEDO9SnjngO7n5IyoqcWNG0o+qsZGInPTUf1WXPqnZzp
l9A2eTYpioqRpHHNj44AVckgPYXDaodYV4YK91dY23cUWFYnvbZXff+Q8qLGx4P9
iTvtjfBorRccvcGmvsWTt0f5DNWx8rPQYIhckfWHxvZ6Hd+hA3+j6DUSVpGcnrFY
ttpdtclv1ZAdA9+qnkGN3VyqzBgaVjC05PSRntDx9i1ISh876RS1C7nJn8BM6e+o
yqx8FQuq8lOkL8ckUnQUrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org