Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1/145C61458E626CEEF29D45452C7A2577F47EC59F.mft
File:                     145C61458E626CEEF29D45452C7A2577F47EC59F.mft (raw, json)
Hash identifier:          4ynuJwo9A+zz5OIwQMixkSf7gHo6f13gEMnc+pb1De8=
Subject key identifier:   70:D5:DC:2A:28:0C:69:19:D4:D8:90:DE:61:E7:67:9A:EB:FE:E3:61
Authority key identifier: 14:5C:61:45:8E:62:6C:EE:F2:9D:45:45:2C:7A:25:77:F4:7E:C5:9F
Certificate issuer:       /CN=145C61458E626CEEF29D45452C7A2577F47EC59F
Certificate serial:       48EBE7DE3469B4A52B82BD803C4CDEEC23F67510
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/145C61458E626CEEF29D45452C7A2577F47EC59F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1/145C61458E626CEEF29D45452C7A2577F47EC59F.mft
Manifest number:          5A
Signing time:             Mon 15 Apr 2024 06:25:31 +0000
Manifest this update:     Mon 15 Apr 2024 06:20:31 +0000
Manifest next update:     Tue 16 Apr 2024 07:56:31 +0000
Files and hashes:         1: 145C61458E626CEEF29D45452C7A2577F47EC59F.crl (hash: UP+Z+bMBqxEr2t1tYM5U8aTyMErj+UYVq8oNqcn1UeU=)
                          2: 323830343a336263303a3a2f33322d3634203d3e20323632353736.roa (hash: mTKozsAvAIV6LKnIo7j8Q3loxxxd83mUUwamDZmJoxI=)
                          3: 3137372e38342e31362e302f32322d3234203d3e20323632353736.roa (hash: /ipN4smx2s5bbHVWFQqTQFQ5CXMfGhbW82b5pXPqAZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:eb:e7:de:34:69:b4:a5:2b:82:bd:80:3c:4c:de:ec:23:f6:75:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145C61458E626CEEF29D45452C7A2577F47EC59F
        Validity
            Not Before: Apr 15 06:20:31 2024 GMT
            Not After : Apr 16 07:56:31 2024 GMT
        Subject: CN=70D5DC2A280C6919D4D890DE61E7679AEBFEE361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:86:b5:de:58:7f:bc:37:ed:9c:e6:77:e2:
                    3b:d0:47:19:87:44:8a:6f:73:cb:1c:72:30:b5:c8:
                    bf:bf:16:e1:1b:96:0d:ca:05:c9:a1:ad:1e:ee:fb:
                    51:f7:d4:d4:8e:f5:4f:04:65:cc:0f:ae:1c:ab:10:
                    cb:f7:2e:16:1a:16:8d:a7:72:a5:88:ef:38:53:7a:
                    b4:bc:ac:85:a1:ee:86:f1:1a:2d:41:72:c0:06:cd:
                    b2:35:1c:97:5a:a8:ba:40:46:45:7d:ca:02:3a:26:
                    96:c6:46:99:0b:6d:fb:cc:fb:76:54:0d:b4:39:ff:
                    c0:74:0e:79:fc:b6:d3:00:ec:0c:b8:56:60:b3:f4:
                    6a:d5:1e:58:0d:d5:b4:b1:96:da:bd:93:35:4f:2f:
                    22:68:1c:92:f1:d1:8d:ab:a0:ce:9c:2b:98:f0:90:
                    4c:83:8f:2c:d2:96:66:95:9b:1e:5c:ed:f2:10:ac:
                    cc:ba:3b:5f:83:26:56:d8:eb:c9:77:5d:a4:b7:26:
                    da:fc:a1:73:4f:7d:42:a9:e2:ce:dc:37:a8:b5:76:
                    fb:bf:83:86:cc:9a:6e:a8:3b:3d:16:d2:dc:59:1d:
                    19:37:04:2c:72:04:de:00:a7:dc:c4:d8:c2:9e:a6:
                    3a:81:e7:2e:21:15:31:7d:fb:05:35:fa:69:65:e0:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D5:DC:2A:28:0C:69:19:D4:D8:90:DE:61:E7:67:9A:EB:FE:E3:61
            X509v3 Authority Key Identifier:
                keyid:14:5C:61:45:8E:62:6C:EE:F2:9D:45:45:2C:7A:25:77:F4:7E:C5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1/145C61458E626CEEF29D45452C7A2577F47EC59F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/145C61458E626CEEF29D45452C7A2577F47EC59F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eBfqdDt8nN2cgpqnbtmUP3W5KwGESoXhurN6Xiy8WKg/1/145C61458E626CEEF29D45452C7A2577F47EC59F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:32:19:d9:e1:b5:8b:a4:8c:36:60:ab:2f:2d:60:73:89:
         7d:19:cb:77:5e:3d:cb:b8:5d:bd:5a:23:be:74:ee:aa:b5:2a:
         c3:47:ec:74:33:65:ae:aa:10:2d:81:7f:f3:cd:f2:4a:cd:06:
         f9:da:cd:11:a0:cf:5c:a3:d9:4a:0c:9b:50:30:b7:e0:f9:0d:
         30:82:35:bd:07:56:e3:b9:47:f7:4a:e5:b0:e2:0a:f0:eb:6f:
         ec:37:b4:0e:52:77:89:ea:02:50:dd:eb:f7:f7:ad:83:d6:cd:
         78:41:df:5c:ee:33:2b:7f:57:90:e4:02:2e:84:e9:90:85:f9:
         9f:bd:b0:ad:a2:43:98:db:5e:33:74:fa:66:22:31:fc:12:d6:
         ab:92:eb:1e:08:06:18:48:03:09:a6:a5:54:5b:cd:5d:46:41:
         5a:d2:d2:cc:70:bf:c2:ee:74:1a:2b:8e:61:1d:45:df:0d:35:
         48:58:c6:13:99:f4:89:a6:1a:70:97:5d:6c:80:4e:1b:68:be:
         3b:e3:4b:91:c2:ee:1b:a2:85:d0:16:b4:53:66:49:e9:7b:98:
         22:77:a4:9e:c5:b0:1f:07:2b:32:2e:14:62:ec:bc:0c:4d:d1:
         2a:9a:3a:94:67:d6:26:1a:ef:ae:75:5d:cd:7b:64:7a:7b:c4:
         95:82:02:77
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUSOvn3jRptKUrgr2APEze7CP2dRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ1QzYxNDU4RTYyNkNFRUYyOUQ0NTQ1MkM3QTI1NzdG
NDdFQzU5RjAeFw0yNDA0MTUwNjIwMzFaFw0yNDA0MTYwNzU2MzFaMDMxMTAvBgNV
BAMTKDcwRDVEQzJBMjgwQzY5MTlENEQ4OTBERTYxRTc2NzlBRUJGRUUzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+4a13lh/vDftnOZ34jvQRxmH
RIpvc8sccjC1yL+/FuEblg3KBcmhrR7u+1H31NSO9U8EZcwPrhyrEMv3LhYaFo2n
cqWI7zhTerS8rIWh7obxGi1BcsAGzbI1HJdaqLpARkV9ygI6JpbGRpkLbfvM+3ZU
DbQ5/8B0Dnn8ttMA7Ay4VmCz9GrVHlgN1bSxltq9kzVPLyJoHJLx0Y2roM6cK5jw
kEyDjyzSlmaVmx5c7fIQrMy6O1+DJlbY68l3XaS3Jtr8oXNPfUKp4s7cN6i1dvu/
g4bMmm6oOz0W0txZHRk3BCxyBN4Ap9zE2MKepjqB5y4hFTF9+wU1+mll4NoHAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUcNXcKigMaRnU2JDeYednmuv+42EwHwYDVR0j
BBgwFoAUFFxhRY5ibO7ynUVFLHold/R+xZ8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9lQmZxZER0OG5OMmNncHFuYnRtVVAzVzVLd0dFU29YaHVyTjZYaXk4V0tn
LzEvMTQ1QzYxNDU4RTYyNkNFRUYyOUQ0NTQ1MkM3QTI1NzdGNDdFQzU5Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xNDVDNjE0NThFNjI2Q0VFRjI5
RDQ1NDUyQzdBMjU3N0Y0N0VDNTlGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2VC
ZnFkRHQ4bk4yY2dwcW5idG1VUDNXNUt3R0VTb1hodXJONlhpeThXS2cvMS8xNDVD
NjE0NThFNjI2Q0VFRjI5RDQ1NDUyQzdBMjU3N0Y0N0VDNTlGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
pgkyGdnhtYukjDZgqy8tYHOJfRnLd149y7hdvVojvnTuqrUqw0fsdDNlrqoQLYF/
883ySs0G+drNEaDPXKPZSgybUDC34PkNMII1vQdW47lH90rlsOIK8Otv7De0DlJ3
ieoCUN3r9/etg9bNeEHfXO4zK39XkOQCLoTpkIX5n72wraJDmNteM3T6ZiIx/BLW
q5LrHggGGEgDCaalVFvNXUZBWtLSzHC/wu50GiuOYR1F3w01SFjGE5n0iaYacJdd
bIBOG2i+O+NLkcLuG6KF0Ba0U2ZJ6XuYIneknsWwHwcrMi4UYuy8DE3RKpo6lGfW
JhrvrnVdzXtkenvElYICdw==
-----END CERTIFICATE-----