Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.mft
File:                     94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.mft (raw, json)
Hash identifier:          v3g2+xzs4E6ToDw2k7L9ORijnEdRxHGuPcY2n9qeGvo=
Subject key identifier:   32:20:9E:34:FD:93:77:80:C9:82:0D:89:B8:23:90:2C:FB:23:7F:B3
Authority key identifier: 94:50:2C:5C:CF:45:B6:B8:51:3C:4C:2B:E0:15:34:65:2E:1C:F0:E0
Certificate issuer:       /CN=94502C5CCF45B6B8513C4C2BE01534652E1CF0E0
Certificate serial:       65F4D4F8C3B5BE29A9295FC20BF712B29395EC54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.mft
Manifest number:          D0
Signing time:             Sun 16 Apr 2023 08:45:48 +0000
Manifest this update:     Sun 16 Apr 2023 08:40:48 +0000
Manifest next update:     Mon 17 Apr 2023 10:02:48 +0000
Files and hashes:         1: 3137372e31302e3133322e302f32332d3233203d3e20323730363637.roa (hash: Ao6kTBnm6BzvqQ0uh6iwTVW4n069DVYMpFuWSXNemH4=)
                          2: 3137372e31302e3133332e302f32342d3234203d3e20323730363637.roa (hash: 2oj5yR/zn6NfrKp+kI26FiuU53sEyXQoSHy28OvUgro=)
                          3: 3137372e31302e3133342e302f32342d3234203d3e20323730363637.roa (hash: dyp8MpGvXSPmEuFlhvCbvM/hcxFx0+DfGgiW1fJqgk8=)
                          4: 94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.crl (hash: N/6OZ6SDnbQNFcgGDou6FNHF6yuimlEBbqfR9PAyg1M=)
                          5: 3137372e31302e3133352e302f32342d3234203d3e20323730363637.roa (hash: lVyMKqTlGPkOA4naO4wYGxOwCazcwBl3SQRmlkzwQzY=)
                          6: 3137372e31302e3133322e302f32322d3232203d3e20323730363637.roa (hash: 3dtRDv+Pk96dV/iu0jVjMin3jSK/fuHBjELJz/s70h8=)
                          7: 3137372e31302e3133322e302f32342d3234203d3e20323730363637.roa (hash: TL6o+pnEHaXYDDrMdPWnXdZZFe+kT8xBtb2SDSaK0Ko=)
                          8: 3137372e31302e3133342e302f32332d3233203d3e20323730363637.roa (hash: ann5+qXPyO1b/qYHKdlLjHh0GegkHaR/eGu0S1XF/4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f4:d4:f8:c3:b5:be:29:a9:29:5f:c2:0b:f7:12:b2:93:95:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94502C5CCF45B6B8513C4C2BE01534652E1CF0E0
        Validity
            Not Before: Apr 16 08:40:48 2023 GMT
            Not After : Apr 17 10:02:48 2023 GMT
        Subject: CN=32209E34FD937780C9820D89B823902CFB237FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:a5:42:6d:4b:c5:27:19:b4:d2:6e:0c:c1:
                    a3:19:67:1c:8e:05:5d:e5:da:26:03:1a:d2:3e:9b:
                    cb:d5:cf:69:72:49:67:26:fb:cf:d1:6c:8f:9d:a5:
                    3f:c8:70:3b:bb:3a:2e:1d:93:7d:4b:66:0e:14:44:
                    f1:1d:04:44:f2:c1:3e:34:b0:c9:5b:61:c7:93:93:
                    e4:a2:89:7e:39:bf:65:d0:ee:ee:fc:10:dd:12:8d:
                    d0:8b:24:68:18:c5:a3:45:4b:f1:e0:d7:50:cb:28:
                    a3:57:23:5e:e9:81:b6:c6:4c:40:1d:2a:a9:bf:ba:
                    13:e3:c3:2c:96:a2:90:f0:ad:30:9b:a2:e4:19:dd:
                    d9:10:05:4b:42:7c:1a:2c:80:6d:74:cf:8b:73:46:
                    7c:16:98:b2:b4:19:c2:2f:7e:9f:b0:8f:d6:ca:68:
                    15:c0:b2:4e:3d:33:bd:b2:9b:e6:d0:d6:e2:88:1d:
                    1b:ff:74:a1:5c:e3:b6:d5:1f:b9:70:9b:23:6a:a0:
                    37:02:a5:04:d6:71:0a:1a:dc:f5:94:39:bf:d2:ac:
                    77:80:f1:66:77:62:e3:97:73:19:b8:f1:54:76:47:
                    15:fd:b2:83:3c:0e:fe:e9:66:03:3a:f5:99:f5:74:
                    22:58:9b:16:fe:50:f0:aa:5c:32:e8:e0:35:22:d9:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:20:9E:34:FD:93:77:80:C9:82:0D:89:B8:23:90:2C:FB:23:7F:B3
            X509v3 Authority Key Identifier:
                keyid:94:50:2C:5C:CF:45:B6:B8:51:3C:4C:2B:E0:15:34:65:2E:1C:F0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/94502C5CCF45B6B8513C4C2BE01534652E1CF0E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:62:33:4c:9e:0f:2a:9d:bb:4e:9f:cd:88:41:ec:17:a9:
         49:ac:a4:33:91:3f:a7:e8:04:40:f9:f0:36:05:9e:49:ca:91:
         a3:2e:6b:bf:2a:30:e6:9e:de:0e:2e:3c:a6:ec:48:a2:4c:76:
         86:4e:67:ab:9c:a9:5f:1b:18:cf:fb:f5:44:e6:6e:e3:45:f2:
         c2:e0:63:eb:aa:56:21:46:e2:45:c6:f2:89:86:60:e9:58:de:
         87:80:12:7d:c2:b5:60:27:62:f4:ad:3b:d4:d8:1f:bd:12:cf:
         11:64:49:7d:03:fd:2c:f0:b9:44:22:38:d7:9b:00:0e:ee:38:
         82:32:79:bb:55:95:88:ae:85:30:f8:aa:93:e8:bb:58:ff:39:
         af:e5:53:9a:2f:35:74:85:1c:bf:43:6c:4f:1e:62:90:77:d5:
         e5:be:0f:57:64:f6:55:f4:bf:ee:63:24:7b:43:37:a0:4d:77:
         1a:3a:1f:bd:0c:19:b1:78:a2:ee:3a:f4:02:01:0e:da:a7:2b:
         d6:ef:84:ba:7a:e9:7c:e3:80:ec:72:f4:bd:58:3f:a0:3a:e8:
         1a:de:bb:0e:60:ac:36:ca:11:7d:b5:13:cb:ec:21:c4:ea:5e:
         68:50:c6:80:16:b6:ec:8f:b7:fa:63:10:1d:97:90:e4:48:29:
         26:bb:48:95
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZfTU+MO1vimpKV/CC/cSspOV7FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1MDJDNUNDRjQ1QjZCODUxM0M0QzJCRTAxNTM0NjUy
RTFDRjBFMDAeFw0yMzA0MTYwODQwNDhaFw0yMzA0MTcxMDAyNDhaMDMxMTAvBgNV
BAMTKDMyMjA5RTM0RkQ5Mzc3ODBDOTgyMEQ4OUI4MjM5MDJDRkIyMzdGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSL6VCbUvFJxm00m4MwaMZZxyO
BV3l2iYDGtI+m8vVz2lySWcm+8/RbI+dpT/IcDu7Oi4dk31LZg4URPEdBETywT40
sMlbYceTk+SiiX45v2XQ7u78EN0SjdCLJGgYxaNFS/Hg11DLKKNXI17pgbbGTEAd
Kqm/uhPjwyyWopDwrTCbouQZ3dkQBUtCfBosgG10z4tzRnwWmLK0GcIvfp+wj9bK
aBXAsk49M72ym+bQ1uKIHRv/dKFc47bVH7lwmyNqoDcCpQTWcQoa3PWUOb/SrHeA
8WZ3YuOXcxm48VR2RxX9soM8Dv7pZgM69Zn1dCJYmxb+UPCqXDLo4DUi2ebvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUMiCeNP2Td4DJgg2JuCOQLPsjf7MwHwYDVR0j
BBgwFoAUlFAsXM9FtrhRPEwr4BU0ZS4c8OAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mSzlzZEhzOWViWW9tckxaUVpNSDFrVnVMV3lWNld6NXB4ZGJDN3IyOURa
LzAvOTQ1MDJDNUNDRjQ1QjZCODUxM0M0QzJCRTAxNTM0NjUyRTFDRjBFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC85NDUwMkM1Q0NGNDVCNkI4NTEz
QzRDMkJFMDE1MzQ2NTJFMUNGMEUwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZL
OXNkSHM5ZWJZb21yTFpRWk1IMWtWdUxXeVY2V3o1cHhkYkM3cjI5RFovMC85NDUw
MkM1Q0NGNDVCNkI4NTEzQzRDMkJFMDE1MzQ2NTJFMUNGMEUwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
TTxiM0yeDyqdu06fzYhB7BepSaykM5E/p+gEQPnwNgWeScqRoy5rvyow5p7eDi48
puxIokx2hk5nq5ypXxsYz/v1ROZu40XywuBj66pWIUbiRcbyiYZg6Vjeh4ASfcK1
YCdi9K071NgfvRLPEWRJfQP9LPC5RCI415sADu44gjJ5u1WViK6FMPiqk+i7WP85
r+VTmi81dIUcv0NsTx5ikHfV5b4PV2T2VfS/7mMke0M3oE13GjofvQwZsXii7jr0
AgEO2qcr1u+EunrpfOOA7HL0vVg/oDroGt67DmCsNsoRfbUTy+whxOpeaFDGgBa2
7I+3+mMQHZeQ5EgpJrtIlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org