Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/640EACF8ACF51A6F45117487C5E46912FEE6809C.mft
File:                     640EACF8ACF51A6F45117487C5E46912FEE6809C.mft (raw, json)
Hash identifier:          wJJUcTSG1gNjHKpsFj8jWm6RjjzqcFPka1yObieTrLA=
Subject key identifier:   EC:7A:E1:23:1B:7B:93:00:6E:9E:63:70:78:2A:18:47:11:F8:A9:46
Authority key identifier: 64:0E:AC:F8:AC:F5:1A:6F:45:11:74:87:C5:E4:69:12:FE:E6:80:9C
Certificate issuer:       /CN=640EACF8ACF51A6F45117487C5E46912FEE6809C
Certificate serial:       063F52E5A739D3B0442394CC8232F642DA40A40A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/640EACF8ACF51A6F45117487C5E46912FEE6809C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/640EACF8ACF51A6F45117487C5E46912FEE6809C.mft
Manifest number:          0A
Signing time:             Wed 02 Aug 2023 18:47:40 +0000
Manifest this update:     Wed 02 Aug 2023 18:42:40 +0000
Manifest next update:     Thu 03 Aug 2023 19:54:40 +0000
Files and hashes:         1: 3230312e3231362e3132332e302f32342d3236203d3e20323730333035.roa (hash: B/O9O8/D/lFxhYV5XVo/e3s4dC13ig4q6JOtpHPQcdU=)
                          2: 3230312e3231362e3132302e302f32342d3234203d3e20323730333035.roa (hash: R0B61RPUjeMK09tE+ZQUc0MOUr16QIqQSq/4hY0w370=)
                          3: 323830343a366130303a663030303a3a2f33362d3337203d3e20323730333035.roa (hash: UpRcwwpqflc4BFmQYlUh49JrilDeiGoTSGdt6ity2SI=)
                          4: 3230312e3231362e3132322e302f32342d3234203d3e20323730333035.roa (hash: pmNQArA9XnX+jKsVK+AsDbLSa9s+trAj+ShwdrUCtX4=)
                          5: 640EACF8ACF51A6F45117487C5E46912FEE6809C.crl (hash: WgRj59QOtXJ6yPa+TiNuksjSqRltkmvwzNbFYlQJM2w=)
                          6: 3230312e3231362e3132302e302f32332d3233203d3e20323730333035.roa (hash: DFtCUYy/X/EANeDO/tulhjcnpAqWGCCdocP4FMHKlvE=)
                          7: 323830343a366130303a3a2f33322d3334203d3e20323730333035.roa (hash: 3Wo1mL3cfdwtcnSOOZMlbjxd3VmcLqBwIxU0fFYwytE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3f:52:e5:a7:39:d3:b0:44:23:94:cc:82:32:f6:42:da:40:a4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640EACF8ACF51A6F45117487C5E46912FEE6809C
        Validity
            Not Before: Aug  2 18:42:40 2023 GMT
            Not After : Aug  3 19:54:40 2023 GMT
        Subject: CN=EC7AE1231B7B93006E9E6370782A184711F8A946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:da:29:86:7f:c9:be:b4:8e:a9:da:df:f4:03:
                    ec:97:0f:11:1e:2a:64:13:35:cd:30:3a:d7:54:1e:
                    c6:12:fc:3c:17:ca:25:5f:c2:aa:1b:6c:0b:01:a1:
                    19:42:08:79:29:00:ae:8f:19:fb:fd:5b:3c:a4:58:
                    74:b7:cd:4a:e2:de:1b:a4:ae:db:1f:37:7c:37:62:
                    85:eb:80:25:47:30:6b:05:73:93:a2:2f:d6:66:ea:
                    cf:d8:f1:0d:77:e3:2f:3a:14:d0:71:e4:c9:93:eb:
                    db:2d:03:3d:6a:3e:b7:d1:ae:50:43:78:a8:31:3b:
                    d9:6d:dc:e5:e3:3c:7f:3c:b3:10:64:e5:0b:84:7d:
                    34:38:17:ad:ed:43:70:ca:48:91:d2:f9:c7:5c:59:
                    28:e8:a4:e9:dc:3c:8e:0a:5d:1f:c7:86:c3:f6:cb:
                    22:22:a8:eb:78:47:be:5d:d4:b7:fd:5d:6e:43:26:
                    8f:68:8b:73:15:a1:0f:91:4b:c2:c0:66:6c:7d:30:
                    ef:08:c5:37:cd:a7:f5:78:76:ff:5f:c5:5a:f7:df:
                    8a:06:26:78:b8:6f:3c:25:41:80:71:ff:51:10:f0:
                    67:8d:1f:a4:bb:ad:01:b8:48:92:4d:67:2e:54:84:
                    0c:0a:0e:98:b5:f7:5a:af:27:d1:05:2d:fb:c7:41:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:E1:23:1B:7B:93:00:6E:9E:63:70:78:2A:18:47:11:F8:A9:46
            X509v3 Authority Key Identifier:
                keyid:64:0E:AC:F8:AC:F5:1A:6F:45:11:74:87:C5:E4:69:12:FE:E6:80:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/640EACF8ACF51A6F45117487C5E46912FEE6809C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/640EACF8ACF51A6F45117487C5E46912FEE6809C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/640EACF8ACF51A6F45117487C5E46912FEE6809C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:08:39:12:ce:e1:8b:3a:21:d3:90:9a:40:20:38:0a:71:2f:
         5a:b0:f2:d5:c0:6a:00:49:11:83:02:27:2c:1f:d0:07:48:46:
         78:09:58:9a:3d:23:a1:6d:7f:52:48:80:63:af:c1:2d:69:a8:
         07:a2:6c:61:17:bd:8a:fc:c7:e2:42:fd:35:53:38:61:6f:cc:
         0f:ca:3b:b4:dd:01:16:c7:72:5f:f1:68:9a:9d:0c:32:d9:19:
         a3:1f:75:d3:e6:43:2e:d3:07:47:d2:18:fa:c3:aa:7b:89:13:
         aa:19:7c:0d:3e:58:22:3e:7b:72:c3:96:55:27:b3:fc:d2:3f:
         7a:27:a5:e2:66:d1:1e:f5:46:f9:ed:76:0c:05:93:6e:c4:4f:
         c7:53:e6:68:62:4b:04:b7:df:4e:1b:a8:6a:99:e3:54:a6:81:
         3c:53:48:99:3e:1c:e4:ae:bc:0a:d4:55:0f:55:e2:b8:92:72:
         3d:00:dd:fb:1b:4e:52:86:d7:f6:d7:8a:a3:c1:f4:e6:04:0a:
         a0:a6:cd:ae:56:60:a3:05:3b:f7:8c:bf:db:ef:15:2d:1c:dc:
         71:d5:2f:c3:5c:bf:0a:18:21:50:ed:ae:95:c3:d8:50:3b:4b:
         7d:20:28:49:38:08:a4:a8:c2:c3:51:8f:aa:69:17:53:d5:60:
         45:02:a6:89
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUBj9S5ac507BEI5TMgjL2QtpApAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQwRUFDRjhBQ0Y1MUE2RjQ1MTE3NDg3QzVFNDY5MTJG
RUU2ODA5QzAeFw0yMzA4MDIxODQyNDBaFw0yMzA4MDMxOTU0NDBaMDMxMTAvBgNV
BAMTKEVDN0FFMTIzMUI3QjkzMDA2RTlFNjM3MDc4MkExODQ3MTFGOEE5NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2imGf8m+tI6p2t/0A+yXDxEe
KmQTNc0wOtdUHsYS/DwXyiVfwqobbAsBoRlCCHkpAK6PGfv9WzykWHS3zUri3huk
rtsfN3w3YoXrgCVHMGsFc5OiL9Zm6s/Y8Q134y86FNBx5MmT69stAz1qPrfRrlBD
eKgxO9lt3OXjPH88sxBk5QuEfTQ4F63tQ3DKSJHS+cdcWSjopOncPI4KXR/HhsP2
yyIiqOt4R75d1Lf9XW5DJo9oi3MVoQ+RS8LAZmx9MO8IxTfNp/V4dv9fxVr334oG
Jni4bzwlQYBx/1EQ8GeNH6S7rQG4SJJNZy5UhAwKDpi191qvJ9EFLfvHQT5NAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU7HrhIxt7kwBunmNweCoYRxH4qUYwHwYDVR0j
BBgwFoAUZA6s+Kz1Gm9FEXSHxeRpEv7mgJwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvNjQwRUFDRjhBQ0Y1MUE2RjQ1MTE3NDg3QzVFNDY5MTJGRUU2ODA5Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC82NDBFQUNGOEFDRjUxQTZGNDUx
MTc0ODdDNUU0NjkxMkZFRTY4MDlDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2s4
THZDZUhLYkdnOWZXbm5HYjZ2SnRnaTVFR3REV0pHNU1rVkpkZk04a3EvMS82NDBF
QUNGOEFDRjUxQTZGNDUxMTc0ODdDNUU0NjkxMkZFRTY4MDlDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
cQg5Es7hizoh05CaQCA4CnEvWrDy1cBqAEkRgwInLB/QB0hGeAlYmj0joW1/UkiA
Y6/BLWmoB6JsYRe9ivzH4kL9NVM4YW/MD8o7tN0BFsdyX/Fomp0MMtkZox910+ZD
LtMHR9IY+sOqe4kTqhl8DT5YIj57csOWVSez/NI/eiel4mbRHvVG+e12DAWTbsRP
x1PmaGJLBLffThuoapnjVKaBPFNImT4c5K68CtRVD1XiuJJyPQDd+xtOUobX9teK
o8H05gQKoKbNrlZgowU794y/2+8VLRzccdUvw1y/ChghUO2ulcPYUDtLfSAoSTgI
pKjCw1GPqmkXU9VgRQKmiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org