Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.mft
File:                     670B53705B1407CC3B30DDA3548CFE22775A41B9.mft (raw, json)
Hash identifier:          yvuoqkU4DWDStf72eILP9w7SI6YrukS0KIyCASKCTZ0=
Subject key identifier:   CB:EE:0F:23:E9:60:81:4F:57:20:16:1F:FB:AE:51:C8:17:44:CF:C0
Authority key identifier: 67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9
Certificate issuer:       /CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
Certificate serial:       376658EF75F674789C376F7BFAE9AE1F791C70D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.mft
Manifest number:          25
Signing time:             Mon 29 Apr 2024 14:44:05 +0000
Manifest this update:     Mon 29 Apr 2024 14:39:05 +0000
Manifest next update:     Tue 30 Apr 2024 16:49:05 +0000
Files and hashes:         1: 3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa (hash: 9dfOXicUcXMC46nVKudJd09/b1lKhhLQtRH2jOV7SZc=)
                          2: 323830343a366130303a3a2f33322d3335203d3e20323730333035.roa (hash: CzSte827MYTnm/9ixHaqAIrVQuB4GLNsckq2Kj+nFm8=)
                          3: 323830343a366130303a663030303a3a2f33372d3337203d3e20323730333035.roa (hash: VECYbbPDVEtRbub2wq0ZKoXqLqAeC+s66XAMm7D5d70=)
                          4: 670B53705B1407CC3B30DDA3548CFE22775A41B9.crl (hash: zbntvS07Y0Lg+4HV39pmyQwmKIHW9qEDzXDu0Pbc8Zo=)
                          5: 3230312e3231362e3132302e302f32322d3234203d3e20323730333035.roa (hash: lraOCgF5FL7y7WWVLyri15jCuEQdEHICklydYe2qU5o=)
                          6: 323830343a366130303a663030303a3a2f33362d3336203d3e20323730333035.roa (hash: jpjs8o2EAAjp6hICqfNXxIZdVLMOqj+bfDE5K0aeJUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:66:58:ef:75:f6:74:78:9c:37:6f:7b:fa:e9:ae:1f:79:1c:70:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670B53705B1407CC3B30DDA3548CFE22775A41B9
        Validity
            Not Before: Apr 29 14:39:05 2024 GMT
            Not After : Apr 30 16:49:05 2024 GMT
        Subject: CN=CBEE0F23E960814F5720161FFBAE51C81744CFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:2d:79:13:70:0f:90:33:d7:9c:9c:ef:b5:
                    67:ff:cb:05:34:1c:ba:10:b2:73:95:69:d8:f5:a1:
                    2e:26:21:56:01:08:74:93:01:54:df:f9:9f:3f:9d:
                    00:d7:1a:54:98:06:d5:f1:86:b8:37:2a:b2:71:08:
                    54:e3:8d:19:be:c9:be:3c:10:5d:67:db:ab:f3:66:
                    a6:0f:9e:02:53:c5:74:6d:8f:62:e2:09:f5:16:e8:
                    d2:86:38:3d:5b:dd:18:9c:a0:00:ed:6e:be:ac:e5:
                    61:aa:bd:9a:65:25:7d:4c:7e:01:f1:38:db:0f:4d:
                    84:3a:0e:ed:8c:da:ed:c3:86:c0:b4:8e:23:10:35:
                    0b:2d:6d:ad:a8:0e:3b:3e:f6:ab:6e:6c:84:64:0a:
                    03:c1:2f:53:ff:09:74:f1:5b:02:41:1d:23:0b:dd:
                    22:6e:35:2c:8b:20:ca:cc:93:33:62:05:cd:75:00:
                    91:2d:97:74:90:7f:0b:40:a3:26:4e:21:cd:3b:a3:
                    8d:f0:e3:36:ee:74:0b:01:aa:70:99:5e:a7:7c:de:
                    63:c5:30:dc:7b:3d:d4:8c:e9:3f:3a:16:70:03:09:
                    6f:9b:8a:63:be:49:f9:c9:c4:f9:7d:52:94:d7:e0:
                    5f:26:c5:06:bd:f3:69:51:e0:6b:a8:44:89:11:ea:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:0F:23:E9:60:81:4F:57:20:16:1F:FB:AE:51:C8:17:44:CF:C0
            X509v3 Authority Key Identifier:
                keyid:67:0B:53:70:5B:14:07:CC:3B:30:DD:A3:54:8C:FE:22:77:5A:41:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/670B53705B1407CC3B30DDA3548CFE22775A41B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:f2:ca:18:93:4f:fe:30:d4:5b:00:86:f1:d8:30:49:c0:
         cc:de:31:d8:ce:b4:1b:f0:37:bf:5c:9c:d7:a5:9c:0b:39:e9:
         20:0a:74:52:6d:e8:bc:fb:8e:62:ff:f3:ae:26:fa:44:20:65:
         12:bd:f1:65:01:3a:6f:d5:56:0a:92:df:04:58:71:2b:09:76:
         95:0c:36:d2:91:9b:55:a8:e3:cb:d9:37:b4:49:02:42:bf:8a:
         c8:48:d0:00:5e:12:b1:4a:4a:14:e4:7d:7c:d9:5a:7a:f4:fc:
         02:f4:85:f4:0d:9a:d0:3b:19:8d:4d:4f:e3:f7:bd:98:ba:59:
         9b:17:81:50:7d:7e:18:48:19:0c:3d:e3:01:91:dc:09:b1:e5:
         fa:0a:4e:0b:85:da:59:a3:76:59:92:56:b5:58:60:ac:f8:ea:
         f0:66:37:7a:01:cb:a1:b3:a4:7f:fe:91:55:86:82:f4:cf:eb:
         63:f3:a8:c2:89:70:8f:9d:b6:45:9b:63:b2:08:36:fb:b2:df:
         10:87:ed:b1:dc:4b:46:d3:9b:c0:72:14:2b:01:b1:a4:a4:7e:
         c2:54:6f:ef:f1:9a:70:69:ff:90:82:c2:b7:d6:1d:1c:24:99:
         0e:c4:e6:08:ac:07:cb:47:92:b6:2b:b1:54:09:9c:58:55:ff:
         8f:34:cc:26
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUN2ZY73X2dHicN297+umuH3kccNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcwQjUzNzA1QjE0MDdDQzNCMzBEREEzNTQ4Q0ZFMjI3
NzVBNDFCOTAeFw0yNDA0MjkxNDM5MDVaFw0yNDA0MzAxNjQ5MDVaMDMxMTAvBgNV
BAMTKENCRUUwRjIzRTk2MDgxNEY1NzIwMTYxRkZCQUU1MUM4MTc0NENGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2S15E3APkDPXnJzvtWf/ywU0
HLoQsnOVadj1oS4mIVYBCHSTAVTf+Z8/nQDXGlSYBtXxhrg3KrJxCFTjjRm+yb48
EF1n26vzZqYPngJTxXRtj2LiCfUW6NKGOD1b3RicoADtbr6s5WGqvZplJX1MfgHx
ONsPTYQ6Du2M2u3DhsC0jiMQNQstba2oDjs+9qtubIRkCgPBL1P/CXTxWwJBHSML
3SJuNSyLIMrMkzNiBc11AJEtl3SQfwtAoyZOIc07o43w4zbudAsBqnCZXqd83mPF
MNx7PdSM6T86FnADCW+bimO+SfnJxPl9UpTX4F8mxQa982lR4GuoRIkR6urFAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUy+4PI+lggU9XIBYf+65RyBdEz8AwHwYDVR0j
BBgwFoAUZwtTcFsUB8w7MN2jVIz+IndaQbkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rOEx2Q2VIS2JHZzlmV25uR2I2dkp0Z2k1RUd0RFdKRzVNa1ZKZGZNOGtx
LzEvNjcwQjUzNzA1QjE0MDdDQzNCMzBEREEzNTQ4Q0ZFMjI3NzVBNDFCOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82NzBCNTM3MDVCMTQwN0NDM0Iz
MEREQTM1NDhDRkUyMjc3NUE0MUI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2s4
THZDZUhLYkdnOWZXbm5HYjZ2SnRnaTVFR3REV0pHNU1rVkpkZk04a3EvMS82NzBC
NTM3MDVCMTQwN0NDM0IzMEREQTM1NDhDRkUyMjc3NUE0MUI5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
K8TyyhiTT/4w1FsAhvHYMEnAzN4x2M60G/A3v1yc16WcCznpIAp0Um3ovPuOYv/z
rib6RCBlEr3xZQE6b9VWCpLfBFhxKwl2lQw20pGbVajjy9k3tEkCQr+KyEjQAF4S
sUpKFOR9fNlaevT8AvSF9A2a0DsZjU1P4/e9mLpZmxeBUH1+GEgZDD3jAZHcCbHl
+gpOC4XaWaN2WZJWtVhgrPjq8GY3egHLobOkf/6RVYaC9M/rY/Oowolwj522RZtj
sgg2+7LfEIftsdxLRtObwHIUKwGxpKR+wlRv7/GacGn/kILCt9YdHCSZDsTmCKwH
y0eStiuxVAmcWFX/jzTMJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org