Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.mft
File:                     0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.mft (raw, json)
Hash identifier:          eDO86YsSfYVoKAdy6GqKvTM8X18t4e4x+3NjLM+epHI=
Subject key identifier:   82:A4:3F:0B:55:10:C5:34:CC:2C:A6:11:CE:9A:D3:61:67:C8:F2:55
Authority key identifier: 0D:C1:9C:23:CD:B3:5F:B0:A5:F7:42:FD:8D:6E:4C:05:3E:F0:0E:E9
Certificate issuer:       /CN=0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9
Certificate serial:       05812512B5F0EB7A51F2D8F311D5FF1E1989DFFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.mft
Manifest number:          CB
Signing time:             Sun 14 Apr 2024 18:33:00 +0000
Manifest this update:     Sun 14 Apr 2024 18:28:00 +0000
Manifest next update:     Mon 15 Apr 2024 21:03:00 +0000
Files and hashes:         1: 34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa (hash: b5+4q0hSWFEzogGqrpBDbS02aQCxfPD0d4FGBEch5L8=)
                          2: 323830343a363266303a3a2f33322d313238203d3e20323639333239.roa (hash: LO/U0sKJi0WeX2Hehs/G78WtCMD5wilKZ5CJ77y4Cho=)
                          3: 0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.crl (hash: DFR3OlP7tYHXJ2171BpfdXO5biuwDrxCEu2O5Dtailg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:81:25:12:b5:f0:eb:7a:51:f2:d8:f3:11:d5:ff:1e:19:89:df:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9
        Validity
            Not Before: Apr 14 18:28:00 2024 GMT
            Not After : Apr 15 21:03:00 2024 GMT
        Subject: CN=82A43F0B5510C534CC2CA611CE9AD36167C8F255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:d0:15:75:92:b0:e4:90:33:4d:3d:d3:2d:
                    1f:4b:6e:e5:c1:60:32:20:19:18:87:3d:9e:a1:9c:
                    0d:4c:29:64:9c:26:f8:d3:8d:8c:4d:46:a9:b7:08:
                    bb:f3:50:f9:63:16:44:9c:37:76:a7:25:6b:5c:30:
                    ac:8c:eb:ad:8f:30:4d:80:aa:d3:2f:6e:11:2a:70:
                    ba:a8:12:83:20:e7:ce:50:30:fb:f2:8f:93:6d:a3:
                    a0:52:5a:d9:ce:32:28:09:26:c4:de:4e:56:77:1e:
                    bc:69:c7:b0:7f:3f:b3:39:b3:66:06:53:98:59:b2:
                    92:f7:e2:6e:91:de:2a:c8:21:d1:1d:08:07:29:42:
                    de:95:a8:04:63:91:47:04:0f:0f:7e:fe:79:c5:e1:
                    1b:e8:c8:15:0b:11:8b:cb:7e:9e:1c:2b:70:db:c9:
                    93:0c:97:6b:cd:ad:0c:f0:67:18:5d:1d:09:09:4e:
                    2d:a2:23:bd:c2:b0:06:65:99:c8:62:05:40:19:b2:
                    c8:2c:a2:8f:ee:65:29:b7:c5:f6:99:ee:3d:98:44:
                    97:4b:9b:8e:5a:2e:7e:fd:2d:56:32:e6:10:7d:a9:
                    11:0e:67:fb:0a:46:ec:fa:e4:4b:0c:76:05:e3:63:
                    90:dd:fa:bd:57:88:43:ec:ca:dd:ee:e1:00:aa:f2:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:3F:0B:55:10:C5:34:CC:2C:A6:11:CE:9A:D3:61:67:C8:F2:55
            X509v3 Authority Key Identifier:
                keyid:0D:C1:9C:23:CD:B3:5F:B0:A5:F7:42:FD:8D:6E:4C:05:3E:F0:0E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:04:af:6c:78:16:00:74:2a:ad:46:2a:53:fb:87:51:50:
         59:50:d4:6b:63:62:18:ca:1e:0a:08:45:42:5e:3d:db:9e:ff:
         a5:48:f0:bd:ef:cf:49:fa:37:ae:e9:2b:b2:30:c4:f1:c6:3d:
         6a:97:8a:cf:f3:04:b4:c7:e7:a1:c7:7d:92:a7:d9:15:43:02:
         c7:a7:96:fc:52:da:91:ea:01:d8:74:cb:bf:8a:ce:f7:9e:1e:
         6e:54:59:e7:6d:83:d9:34:9b:7f:ab:bc:23:41:0f:46:45:8a:
         c1:eb:24:2e:78:b8:b5:61:85:85:84:91:b2:8c:b4:f6:fd:a2:
         3e:ee:50:26:ee:83:d6:dd:d1:f7:c7:d9:f9:f4:c2:e6:95:0d:
         a3:fd:f6:dd:b6:3f:fd:93:af:e9:f5:e7:6a:c6:cb:7b:b1:31:
         3e:ee:77:92:23:33:9e:48:41:5a:03:ce:27:51:38:92:b7:08:
         ee:d4:18:f4:7f:4e:76:fb:da:ad:67:57:3d:a8:c7:87:0c:2c:
         3c:99:39:e3:7b:ef:3c:c2:bb:23:d7:00:e4:9c:7e:77:5b:ba:
         ce:be:73:02:1a:35:66:6f:ac:a2:75:c0:41:ce:93:82:1b:24:
         8b:a4:e4:a1:8e:35:a8:39:10:48:2e:d9:57:49:2a:28:03:ea:
         23:b0:5c:2f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUBYElErXw63pR8tjzEdX/HhmJ3/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMTlDMjNDREIzNUZCMEE1Rjc0MkZEOEQ2RTRDMDUz
RUYwMEVFOTAeFw0yNDA0MTQxODI4MDBaFw0yNDA0MTUyMTAzMDBaMDMxMTAvBgNV
BAMTKDgyQTQzRjBCNTUxMEM1MzRDQzJDQTYxMUNFOUFEMzYxNjdDOEYyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJNAVdZKw5JAzTT3TLR9LbuXB
YDIgGRiHPZ6hnA1MKWScJvjTjYxNRqm3CLvzUPljFkScN3anJWtcMKyM662PME2A
qtMvbhEqcLqoEoMg585QMPvyj5Nto6BSWtnOMigJJsTeTlZ3Hrxpx7B/P7M5s2YG
U5hZspL34m6R3irIIdEdCAcpQt6VqARjkUcEDw9+/nnF4RvoyBULEYvLfp4cK3Db
yZMMl2vNrQzwZxhdHQkJTi2iI73CsAZlmchiBUAZssgsoo/uZSm3xfaZ7j2YRJdL
m45aLn79LVYy5hB9qREOZ/sKRuz65EsMdgXjY5Dd+r1XiEPsyt3u4QCq8kC5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUgqQ/C1UQxTTMLKYRzprTYWfI8lUwHwYDVR0j
BBgwFoAUDcGcI82zX7Cl90L9jW5MBT7wDukwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xVjc2YVJDNXplMzFXV2RlRTY2aGZBR1Zoc3FzMURYSnNNS2NQWEFCeVBl
LzAvMERDMTlDMjNDREIzNUZCMEE1Rjc0MkZEOEQ2RTRDMDUzRUYwMEVFOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8wREMxOUMyM0NEQjM1RkIwQTVG
NzQyRkQ4RDZFNEMwNTNFRjAwRUU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3FW
NzZhUkM1emUzMVdXZGVFNjZoZkFHVmhzcXMxRFhKc01LY1BYQUJ5UGUvMC8wREMx
OUMyM0NEQjM1RkIwQTVGNzQyRkQ4RDZFNEMwNTNFRjAwRUU5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
TgIEr2x4FgB0Kq1GKlP7h1FQWVDUa2NiGMoeCghFQl49257/pUjwve/PSfo3rukr
sjDE8cY9apeKz/MEtMfnocd9kqfZFUMCx6eW/FLakeoB2HTLv4rO954eblRZ522D
2TSbf6u8I0EPRkWKweskLni4tWGFhYSRsoy09v2iPu5QJu6D1t3R98fZ+fTC5pUN
o/323bY//ZOv6fXnasbLe7ExPu53kiMznkhBWgPOJ1E4krcI7tQY9H9OdvvarWdX
PajHhwwsPJk543vvPMK7I9cA5Jx+d1u6zr5zAho1Zm+sonXAQc6Tghski6TkoY41
qDkQSC7ZV0kqKAPqI7BcLw==
-----END CERTIFICATE-----