Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.mft
File:                     F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.mft (raw, json)
Hash identifier:          R3CZRDvXQgUWIBOljzMc4JMacrovFB6CMIqGLDQC0ic=
Subject key identifier:   A1:6C:97:2E:34:B1:C3:20:7E:AA:1D:21:6E:6A:78:A5:C1:39:82:7C
Authority key identifier: F2:15:0C:97:A0:C5:F3:33:44:CC:2E:F6:EA:DB:59:C0:D7:C1:EF:32
Certificate issuer:       /CN=F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32
Certificate serial:       2A4276BA1AEA108739ECAEB03523351DD0224A0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.mft
Manifest number:          0661
Signing time:             Mon 15 Apr 2024 10:25:13 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:13 +0000
Manifest next update:     Tue 16 Apr 2024 12:35:13 +0000
Files and hashes:         1: 323830343a6662343a3a2f33322d3438203d3e20323633353939.roa (hash: GMgP7N2Z0L7Vz4fFEjQbNkbTjAv05HJNBzorXAe/8yU=)
                          2: F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.crl (hash: Z4nLR78fNR2eL/niDhjNIqIO0eJ0HoEXKsYAQmIrIek=)
                          3: 3137372e3138352e3230382e302f32302d3234203d3e20323633353939.roa (hash: dfr5prBeMiyS3BF1OfBWY0MA/0yVF++g+nYLdGz8juc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:42:76:ba:1a:ea:10:87:39:ec:ae:b0:35:23:35:1d:d0:22:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32
        Validity
            Not Before: Apr 15 10:20:13 2024 GMT
            Not After : Apr 16 12:35:13 2024 GMT
        Subject: CN=A16C972E34B1C3207EAA1D216E6A78A5C139827C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:e4:5b:1c:87:f6:16:01:94:15:64:a0:60:
                    72:1b:61:ad:1f:b1:26:2e:74:3f:4f:bb:64:62:4a:
                    dd:9f:27:85:07:63:e2:6d:0c:2b:5f:da:c7:db:77:
                    b6:e0:6e:09:00:06:c0:12:fb:9f:1a:c1:2a:55:dc:
                    7f:a2:a6:eb:7a:2b:60:bb:10:49:97:04:96:c4:0e:
                    c2:69:af:a5:6f:a2:d5:79:e9:c9:1e:c1:44:a9:9e:
                    23:8b:dc:4a:b8:23:9d:a9:b2:03:03:d6:77:cc:5e:
                    04:87:cc:eb:45:d1:71:e6:0f:66:c3:89:af:ee:57:
                    40:8d:94:f2:49:30:da:69:77:0b:c9:04:9e:4e:dc:
                    99:00:4f:61:bb:53:4a:06:d3:e2:db:98:81:6d:c9:
                    06:fd:8c:dc:8d:1a:d8:d2:56:7a:b0:da:53:6b:14:
                    9b:cd:99:de:37:97:2d:7e:38:a5:7b:04:48:15:dd:
                    3c:d2:fb:f8:1a:e8:b3:64:f2:9b:79:21:85:2e:4e:
                    47:2a:6a:48:00:73:ad:4c:6c:0f:a0:88:47:ee:a9:
                    86:95:6b:38:61:2b:88:58:aa:11:8c:4c:12:73:7d:
                    7c:1f:f0:36:6c:f3:86:7f:46:7d:1b:84:a5:ae:69:
                    87:54:c0:86:0b:05:5e:a3:9d:90:b5:49:ce:86:07:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6C:97:2E:34:B1:C3:20:7E:AA:1D:21:6E:6A:78:A5:C1:39:82:7C
            X509v3 Authority Key Identifier:
                keyid:F2:15:0C:97:A0:C5:F3:33:44:CC:2E:F6:EA:DB:59:C0:D7:C1:EF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ttRqzEcbxTFw4Qz8G6bMbyzBfhqm8R61TYw5PQ1FHdK/0/F2150C97A0C5F33344CC2EF6EADB59C0D7C1EF32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9a:2b:02:a5:28:c2:4f:bb:56:55:c0:05:74:c4:9a:0d:99:
         81:8b:70:0f:a2:2b:b9:ae:12:59:7e:23:a6:93:52:15:0d:80:
         bd:07:a4:86:a4:2f:71:e2:ea:bc:cf:ed:bb:75:4c:78:46:37:
         5b:d0:6d:1c:60:6f:a3:f5:1a:66:b1:a1:a7:21:66:d8:6d:22:
         32:70:49:8b:8c:c7:d4:87:12:39:a4:0e:02:74:94:44:82:1d:
         47:f7:df:4f:8c:fa:3b:6b:3c:07:f8:e1:c8:17:9f:80:5c:e8:
         22:df:47:5d:08:32:b6:5f:43:66:31:87:27:52:c4:0b:3e:2c:
         61:f5:6f:95:0c:7b:b8:17:ea:e6:65:79:d1:04:b7:53:c1:af:
         b9:8d:a6:00:57:83:62:0a:43:c1:af:61:1c:59:8f:30:c5:1b:
         a0:1c:55:39:fb:cf:77:54:c3:fb:f7:da:93:4c:ed:94:15:dd:
         8c:81:e1:95:66:08:f5:06:5c:40:58:4a:69:5b:b1:8e:9c:e3:
         ad:ad:00:93:ac:3f:5c:6b:aa:c9:67:78:b9:2f:f1:5a:a1:9f:
         2f:0c:44:5f:bd:9b:54:ec:fe:d0:9c:be:7e:25:82:ba:dd:a8:
         23:0d:79:ae:64:65:3d:37:69:e1:ab:38:8d:d7:2a:47:06:87:
         d9:45:3f:be
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUKkJ2uhrqEIc57K6wNSM1HdAiSg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxNTBDOTdBMEM1RjMzMzQ0Q0MyRUY2RUFEQjU5QzBE
N0MxRUYzMjAeFw0yNDA0MTUxMDIwMTNaFw0yNDA0MTYxMjM1MTNaMDMxMTAvBgNV
BAMTKEExNkM5NzJFMzRCMUMzMjA3RUFBMUQyMTZFNkE3OEE1QzEzOTgyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIauRbHIf2FgGUFWSgYHIbYa0f
sSYudD9Pu2RiSt2fJ4UHY+JtDCtf2sfbd7bgbgkABsAS+58awSpV3H+iput6K2C7
EEmXBJbEDsJpr6VvotV56ckewUSpniOL3Eq4I52psgMD1nfMXgSHzOtF0XHmD2bD
ia/uV0CNlPJJMNppdwvJBJ5O3JkAT2G7U0oG0+LbmIFtyQb9jNyNGtjSVnqw2lNr
FJvNmd43ly1+OKV7BEgV3TzS+/ga6LNk8pt5IYUuTkcqakgAc61MbA+giEfuqYaV
azhhK4hYqhGMTBJzfXwf8DZs84Z/Rn0bhKWuaYdUwIYLBV6jnZC1Sc6GB3F7AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUoWyXLjSxwyB+qh0hbmp4pcE5gnwwHwYDVR0j
BBgwFoAU8hUMl6DF8zNEzC726ttZwNfB7zIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby90dFJxekVjYnhURnc0UXo4RzZiTWJ5ekJmaHFtOFI2MVRZdzVQUTFGSGRL
LzAvRjIxNTBDOTdBMEM1RjMzMzQ0Q0MyRUY2RUFEQjU5QzBEN0MxRUYzMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9GMjE1MEM5N0EwQzVGMzMzNDRD
QzJFRjZFQURCNTlDMEQ3QzFFRjMyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3R0
UnF6RWNieFRGdzRRejhHNmJNYnl6QmZocW04UjYxVFl3NVBRMUZIZEsvMC9GMjE1
MEM5N0EwQzVGMzMzNDRDQzJFRjZFQURCNTlDMEQ3QzFFRjMyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
IZorAqUowk+7VlXABXTEmg2ZgYtwD6Irua4SWX4jppNSFQ2AvQekhqQvceLqvM/t
u3VMeEY3W9BtHGBvo/UaZrGhpyFm2G0iMnBJi4zH1IcSOaQOAnSURIIdR/ffT4z6
O2s8B/jhyBefgFzoIt9HXQgytl9DZjGHJ1LECz4sYfVvlQx7uBfq5mV50QS3U8Gv
uY2mAFeDYgpDwa9hHFmPMMUboBxVOfvPd1TD+/fak0ztlBXdjIHhlWYI9QZcQFhK
aVuxjpzjra0Ak6w/XGuqyWd4uS/xWqGfLwxEX72bVOz+0Jy+fiWCut2oIw15rmRl
PTdp4as4jdcqRwaH2UU/vg==
-----END CERTIFICATE-----