Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.mft
File:                     D6583CFEF699DC8C88F145658617A79CD61A3138.mft (raw, json)
Hash identifier:          RInNYvKf5HcddaNfGt8JAtRS+oQ1eJaMKP/tH8UatuI=
Subject key identifier:   AA:10:FB:69:DB:CE:23:FE:5C:EE:53:99:89:C4:AF:C5:6B:9E:31:C9
Authority key identifier: D6:58:3C:FE:F6:99:DC:8C:88:F1:45:65:86:17:A7:9C:D6:1A:31:38
Certificate issuer:       /CN=D6583CFEF699DC8C88F145658617A79CD61A3138
Certificate serial:       5B406241F2A27FACA22126DB64041AF68B77747C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6583CFEF699DC8C88F145658617A79CD61A3138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.mft
Manifest number:          DA
Signing time:             Tue 17 Sep 2024 16:35:27 +0000
Manifest this update:     Tue 17 Sep 2024 16:30:27 +0000
Manifest next update:     Wed 18 Sep 2024 18:10:27 +0000
Files and hashes:         1: 323830343a353561303a3a2f33322d3438203d3e20323637393436.roa (hash: o96e7s0StvkUZauI69RyrfTWIPqViZoZygsYJevjbB8=)
                          2: D6583CFEF699DC8C88F145658617A79CD61A3138.crl (hash: mT6zuumM8uqVZxGBCjf4EtMuSzWHwpECBBZFdY1xK+o=)
                          3: 34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (hash: Y+1L+Yz9Jx+Uw5n3wF3dBiEDWOO+2u4CqnJZoCEly4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:40:62:41:f2:a2:7f:ac:a2:21:26:db:64:04:1a:f6:8b:77:74:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6583CFEF699DC8C88F145658617A79CD61A3138
        Validity
            Not Before: Sep 17 16:30:27 2024 GMT
            Not After : Sep 18 18:10:27 2024 GMT
        Subject: CN=AA10FB69DBCE23FE5CEE539989C4AFC56B9E31C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:86:4c:3e:bb:5f:03:5c:c3:ea:d9:d9:12:
                    24:1d:cd:25:c6:16:75:c4:15:50:ea:36:54:7a:25:
                    10:34:7f:76:a0:80:6c:1e:fb:58:11:80:bc:e4:65:
                    99:f3:08:b7:22:fc:2a:76:ce:fc:c9:c9:c9:16:2d:
                    89:cf:48:84:96:f5:61:eb:93:05:1d:86:86:94:5e:
                    1d:76:3b:76:5e:d9:08:12:e9:20:8f:d7:c5:29:78:
                    58:99:cb:d2:df:3b:82:20:5e:dd:e3:f4:7f:5f:d4:
                    04:85:bb:84:bc:eb:be:4f:a7:31:0a:d8:03:49:cd:
                    8d:fe:f5:e8:5f:1e:d5:97:94:15:f7:77:50:23:a9:
                    37:83:75:d0:86:c8:89:39:b3:0d:ca:52:7f:fe:40:
                    cd:2d:c3:52:8a:0a:d5:3b:70:15:be:4d:50:f3:00:
                    e5:f3:75:ce:3c:0f:c3:06:19:d3:c3:21:5d:8e:9d:
                    7d:63:f0:cd:14:a6:8b:25:96:20:26:62:9d:d8:f7:
                    7e:1b:c0:8e:cf:be:92:0e:af:e7:22:86:26:90:13:
                    7a:62:27:43:87:d9:21:d9:06:e4:1f:b3:56:c6:3e:
                    6e:3c:97:22:cc:54:78:66:26:42:85:a5:35:2c:06:
                    ab:f7:49:04:e3:92:ab:9f:3b:1d:b2:79:2b:f9:cb:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:FB:69:DB:CE:23:FE:5C:EE:53:99:89:C4:AF:C5:6B:9E:31:C9
            X509v3 Authority Key Identifier:
                keyid:D6:58:3C:FE:F6:99:DC:8C:88:F1:45:65:86:17:A7:9C:D6:1A:31:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6583CFEF699DC8C88F145658617A79CD61A3138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/2/D6583CFEF699DC8C88F145658617A79CD61A3138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:ab:6f:b2:bb:ef:db:26:56:ad:86:4c:b4:42:37:0a:b3:
         32:66:a4:3d:1a:07:ff:1b:13:fb:9d:72:f8:26:15:7c:80:af:
         02:97:7d:3b:cd:16:51:2b:ef:59:93:40:65:e7:a3:90:f0:63:
         8c:31:01:01:3a:52:de:61:f4:5e:df:f8:0a:af:59:98:f6:21:
         e5:31:6a:01:26:18:be:53:1b:f3:42:49:a0:38:17:94:5b:a8:
         f9:3e:c4:5d:e6:59:36:17:f6:7f:ca:e9:14:a3:9b:76:39:c6:
         88:93:c1:1f:68:f1:73:88:fb:a7:3c:0f:6a:6d:03:82:ab:b2:
         af:01:a0:49:17:f4:85:1f:1f:8a:d4:70:19:45:e1:50:6e:46:
         0f:e1:61:45:b6:76:b3:9a:c4:7b:40:dd:19:04:1d:c3:58:d5:
         dd:aa:45:b2:60:53:75:42:4c:54:73:9c:d8:8a:7b:66:f5:86:
         a7:59:ae:45:7a:f9:8e:c2:93:ee:7b:e4:13:b7:63:29:4e:f7:
         52:fa:de:bf:6d:09:74:64:a5:b6:cc:ae:ca:6b:ea:f4:e0:b4:
         a0:4d:ee:12:e5:75:0d:3d:fc:86:bc:1c:0c:e1:cd:22:90:f0:
         a7:54:6b:71:ee:0f:c4:50:75:75:d0:22:4d:27:4c:7e:69:1f:
         63:ee:8c:cb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUW0BiQfKif6yiISbbZAQa9ot3dHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY1ODNDRkVGNjk5REM4Qzg4RjE0NTY1ODYxN0E3OUNE
NjFBMzEzODAeFw0yNDA5MTcxNjMwMjdaFw0yNDA5MTgxODEwMjdaMDMxMTAvBgNV
BAMTKEFBMTBGQjY5REJDRTIzRkU1Q0VFNTM5OTg5QzRBRkM1NkI5RTMxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuIZMPrtfA1zD6tnZEiQdzSXG
FnXEFVDqNlR6JRA0f3aggGwe+1gRgLzkZZnzCLci/Cp2zvzJyckWLYnPSISW9WHr
kwUdhoaUXh12O3Ze2QgS6SCP18UpeFiZy9LfO4IgXt3j9H9f1ASFu4S8675PpzEK
2ANJzY3+9ehfHtWXlBX3d1AjqTeDddCGyIk5sw3KUn/+QM0tw1KKCtU7cBW+TVDz
AOXzdc48D8MGGdPDIV2OnX1j8M0UposlliAmYp3Y934bwI7PvpIOr+cihiaQE3pi
J0OH2SHZBuQfs1bGPm48lyLMVHhmJkKFpTUsBqv3SQTjkqufOx2yeSv5yxDzAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUqhD7advOI/5c7lOZicSvxWueMckwHwYDVR0j
BBgwFoAU1lg8/vaZ3IyI8UVlhhennNYaMTgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI
LzIvRDY1ODNDRkVGNjk5REM4Qzg4RjE0NTY1ODYxN0E3OUNENjFBMzEzOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENjU4M0NGRUY2OTlEQzhDODhG
MTQ1NjU4NjE3QTc5Q0Q2MUEzMTM4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hl
SFlXaFFHSjVNUGpFWnVadHBYQXVZdDRTMWJrSk5Mb2laeTNrb1htc0gvMi9ENjU4
M0NGRUY2OTlEQzhDODhGMTQ1NjU4NjE3QTc5Q0Q2MUEzMTM4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
aairb7K779smVq2GTLRCNwqzMmakPRoH/xsT+51y+CYVfICvApd9O80WUSvvWZNA
ZeejkPBjjDEBATpS3mH0Xt/4Cq9ZmPYh5TFqASYYvlMb80JJoDgXlFuo+T7EXeZZ
Nhf2f8rpFKObdjnGiJPBH2jxc4j7pzwPam0DgquyrwGgSRf0hR8fitRwGUXhUG5G
D+FhRbZ2s5rEe0DdGQQdw1jV3apFsmBTdUJMVHOc2Ip7ZvWGp1muRXr5jsKT7nvk
E7djKU73Uvrev20JdGSltsyuymvq9OC0oE3uEuV1DT38hrwcDOHNIpDwp1Rrce4P
xFB1ddAiTSdMfmkfY+6Myw==
-----END CERTIFICATE-----