Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.mft
File:                     C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.mft (raw, json)
Hash identifier:          eRb2VsZ37QkZ4krEkD10Qman8x2DEuxeiICwTRe1q7k=
Subject key identifier:   D6:9A:4C:B5:7C:DA:C7:39:FF:F0:1D:20:FC:51:90:A5:35:C8:F4:0B
Authority key identifier: C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F
Certificate issuer:       /CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
Certificate serial:       5C0CE408E9474F9B040E14B16259F04BA6B6C7ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.mft
Manifest number:          71
Signing time:             Sun 14 Apr 2024 18:18:40 +0000
Manifest this update:     Sun 14 Apr 2024 18:13:40 +0000
Manifest next update:     Mon 15 Apr 2024 20:31:40 +0000
Files and hashes:         1: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: lQbUaDw/o+/Lv7WMthSPXSaCYrHbM+DvHQJJSNOar+I=)
                          2: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: sWy0LPeh1qBJ4gXDvQoM/tyPMa4OtEmF8bmzSOfCiZw=)
                          3: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: 8j4ewQXZMDAFY3LAyT1lA6vLGY1y/f+gpF+yTzWcS10=)
                          4: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: kHF4B8SP/fiQAGR4arJwm9WXRH8RIhwMT6zQiCHz4m0=)
                          5: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: iauaC8F+4M3drEBXeKVI+aGHni3ql5VgpuRCmFooZPo=)
                          6: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: NxgcLMcrRDJl/nFR0tjOPxYLKwah4hF0YFxMM/ofjY0=)
                          7: C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl (hash: d5D3kOGdPnemsvGVt2VsES3YP7V17NOXJdXS9i5RAn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0c:e4:08:e9:47:4f:9b:04:0e:14:b1:62:59:f0:4b:a6:b6:c7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F
        Validity
            Not Before: Apr 14 18:13:40 2024 GMT
            Not After : Apr 15 20:31:40 2024 GMT
        Subject: CN=D69A4CB57CDAC739FFF01D20FC5190A535C8F40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:62:70:2d:c1:1b:70:44:21:ab:aa:15:af:
                    16:a4:ce:d0:98:ff:12:72:67:af:a5:a6:e1:1f:23:
                    50:fc:7f:d3:7a:b5:82:90:5b:5c:d3:69:ee:22:b0:
                    4e:a9:2a:41:a9:56:99:71:0d:c2:20:d7:70:59:66:
                    27:80:67:8f:df:3b:50:54:04:a2:e9:99:b4:da:90:
                    e0:31:aa:9e:f7:63:15:83:69:6e:96:4a:f6:65:ba:
                    67:9d:4b:93:81:af:7d:7c:c2:c4:e5:aa:f4:2f:d2:
                    9e:79:ce:68:da:ff:d2:f5:a6:27:f1:fc:e3:2a:73:
                    01:4a:1e:cd:4b:d0:1f:78:ce:aa:40:6b:59:b4:51:
                    fe:4c:60:72:ea:b5:92:ce:6c:15:73:97:31:56:cf:
                    ba:a8:5c:70:ba:32:63:7f:8f:ae:34:04:1e:e3:51:
                    b6:18:1d:12:ef:5e:4e:0e:50:3d:94:44:55:78:90:
                    73:15:cd:bd:d6:ea:e1:b7:e8:13:14:e1:1a:fa:8a:
                    2d:66:a1:14:2c:11:9f:cf:de:14:54:b7:4b:9e:67:
                    d3:d8:31:b2:b8:9a:39:32:6a:80:ea:31:9b:10:9c:
                    f8:0f:2d:19:9e:de:ae:f5:19:1c:63:31:a0:35:34:
                    31:64:d1:b0:9d:bc:cb:ba:31:2f:6b:db:fc:40:3c:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9A:4C:B5:7C:DA:C7:39:FF:F0:1D:20:FC:51:90:A5:35:C8:F4:0B
            X509v3 Authority Key Identifier:
                keyid:C2:C7:40:14:A1:B0:13:DD:4B:D7:F5:49:DB:1E:FB:57:09:E3:AD:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/C2C74014A1B013DD4BD7F549DB1EFB5709E3AD6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:2b:9e:39:7c:2b:28:b1:0f:62:c7:26:4c:c5:82:0f:08:
         3e:53:9b:b1:b2:a2:82:d5:cb:84:f8:ec:35:30:68:7e:88:31:
         82:6f:c3:8f:fb:e6:b3:19:17:90:1e:51:d4:71:3f:17:9e:86:
         fb:44:9e:66:f8:e6:ce:c0:d5:54:8d:16:05:2b:ac:6b:b3:ea:
         bf:15:8e:86:eb:5b:02:39:c2:fb:0e:27:3c:5a:a6:df:01:33:
         d5:ce:95:d5:3c:20:0e:ae:06:6f:86:4e:d5:0a:9d:e3:39:b3:
         09:77:0d:dd:b7:90:72:92:b9:be:a7:2c:f7:9e:66:1a:a5:eb:
         79:23:d8:57:e8:98:a3:87:69:04:73:2a:c8:34:13:9f:8c:82:
         44:fd:a4:fe:50:16:d1:81:ad:6a:ea:43:46:23:b2:0a:72:72:
         6e:1c:12:f9:b0:f2:e6:52:5c:1a:95:71:25:e7:70:4f:b4:05:
         a1:52:e3:91:76:7f:51:ac:59:af:6c:c9:d4:97:bc:86:e4:11:
         1f:6f:6b:ff:ca:98:d9:3e:39:c4:b6:a0:79:f4:4d:72:b4:87:
         57:d3:01:86:65:20:5b:ce:d7:b0:c0:20:e3:41:2e:bb:c2:f9:
         41:5d:23:72:6e:73:0f:35:d4:7a:79:e5:aa:25:81:97:8c:a0:
         28:0a:83:54
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUXAzkCOlHT5sEDhSxYlnwS6a2x+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcw
OUUzQUQ2RjAeFw0yNDA0MTQxODEzNDBaFw0yNDA0MTUyMDMxNDBaMDMxMTAvBgNV
BAMTKEQ2OUE0Q0I1N0NEQUM3MzlGRkYwMUQyMEZDNTE5MEE1MzVDOEY0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8mJwLcEbcEQhq6oVrxakztCY
/xJyZ6+lpuEfI1D8f9N6tYKQW1zTae4isE6pKkGpVplxDcIg13BZZieAZ4/fO1BU
BKLpmbTakOAxqp73YxWDaW6WSvZlumedS5OBr318wsTlqvQv0p55zmja/9L1pifx
/OMqcwFKHs1L0B94zqpAa1m0Uf5MYHLqtZLObBVzlzFWz7qoXHC6MmN/j640BB7j
UbYYHRLvXk4OUD2URFV4kHMVzb3W6uG36BMU4Rr6ii1moRQsEZ/P3hRUt0ueZ9PY
MbK4mjkyaoDqMZsQnPgPLRme3q71GRxjMaA1NDFk0bCdvMu6MS9r2/xAPGLVAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU1ppMtXzaxzn/8B0g/FGQpTXI9AswHwYDVR0j
BBgwFoAUwsdAFKGwE91L1/VJ2x77VwnjrW8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3
LzAvQzJDNzQwMTRBMUIwMTNERDRCRDdGNTQ5REIxRUZCNTcwOUUzQUQ2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9DMkM3NDAxNEExQjAxM0RENEJE
N0Y1NDlEQjFFRkI1NzA5RTNBRDZGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hw
UXVnVTZZV1dYU3c3Ykg0NlFueG9xNUhpOVBIckgxaEFZR1UyZXJqUncvMC9DMkM3
NDAxNEExQjAxM0RENEJEN0Y1NDlEQjFFRkI1NzA5RTNBRDZGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
hS4rnjl8KyixD2LHJkzFgg8IPlObsbKigtXLhPjsNTBofogxgm/Dj/vmsxkXkB5R
1HE/F56G+0SeZvjmzsDVVI0WBSusa7PqvxWOhutbAjnC+w4nPFqm3wEz1c6V1Twg
Dq4Gb4ZO1Qqd4zmzCXcN3beQcpK5vqcs955mGqXreSPYV+iYo4dpBHMqyDQTn4yC
RP2k/lAW0YGtaupDRiOyCnJybhwS+bDy5lJcGpVxJedwT7QFoVLjkXZ/UaxZr2zJ
1Je8huQRH29r/8qY2T45xLagefRNcrSHV9MBhmUgW87XsMAg40Euu8L5QV0jcm5z
DzXUennlqiWBl4ygKAqDVA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:46 2024 by rpki-client on console-ams.rpki-client.org