Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/6D952ABC8272EDB127B575D477DDACEB76BCD1BB.mft
File:                     6D952ABC8272EDB127B575D477DDACEB76BCD1BB.mft (raw, json)
Hash identifier:          ouHjcn/F8U8IL/B43VQ3BEZ8d1I4wbd836BT1OC7ksw=
Subject key identifier:   7D:4D:D8:97:6B:C6:F2:57:53:5D:C3:10:59:53:F7:98:0A:05:86:4E
Authority key identifier: 6D:95:2A:BC:82:72:ED:B1:27:B5:75:D4:77:DD:AC:EB:76:BC:D1:BB
Certificate issuer:       /CN=6D952ABC8272EDB127B575D477DDACEB76BCD1BB
Certificate serial:       5FCB266E832E51993FAED9B7C9387D1B6558EA5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D952ABC8272EDB127B575D477DDACEB76BCD1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/6D952ABC8272EDB127B575D477DDACEB76BCD1BB.mft
Manifest number:          42
Signing time:             Thu 18 Jul 2024 12:26:22 +0000
Manifest this update:     Thu 18 Jul 2024 12:21:22 +0000
Manifest next update:     Fri 19 Jul 2024 14:47:22 +0000
Files and hashes:         1: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: SEd49a7BrxQCHLdsUYPrW/yKVTuioqI65vt81VkgYq4=)
                          2: 6D952ABC8272EDB127B575D477DDACEB76BCD1BB.crl (hash: WSiUH4GzCVzEaVB6e51zKnT2kFKX3HhwuFGl5Es8k9c=)
                          3: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: x9EyVIRg8uA6X2qbFnWR516oA6tveHgAQGSTjTVWMj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cb:26:6e:83:2e:51:99:3f:ae:d9:b7:c9:38:7d:1b:65:58:ea:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D952ABC8272EDB127B575D477DDACEB76BCD1BB
        Validity
            Not Before: Jul 18 12:21:22 2024 GMT
            Not After : Jul 19 14:47:22 2024 GMT
        Subject: CN=7D4DD8976BC6F257535DC3105953F7980A05864E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:ca:06:13:9c:c1:13:01:5e:2d:21:c5:dd:
                    1d:a5:af:c8:e5:33:78:9d:ce:80:ea:fc:70:32:1e:
                    6b:7a:3c:e7:25:90:8d:25:d0:10:02:bf:27:eb:bb:
                    b9:0b:e2:a2:1d:d8:51:f3:6a:94:44:82:22:a5:f9:
                    60:f4:47:0e:01:97:3e:9a:c0:4d:39:5e:ee:06:9d:
                    ab:5c:65:99:67:e5:e2:95:fd:40:13:31:ec:e0:6f:
                    2e:df:78:30:54:55:c2:07:00:39:e6:5f:c4:53:60:
                    64:79:6e:4a:e3:46:71:18:fc:8d:ad:b2:45:4e:bb:
                    1c:a8:9a:70:f5:3f:cb:b5:80:ff:5f:a4:9a:d1:24:
                    fa:cd:45:ee:55:96:ac:eb:77:c0:4c:da:f8:c3:8e:
                    09:00:1d:d8:bf:22:cf:8c:66:51:1b:06:2a:1b:01:
                    31:de:5a:e9:cf:1e:a2:e2:cd:67:1f:55:c4:b4:95:
                    68:ce:06:f6:c5:12:fe:16:ba:42:55:1d:50:42:a3:
                    5e:48:3f:be:c3:9c:fa:6d:31:7f:cb:fe:fc:49:b3:
                    a7:c9:d1:0c:c6:79:68:8e:f4:76:3b:ea:86:59:2d:
                    4a:84:1e:6e:c9:b8:85:44:8b:8a:9e:f5:22:9a:f7:
                    bd:d3:3f:61:f4:7e:11:21:23:31:8f:c3:2d:89:a1:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:D8:97:6B:C6:F2:57:53:5D:C3:10:59:53:F7:98:0A:05:86:4E
            X509v3 Authority Key Identifier:
                keyid:6D:95:2A:BC:82:72:ED:B1:27:B5:75:D4:77:DD:AC:EB:76:BC:D1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/6D952ABC8272EDB127B575D477DDACEB76BCD1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D952ABC8272EDB127B575D477DDACEB76BCD1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/6D952ABC8272EDB127B575D477DDACEB76BCD1BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:8a:28:33:49:81:1f:65:33:0f:c1:f5:b5:98:8f:f6:8f:
         cb:dc:1a:aa:5c:8b:23:0f:e4:3c:0b:30:b9:f5:7c:96:53:bb:
         e0:f5:23:04:a8:b3:a7:4c:51:f7:71:20:6a:6e:91:8c:5b:05:
         c9:4d:48:98:7e:92:e3:f4:83:60:24:0c:6c:82:65:33:73:e9:
         43:0c:78:e1:e9:f5:84:05:3b:26:0a:bf:3f:fb:20:14:09:ee:
         31:e8:97:eb:17:d9:11:5b:2b:1e:9d:a5:6a:0b:e1:d9:9c:be:
         54:26:ee:74:27:07:03:3d:3a:f7:39:ac:55:2d:fc:8a:c4:19:
         3e:5d:3a:21:e2:b6:16:85:4a:9e:d2:2c:38:c2:c4:4a:53:8d:
         d5:a9:a5:41:7b:33:6f:a5:3d:28:d3:2f:48:81:5f:9f:af:a7:
         f8:5f:31:01:42:7a:b9:51:98:aa:6e:e0:e9:2b:49:30:0f:e2:
         6f:65:ce:04:bf:11:fa:db:b5:6b:7f:13:a1:03:03:28:24:b3:
         e3:a5:2e:83:3e:a7:f5:c4:d9:8b:ab:c8:b9:31:8d:80:3d:8f:
         cc:ef:61:a6:fd:54:02:70:c8:7f:c2:fc:3e:3b:2b:1b:d1:4d:
         11:80:e1:6c:d8:10:b2:5e:d6:4c:62:3d:08:ec:6c:51:a5:80:
         fd:c1:a3:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX8smboMuUZk/rtm3yTh9G2VY6l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ5NTJBQkM4MjcyRURCMTI3QjU3NUQ0NzdEREFDRUI3
NkJDRDFCQjAeFw0yNDA3MTgxMjIxMjJaFw0yNDA3MTkxNDQ3MjJaMDMxMTAvBgNV
BAMTKDdENEREODk3NkJDNkYyNTc1MzVEQzMxMDU5NTNGNzk4MEEwNTg2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIcoGE5zBEwFeLSHF3R2lr8jl
M3idzoDq/HAyHmt6POclkI0l0BACvyfru7kL4qId2FHzapREgiKl+WD0Rw4Blz6a
wE05Xu4GnatcZZln5eKV/UATMezgby7feDBUVcIHADnmX8RTYGR5bkrjRnEY/I2t
skVOuxyomnD1P8u1gP9fpJrRJPrNRe5Vlqzrd8BM2vjDjgkAHdi/Is+MZlEbBiob
ATHeWunPHqLizWcfVcS0lWjOBvbFEv4WukJVHVBCo15IP77DnPptMX/L/vxJs6fJ
0QzGeWiO9HY76oZZLUqEHm7JuIVEi4qe9SKa973TP2H0fhEhIzGPwy2JoVG7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfU3Yl2vG8ldTXcMQWVP3mAoFhk4wHwYDVR0j
BBgwFoAUbZUqvIJy7bEntXXUd92s63a80bswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD
TFkvMC82RDk1MkFCQzgyNzJFREIxMjdCNTc1RDQ3N0REQUNFQjc2QkNEMUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEOTUyQUJDODI3MkVEQjEy
N0I1NzVENDc3RERBQ0VCNzZCQ0QxQkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlDTFkvMC82
RDk1MkFCQzgyNzJFREIxMjdCNTc1RDQ3N0REQUNFQjc2QkNEMUJCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPbuKKDNJgR9lMw/B9bWYj/aPy9waqlyLIw/kPAswufV8llO74PUjBKizp0xR
93Egam6RjFsFyU1ImH6S4/SDYCQMbIJlM3PpQwx44en1hAU7Jgq/P/sgFAnuMeiX
6xfZEVsrHp2lagvh2Zy+VCbudCcHAz069zmsVS38isQZPl06IeK2FoVKntIsOMLE
SlON1amlQXszb6U9KNMvSIFfn6+n+F8xAUJ6uVGYqm7g6StJMA/ib2XOBL8R+tu1
a38ToQMDKCSz46Uugz6n9cTZi6vIuTGNgD2PzO9hpv1UAnDIf8L8PjsrG9FNEYDh
bNgQsl7WTGI9COxsUaWA/cGjEQ==
-----END CERTIFICATE-----