Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.mft
File:                     135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.mft (raw, json)
Hash identifier:          Zsb12AtlJPi6I9tVHIzN9LqrBnF0atMKQhXL/kG3IVc=
Subject key identifier:   11:55:18:32:BC:CB:FE:45:73:71:C4:90:18:55:F0:CA:45:C4:EF:E1
Authority key identifier: 13:5C:D2:AC:F3:BF:40:24:A3:E6:5D:9A:4D:5D:CB:C6:DA:EB:D9:B8
Certificate issuer:       /CN=135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8
Certificate serial:       0CC10DB4B5B42F23032F125A8BB7057278D8C2E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.mft
Manifest number:          0A
Signing time:             Wed 05 Jun 2024 21:24:48 +0000
Manifest this update:     Wed 05 Jun 2024 21:19:48 +0000
Manifest next update:     Thu 06 Jun 2024 21:54:48 +0000
Files and hashes:         1: 323830343a386632343a3a2f33322d313238203d3e20323733343730.roa (hash: pVkAK9ql0gGBrWTCW5s4yfGtqKfCrSDYmPAIgaAjlGk=)
                          2: 34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa (hash: 9svyrnfyZUo59VE04+lHIR9tdx73hipJ+bcW3N4zK4U=)
                          3: 135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.crl (hash: xGj8UjGXtTm1KY3GeyjVJtKePQ7uGXj6BAsuDiBoE5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c1:0d:b4:b5:b4:2f:23:03:2f:12:5a:8b:b7:05:72:78:d8:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8
        Validity
            Not Before: Jun  5 21:19:48 2024 GMT
            Not After : Jun  6 21:54:48 2024 GMT
        Subject: CN=11551832BCCBFE457371C4901855F0CA45C4EFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:3f:4a:06:51:64:84:db:fe:c2:04:db:43:
                    2b:03:0a:2c:9b:15:a4:42:68:a4:13:d8:a8:b1:de:
                    96:5b:4a:82:45:94:69:aa:2d:6e:f5:0a:ba:5c:b6:
                    27:fb:86:41:ab:21:30:5d:54:ce:f4:a3:7d:79:c1:
                    e0:15:2b:1f:9a:ac:a6:0e:25:e5:3b:55:8f:42:df:
                    17:0f:a2:ea:91:3e:70:e1:b9:4b:7f:fd:aa:4c:90:
                    42:4d:be:39:40:4f:97:bf:04:dd:b3:55:7c:d1:94:
                    57:fb:01:d8:a9:9f:b9:6d:07:33:ff:a0:42:56:29:
                    ab:93:88:44:c8:29:2b:fe:59:16:b6:b6:71:aa:e9:
                    42:8c:43:2d:7c:12:3b:9f:c9:32:c2:f6:09:24:e5:
                    25:98:33:0c:a8:a4:97:a5:62:69:a8:ed:3f:d0:48:
                    bb:82:eb:ae:bc:0d:f5:14:b0:8c:b7:ee:48:be:55:
                    6f:5b:bc:3a:25:ac:16:fb:01:c4:2c:89:65:e8:9a:
                    88:b2:3c:e4:10:f0:9d:4c:95:ef:76:ec:25:a3:af:
                    56:1e:ae:15:bd:56:62:e8:a5:f3:0f:9e:b1:68:17:
                    88:85:7e:89:48:19:ae:24:32:f7:fb:a5:ea:d1:52:
                    54:a5:0f:d5:90:70:20:11:45:b7:c1:64:c1:68:9d:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:55:18:32:BC:CB:FE:45:73:71:C4:90:18:55:F0:CA:45:C4:EF:E1
            X509v3 Authority Key Identifier:
                keyid:13:5C:D2:AC:F3:BF:40:24:A3:E6:5D:9A:4D:5D:CB:C6:DA:EB:D9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:ad:2b:e4:c9:17:db:21:c0:4a:48:81:34:03:5c:0a:aa:
         d1:76:b9:c6:9c:4b:d7:d6:03:66:c9:26:7d:6b:d4:f4:95:f5:
         0b:b7:66:bf:32:d6:08:62:ea:03:04:f3:eb:d5:24:fd:75:d8:
         7c:2c:04:20:77:e6:c9:a6:02:5f:fb:cf:34:87:c3:e1:36:17:
         f1:ae:83:84:de:f7:9f:b4:9b:7b:08:bd:1b:87:98:8b:c7:10:
         69:16:cf:de:d2:2b:a7:e1:22:9b:f1:83:cf:53:b8:ab:6f:b6:
         b8:d3:57:ef:cd:ee:e4:d8:54:ea:a8:61:d0:3d:d4:52:3a:ec:
         d2:df:7d:5b:08:8a:57:2d:33:07:6e:c6:e1:2a:e3:10:0e:c2:
         f2:fc:df:c8:7b:31:75:29:1d:34:79:40:c7:16:71:3d:be:94:
         99:84:61:e6:a9:61:18:70:85:6c:cb:98:5b:6f:a5:a2:bb:e1:
         e9:97:56:fc:ca:de:11:22:a6:d9:e3:62:ac:fc:f9:7a:37:35:
         70:4d:0e:24:c4:79:a4:5d:c8:b7:d1:e2:a5:b4:0f:e8:08:c0:
         ae:e7:80:55:74:81:82:7b:ef:5e:52:23:e0:e1:77:ae:a9:04:
         27:5b:41:4d:5a:5b:85:c0:d1:96:47:85:57:8b:8e:ca:e0:61:
         06:3c:4b:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDMENtLW0LyMDLxJai7cFcnjYwuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1Q0QyQUNGM0JGNDAyNEEzRTY1RDlBNEQ1RENCQzZE
QUVCRDlCODAeFw0yNDA2MDUyMTE5NDhaFw0yNDA2MDYyMTU0NDhaMDMxMTAvBgNV
BAMTKDExNTUxODMyQkNDQkZFNDU3MzcxQzQ5MDE4NTVGMENBNDVDNEVGRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfD9KBlFkhNv+wgTbQysDCiyb
FaRCaKQT2Kix3pZbSoJFlGmqLW71Crpctif7hkGrITBdVM70o315weAVKx+arKYO
JeU7VY9C3xcPouqRPnDhuUt//apMkEJNvjlAT5e/BN2zVXzRlFf7Adipn7ltBzP/
oEJWKauTiETIKSv+WRa2tnGq6UKMQy18EjufyTLC9gkk5SWYMwyopJelYmmo7T/Q
SLuC6668DfUUsIy37ki+VW9bvDolrBb7AcQsiWXomoiyPOQQ8J1Mle927CWjr1Ye
rhW9VmLopfMPnrFoF4iFfolIGa4kMvf7perRUlSlD9WQcCARRbfBZMFondS5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEVUYMrzL/kVzccSQGFXwykXE7+EwHwYDVR0j
BBgwFoAUE1zSrPO/QCSj5l2aTV3Lxtrr2bgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlhnN0RBTjg5ZGV4MnJza28xS0ZVSk1pVHA5dUM4TDVoOTRYemtoc2dM
em8vMC8xMzVDRDJBQ0YzQkY0MDI0QTNFNjVEOUE0RDVEQ0JDNkRBRUJEOUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNUNEMkFDRjNCRjQwMjRB
M0U2NUQ5QTRENURDQkM2REFFQkQ5QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlhnN0RBTjg5ZGV4MnJza28xS0ZVSk1pVHA5dUM4TDVoOTRYemtoc2dMem8vMC8x
MzVDRDJBQ0YzQkY0MDI0QTNFNjVEOUE0RDVEQ0JDNkRBRUJEOUI4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALZStK+TJF9shwEpIgTQDXAqq0Xa5xpxL19YDZskmfWvU9JX1C7dmvzLWCGLq
AwTz69Uk/XXYfCwEIHfmyaYCX/vPNIfD4TYX8a6DhN73n7Sbewi9G4eYi8cQaRbP
3tIrp+Eim/GDz1O4q2+2uNNX783u5NhU6qhh0D3UUjrs0t99WwiKVy0zB27G4Srj
EA7C8vzfyHsxdSkdNHlAxxZxPb6UmYRh5qlhGHCFbMuYW2+lorvh6ZdW/MreESKm
2eNirPz5ejc1cE0OJMR5pF3It9HipbQP6AjArueAVXSBgnvvXlIj4OF3rqkEJ1tB
TVpbhcDRlkeFV4uOyuBhBjxLMw==
-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:19 2024 by rpki-client on console.sobornost.net