Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.mft
File:                     4B28FA6097EDAF3D1C740125A43F5115184B3E7F.mft (raw, json)
Hash identifier:          kpg03tewuQ9acBpTW97AscWjkG4qthwfAfPwOGrN6TU=
Subject key identifier:   D0:33:A0:89:2E:91:08:C1:C7:B3:F4:35:29:F9:48:CD:5F:CD:B3:B2
Authority key identifier: 4B:28:FA:60:97:ED:AF:3D:1C:74:01:25:A4:3F:51:15:18:4B:3E:7F
Certificate issuer:       /CN=4B28FA6097EDAF3D1C740125A43F5115184B3E7F
Certificate serial:       768A40D42C702208621C9433ACEAEA5744B22954
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.mft
Manifest number:          011B
Signing time:             Fri 01 Nov 2024 11:55:19 +0000
Manifest this update:     Fri 01 Nov 2024 11:50:19 +0000
Manifest next update:     Sat 02 Nov 2024 12:09:19 +0000
Files and hashes:         1: 4B28FA6097EDAF3D1C740125A43F5115184B3E7F.crl (hash: 2yVDCkZSiFP7fco+zovuc3pbbcKg3jrCuFS3hKZGhiY=)
                          2: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: YM7KchdgkewTgjiensV+WMnGqGCRreSnb4AIeqzPo40=)
                          3: 323830343a366665383a3a2f33322d3432203d3e20323730363932.roa (hash: kt4UZheSddTzo1+b8orxbmENuds11lGnNl5QQ/ex6q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:40:d4:2c:70:22:08:62:1c:94:33:ac:ea:ea:57:44:b2:29:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B28FA6097EDAF3D1C740125A43F5115184B3E7F
        Validity
            Not Before: Nov  1 11:50:19 2024 GMT
            Not After : Nov  2 12:09:19 2024 GMT
        Subject: CN=D033A0892E9108C1C7B3F43529F948CD5FCDB3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:e4:25:7a:89:a8:45:4b:5f:56:67:3c:cd:
                    2e:01:14:f8:1e:64:5e:4a:dc:cc:c3:15:7e:df:9e:
                    12:2a:1f:cd:dd:d7:5e:2b:19:34:95:bf:69:47:84:
                    ab:7c:9b:0e:65:92:c1:c4:57:6e:32:45:0a:77:0d:
                    dc:d1:4f:e4:bb:f7:f5:97:f3:cc:56:f2:90:df:e2:
                    0c:91:4d:a9:e0:7e:c2:f9:d6:ba:61:fa:83:85:15:
                    27:c5:74:7a:8e:76:7d:33:69:c9:64:c1:85:76:74:
                    1d:b6:f8:8c:44:04:0d:24:22:3b:54:71:59:4c:16:
                    0f:4d:e1:b7:39:71:86:80:e6:c6:b2:9f:c7:2b:c0:
                    70:26:12:4f:ff:e3:af:39:ec:e4:07:36:6f:85:f9:
                    27:18:33:78:a9:d2:c6:f2:45:0d:37:8a:5f:23:7e:
                    d2:e1:1f:85:a2:47:f7:5d:b8:23:34:c8:ba:d6:74:
                    83:46:6e:91:94:d8:8c:4a:b1:53:75:c4:44:7d:8c:
                    7c:e1:fd:2b:2a:35:7c:80:5c:ed:ee:8c:45:f8:0e:
                    74:b7:a4:62:18:0d:64:28:42:10:3f:67:7c:c0:f1:
                    ce:fd:02:59:20:7d:23:6e:82:47:9b:9a:62:64:52:
                    c7:f8:d1:cd:1f:24:45:bc:5f:7b:2c:d4:38:7b:c7:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:33:A0:89:2E:91:08:C1:C7:B3:F4:35:29:F9:48:CD:5F:CD:B3:B2
            X509v3 Authority Key Identifier:
                keyid:4B:28:FA:60:97:ED:AF:3D:1C:74:01:25:A4:3F:51:15:18:4B:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:83:fb:6e:0d:24:6c:c7:fc:f0:c4:24:94:96:b0:25:c0:10:
         c9:08:bc:72:51:ec:bf:0f:2a:b8:43:da:a7:42:48:4b:a8:d3:
         1a:2b:38:f6:14:1b:6c:5f:fa:58:d5:78:63:d3:64:5a:9d:ff:
         fc:3d:58:ec:4e:b8:b7:ba:8a:1c:34:63:b9:eb:79:40:c3:23:
         f8:92:83:85:ca:21:b3:ab:89:e0:68:bb:20:18:c3:79:0d:2a:
         dd:00:94:c7:97:89:15:a0:b2:43:07:fd:5e:d9:1d:4b:c9:f0:
         2c:fa:d2:34:ab:30:22:36:ae:d9:f3:52:ea:b6:2d:e1:02:56:
         e2:24:66:21:de:86:24:a0:c1:08:67:dc:98:ff:2f:f2:04:de:
         d4:d5:ab:bd:90:8f:65:cf:38:7a:80:6e:b2:d6:df:56:f1:b3:
         d1:2b:a0:c9:c7:7a:d6:17:90:18:51:c0:21:9c:d4:fa:8e:e8:
         89:d4:15:83:db:8e:ce:90:56:2e:fd:38:69:64:e2:0f:1d:2c:
         4b:9d:4f:37:bc:5e:95:f5:8f:e9:36:20:22:17:66:3c:26:00:
         1c:71:88:43:c6:c1:fe:95:aa:f9:76:e0:d7:2d:2d:3d:b5:41:
         fe:e0:65:f8:05:5e:ed:cd:d6:2c:d2:2f:85:12:f4:e7:ac:17:
         a3:88:92:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdopA1CxwIghiHJQzrOrqV0SyKVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIyOEZBNjA5N0VEQUYzRDFDNzQwMTI1QTQzRjUxMTUx
ODRCM0U3RjAeFw0yNDExMDExMTUwMTlaFw0yNDExMDIxMjA5MTlaMDMxMTAvBgNV
BAMTKEQwMzNBMDg5MkU5MTA4QzFDN0IzRjQzNTI5Rjk0OENENUZDREIzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZuQleomoRUtfVmc8zS4BFPge
ZF5K3MzDFX7fnhIqH83d114rGTSVv2lHhKt8mw5lksHEV24yRQp3DdzRT+S79/WX
88xW8pDf4gyRTangfsL51rph+oOFFSfFdHqOdn0zaclkwYV2dB22+IxEBA0kIjtU
cVlMFg9N4bc5cYaA5sayn8crwHAmEk//46857OQHNm+F+ScYM3ip0sbyRQ03il8j
ftLhH4WiR/dduCM0yLrWdINGbpGU2IxKsVN1xER9jHzh/SsqNXyAXO3ujEX4DnS3
pGIYDWQoQhA/Z3zA8c79AlkgfSNugkebmmJkUsf40c0fJEW8X3ss1Dh7x7mhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0DOgiS6RCMHHs/Q1KflIzV/Ns7IwHwYDVR0j
BBgwFoAUSyj6YJftrz0cdAElpD9RFRhLPn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy
Tm0vMi80QjI4RkE2MDk3RURBRjNEMUM3NDAxMjVBNDNGNTExNTE4NEIzRTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjhGQTYwOTdFREFGM0Qx
Qzc0MDEyNUE0M0Y1MTE1MTg0QjNFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMi80
QjI4RkE2MDk3RURBRjNEMUM3NDAxMjVBNDNGNTExNTE4NEIzRTdGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFoP7bg0kbMf88MQklJawJcAQyQi8clHsvw8quEPap0JIS6jTGis49hQbbF/6
WNV4Y9NkWp3//D1Y7E64t7qKHDRjuet5QMMj+JKDhcohs6uJ4Gi7IBjDeQ0q3QCU
x5eJFaCyQwf9XtkdS8nwLPrSNKswIjau2fNS6rYt4QJW4iRmId6GJKDBCGfcmP8v
8gTe1NWrvZCPZc84eoBustbfVvGz0Sugycd61heQGFHAIZzU+o7oidQVg9uOzpBW
Lv04aWTiDx0sS51PN7xelfWP6TYgIhdmPCYAHHGIQ8bB/pWq+Xbg1y0tPbVB/uBl
+AVe7c3WLNIvhRL056wXo4iSVg==
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:17 2024 by rpki-client on console.sobornost.net