Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.mft
File:                     D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.mft (raw, json)
Hash identifier:          dVkWcZJ5Wz7zQrcB0AYbLQM77mmmTqcmAmRUfBIHsxk=
Subject key identifier:   62:AC:11:95:38:3D:E7:B4:AB:4C:06:E6:77:9C:99:06:56:DD:F4:C5
Authority key identifier: D3:0B:3A:C8:4F:0D:41:D5:CF:20:CF:F4:21:7A:F6:59:4A:4E:45:B7
Certificate issuer:       /CN=D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7
Certificate serial:       766AB583E0442410ACD491C2876160A2805BB201
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.mft
Manifest number:          AE
Signing time:             Mon 06 Feb 2023 14:47:52 +0000
Manifest this update:     Mon 06 Feb 2023 14:42:52 +0000
Manifest next update:     Tue 07 Feb 2023 16:01:52 +0000
Files and hashes:         1: D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.crl (hash: saT/GzPgzCyn7l2HEaBj88fKKXyf+aMBlJWCykCz3Hc=)
                          2: 323830343a313937383a3a2f33322d3333203d3e203631373936.roa (hash: dKr4gmHFlfXbLhep2PrL5JjyuPUUNHs1cZtAaQ/ctNo=)
                          3: 3230312e3135392e3138302e302f32322d3234203d3e203631373936.roa (hash: 128VL4/PIjeq5oZljsAxf0oEA2M/HVtiSEKBTi7glPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6a:b5:83:e0:44:24:10:ac:d4:91:c2:87:61:60:a2:80:5b:b2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7
        Validity
            Not Before: Feb  6 14:42:52 2023 GMT
            Not After : Feb  7 16:01:52 2023 GMT
        Subject: CN=62AC1195383DE7B4AB4C06E6779C990656DDF4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:f3:df:9f:d9:c9:6d:18:5c:95:98:a1:fe:
                    18:26:ae:14:21:40:29:f6:0f:ba:7c:ae:8f:1b:a2:
                    bf:7d:58:5d:55:f6:10:f9:1d:70:e2:50:a4:e6:50:
                    5b:dd:7e:bf:4e:b3:61:07:0a:3e:96:d2:f8:d1:9b:
                    9e:9f:f6:d1:b4:5e:82:45:93:12:94:90:3a:66:cf:
                    5d:c7:01:53:9e:b4:9c:89:eb:89:ab:0f:fd:80:84:
                    dc:0a:12:e6:b1:07:e7:ce:91:89:78:58:3f:99:f1:
                    fc:15:eb:bc:b1:70:14:9a:db:3b:7f:6e:2e:03:53:
                    1b:64:e9:4b:9e:5d:dd:06:33:79:6c:ec:68:a6:5d:
                    62:c8:4e:27:59:b9:55:ea:98:e5:c1:74:2b:c1:07:
                    62:5e:5c:46:1a:b7:f3:5a:d5:c7:b0:b6:b6:3e:dd:
                    38:4f:62:d8:91:31:67:6f:0d:78:a3:f8:22:10:9b:
                    76:22:5c:65:18:fa:0c:16:30:0a:5f:7e:f6:a7:9f:
                    b2:cb:ae:d6:f0:2f:f7:4c:83:b9:d5:a4:4f:05:bd:
                    41:b7:ec:d8:6e:1e:a1:d5:da:42:75:28:b5:44:17:
                    2a:fa:93:a5:fd:58:f5:d0:ea:e4:d5:c3:34:34:40:
                    2a:87:37:d3:75:47:79:b0:6f:4b:bc:d0:fd:da:94:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:11:95:38:3D:E7:B4:AB:4C:06:E6:77:9C:99:06:56:DD:F4:C5
            X509v3 Authority Key Identifier:
                keyid:D3:0B:3A:C8:4F:0D:41:D5:CF:20:CF:F4:21:7A:F6:59:4A:4E:45:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D30B3AC84F0D41D5CF20CFF4217AF6594A4E45B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:e9:03:a6:8e:3f:02:52:e4:03:a4:74:5a:3f:6c:ab:5f:
         a7:3a:64:73:e8:9e:41:ee:60:6c:ea:30:51:c7:1b:ab:92:6d:
         79:90:f1:f7:7c:6a:7d:a1:19:63:f0:f0:d1:5c:2c:d1:c1:0e:
         12:25:1b:e9:fc:cb:23:40:af:97:da:7b:ac:cc:29:fc:09:79:
         45:de:7b:71:b0:d1:5f:83:13:ce:b9:f3:3b:f0:f6:ee:cf:df:
         10:5e:e1:08:be:92:fc:b2:9d:d7:bb:ae:11:79:5a:36:8c:84:
         ff:67:c6:52:3c:c4:f3:f7:67:e6:d0:41:83:4e:8f:08:37:aa:
         aa:ea:48:bc:90:ed:cc:f7:ad:bd:4d:f8:cf:e1:b7:c6:e7:52:
         e8:ae:d0:da:65:f7:ac:96:70:f6:ff:98:e0:75:d6:17:70:36:
         ca:d7:30:f0:de:aa:09:70:ea:ff:14:08:73:55:9a:22:12:b6:
         6f:f5:b4:0f:4b:be:5a:be:27:68:a2:5e:2b:c8:5d:ff:cb:79:
         f6:33:bc:32:bb:00:dc:9a:9e:00:9a:dc:af:ce:3f:a7:89:70:
         69:95:ac:a9:e1:83:f0:49:10:40:ad:7f:ab:10:c3:4f:89:2e:
         85:91:06:4f:2c:56:84:25:7e:43:6f:96:ee:3d:f3:b6:7a:1c:
         0e:2d:73:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdmq1g+BEJBCs1JHCh2FgooBbsgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMwQjNBQzg0RjBENDFENUNGMjBDRkY0MjE3QUY2NTk0
QTRFNDVCNzAeFw0yMzAyMDYxNDQyNTJaFw0yMzAyMDcxNjAxNTJaMDMxMTAvBgNV
BAMTKDYyQUMxMTk1MzgzREU3QjRBQjRDMDZFNjc3OUM5OTA2NTZEREY0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6vPfn9nJbRhclZih/hgmrhQh
QCn2D7p8ro8bor99WF1V9hD5HXDiUKTmUFvdfr9Os2EHCj6W0vjRm56f9tG0XoJF
kxKUkDpmz13HAVOetJyJ64mrD/2AhNwKEuaxB+fOkYl4WD+Z8fwV67yxcBSa2zt/
bi4DUxtk6UueXd0GM3ls7GimXWLITidZuVXqmOXBdCvBB2JeXEYat/Na1cewtrY+
3ThPYtiRMWdvDXij+CIQm3YiXGUY+gwWMApffvann7LLrtbwL/dMg7nVpE8FvUG3
7NhuHqHV2kJ1KLVEFyr6k6X9WPXQ6uTVwzQ0QCqHN9N1R3mwb0u80P3alMgBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYqwRlTg957SrTAbmd5yZBlbd9MUwHwYDVR0j
BBgwFoAU0ws6yE8NQdXPIM/0IXr2WUpORbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFNYVd1Ymtuc1dFZnc3dkZoSHp3d2R1NHlxZGszbk1RUkhTaHc1NlVu
bWMvMC9EMzBCM0FDODRGMEQ0MUQ1Q0YyMENGRjQyMTdBRjY1OTRBNEU0NUI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzMEIzQUM4NEYwRDQxRDVD
RjIwQ0ZGNDIxN0FGNjU5NEE0RTQ1QjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDFNYVd1Ymtuc1dFZnc3dkZoSHp3d2R1NHlxZGszbk1RUkhTaHc1NlVubWMvMC9E
MzBCM0FDODRGMEQ0MUQ1Q0YyMENGRjQyMTdBRjY1OTRBNEU0NUI3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfljpA6aOPwJS5AOkdFo/bKtfpzpkc+ieQe5gbOowUccbq5JteZDx93xqfaEZ
Y/Dw0Vws0cEOEiUb6fzLI0Cvl9p7rMwp/Al5Rd57cbDRX4MTzrnzO/D27s/fEF7h
CL6S/LKd17uuEXlaNoyE/2fGUjzE8/dn5tBBg06PCDeqqupIvJDtzPetvU34z+G3
xudS6K7Q2mX3rJZw9v+Y4HXWF3A2ytcw8N6qCXDq/xQIc1WaIhK2b/W0D0u+Wr4n
aKJeK8hd/8t59jO8MrsA3JqeAJrcr84/p4lwaZWsqeGD8EkQQK1/qxDDT4kuhZEG
TyxWhCV+Q2+W7j3ztnocDi1zlw==
-----END CERTIFICATE-----