Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.mft
File:                     15CE72F864B9D222722D29CFB14428A88692222C.mft (raw, json)
Hash identifier:          xAZw2QxIOyR+f2QFHbhm8jm3WcP7Jlt3WfWfAcZc+gw=
Subject key identifier:   39:C0:3E:AE:9E:FB:9C:B0:D7:B5:D4:1E:AA:3A:9F:BE:4F:13:7C:55
Authority key identifier: 15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C
Certificate issuer:       /CN=15CE72F864B9D222722D29CFB14428A88692222C
Certificate serial:       7F59DF9454B4AD65E632541203E94C03793D34B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.mft
Manifest number:          0231
Signing time:             Wed 14 Jun 2023 08:23:37 +0000
Manifest this update:     Wed 14 Jun 2023 08:18:37 +0000
Manifest next update:     Thu 15 Jun 2023 09:00:37 +0000
Files and hashes:         1: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (hash: 0qwGq/1/Irg8c55uOjzigYIPFXQUEwGmdFnDLuob2R0=)
                          2: 15CE72F864B9D222722D29CFB14428A88692222C.crl (hash: 8TzUDiEw/kQA2MISjUJ8au0o/2mujdC3hmQcH0VUlQs=)
                          3: 323830343a326437303a3a2f33322d3438203d3e20323635323832.roa (hash: uYXLFeUzzRzG0qTMKesSXU+fp2ZNMndJg9pTizp8q8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:59:df:94:54:b4:ad:65:e6:32:54:12:03:e9:4c:03:79:3d:34:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15CE72F864B9D222722D29CFB14428A88692222C
        Validity
            Not Before: Jun 14 08:18:37 2023 GMT
            Not After : Jun 15 09:00:37 2023 GMT
        Subject: CN=39C03EAE9EFB9CB0D7B5D41EAA3A9FBE4F137C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:f1:0a:90:d1:bb:5c:d5:c3:a7:47:1b:69:
                    2a:6c:5f:06:c3:a1:5d:10:41:2c:ae:88:a2:72:a8:
                    39:14:e2:c9:ed:06:3f:84:77:48:0a:7e:f3:cd:dc:
                    e1:41:f2:6f:b3:74:ce:e8:b0:01:32:6c:87:62:ac:
                    da:60:47:a0:ea:db:c9:2f:20:a3:d9:05:05:02:f6:
                    2c:72:5b:9e:43:ff:44:0b:ff:2f:70:d0:2d:e0:95:
                    59:5e:7e:54:c1:25:75:59:dc:58:85:ab:84:f5:54:
                    15:eb:35:c7:70:77:83:5d:28:68:c3:8d:38:fd:cf:
                    94:4e:22:49:ce:57:8d:df:7a:01:9e:58:df:e1:91:
                    9a:9f:4d:d2:0e:c7:a2:83:e4:84:f1:40:ee:ff:69:
                    e5:b8:5f:90:c4:eb:43:2f:c1:fa:55:d4:14:e6:a0:
                    7d:87:63:59:86:c2:3c:9b:de:b4:02:0a:fa:46:3d:
                    f7:f4:3a:d6:9b:06:dc:48:ae:f8:e6:32:3b:f3:d5:
                    cd:63:a9:02:db:c6:0c:af:df:01:42:f9:fc:b2:49:
                    b7:5a:34:83:29:59:0a:a9:2f:f7:eb:24:61:3f:45:
                    db:7c:17:72:bc:c5:04:9f:8f:9d:38:49:b9:c7:60:
                    77:ef:d1:1c:ec:bb:93:ad:33:f5:b8:69:bf:6a:16:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C0:3E:AE:9E:FB:9C:B0:D7:B5:D4:1E:AA:3A:9F:BE:4F:13:7C:55
            X509v3 Authority Key Identifier:
                keyid:15:CE:72:F8:64:B9:D2:22:72:2D:29:CF:B1:44:28:A8:86:92:22:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15CE72F864B9D222722D29CFB14428A88692222C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/15CE72F864B9D222722D29CFB14428A88692222C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:c8:4d:4c:76:3f:5d:1c:04:e3:f0:bc:2b:4f:85:04:3b:
         52:42:ca:ad:31:c7:7f:a3:28:79:32:46:9e:59:fb:c6:59:40:
         7d:1e:00:f6:db:fa:8a:99:7c:97:86:9b:3f:e1:a4:52:d2:fd:
         2d:57:a9:40:68:11:0c:8c:56:7c:19:b7:07:3f:98:73:8d:f8:
         cb:43:4d:c2:6c:df:a7:68:7e:f6:d4:cf:a0:2f:f3:dc:c7:8e:
         93:4c:29:f0:52:84:5b:88:f6:ae:b9:73:3a:4d:ff:82:29:cb:
         90:d4:8b:40:98:27:9b:ae:49:3b:48:92:27:55:53:c1:dc:56:
         77:5e:8e:d1:ba:61:bf:97:01:5a:6f:16:91:65:ea:0a:b0:6b:
         c4:f0:1f:77:3d:ab:56:72:42:6a:0c:51:be:de:24:04:cf:8c:
         31:84:33:4a:10:f5:09:05:c9:3d:8e:a0:47:dd:4b:92:59:38:
         af:8a:ed:c8:55:f1:82:ab:78:73:4b:d4:96:5f:8c:83:c3:d5:
         1d:74:8c:05:45:f9:5a:53:c4:bd:4d:f1:5c:dd:e4:2e:80:ae:
         fe:59:0f:d8:0e:80:8f:43:1c:0b:da:e3:c4:61:f6:b9:4f:f4:
         5b:a7:ad:2f:e9:a5:05:ad:05:9d:b4:0e:d9:6d:fa:8f:dd:60:
         c8:97:d1:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf1nflFS0rWXmMlQSA+lMA3k9NLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVDRTcyRjg2NEI5RDIyMjcyMkQyOUNGQjE0NDI4QTg4
NjkyMjIyQzAeFw0yMzA2MTQwODE4MzdaFw0yMzA2MTUwOTAwMzdaMDMxMTAvBgNV
BAMTKDM5QzAzRUFFOUVGQjlDQjBEN0I1RDQxRUFBM0E5RkJFNEYxMzdDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBvEKkNG7XNXDp0cbaSpsXwbD
oV0QQSyuiKJyqDkU4sntBj+Ed0gKfvPN3OFB8m+zdM7osAEybIdirNpgR6Dq28kv
IKPZBQUC9ixyW55D/0QL/y9w0C3glVleflTBJXVZ3FiFq4T1VBXrNcdwd4NdKGjD
jTj9z5ROIknOV43fegGeWN/hkZqfTdIOx6KD5ITxQO7/aeW4X5DE60MvwfpV1BTm
oH2HY1mGwjyb3rQCCvpGPff0OtabBtxIrvjmMjvz1c1jqQLbxgyv3wFC+fyySbda
NIMpWQqpL/frJGE/Rdt8F3K8xQSfj504SbnHYHfv0Rzsu5OtM/W4ab9qFtYpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOcA+rp77nLDXtdQeqjqfvk8TfFUwHwYDVR0j
BBgwFoAUFc5y+GS50iJyLSnPsUQoqIaSIiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF
Tk4vMC8xNUNFNzJGODY0QjlEMjIyNzIyRDI5Q0ZCMTQ0MjhBODg2OTIyMjJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1Q0U3MkY4NjRCOUQyMjI3
MjJEMjlDRkIxNDQyOEE4ODY5MjIyMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRFTk4vMC8x
NUNFNzJGODY0QjlEMjIyNzIyRDI5Q0ZCMTQ0MjhBODg2OTIyMjJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVR7ITUx2P10cBOPwvCtPhQQ7UkLKrTHHf6MoeTJGnln7xllAfR4A9tv6ipl8
l4abP+GkUtL9LVepQGgRDIxWfBm3Bz+Yc434y0NNwmzfp2h+9tTPoC/z3MeOk0wp
8FKEW4j2rrlzOk3/ginLkNSLQJgnm65JO0iSJ1VTwdxWd16O0bphv5cBWm8WkWXq
CrBrxPAfdz2rVnJCagxRvt4kBM+MMYQzShD1CQXJPY6gR91Lklk4r4rtyFXxgqt4
c0vUll+Mg8PVHXSMBUX5WlPEvU3xXN3kLoCu/lkP2A6Aj0McC9rjxGH2uU/0W6et
L+mlBa0FnbQO2W36j91gyJfRbA==
-----END CERTIFICATE-----