Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.mft
File:                     8E2C587E03D77A09E0236848BE4C5CBC4D782D33.mft (raw, json)
Hash identifier:          oh5QLmAzZ4/rlMrji1RbfF6msla1Hlipj+94yd2a8/M=
Subject key identifier:   71:04:E7:07:4E:06:99:4B:AC:90:07:EB:AF:7A:2C:EB:66:DF:29:E1
Authority key identifier: 8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33
Certificate issuer:       /CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
Certificate serial:       0C673099350F104C65F272EED6D037B7AE3E6E1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.mft
Manifest number:          03AF
Signing time:             Mon 15 Apr 2024 02:58:19 +0000
Manifest this update:     Mon 15 Apr 2024 02:53:19 +0000
Manifest next update:     Tue 16 Apr 2024 03:19:19 +0000
Files and hashes:         1: 8E2C587E03D77A09E0236848BE4C5CBC4D782D33.crl (hash: zQzEnHLjDGwg/u7jJ+LGNRRTRGv/KD8sKBFKn9ok6G4=)
                          2: 34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa (hash: RF8CvHMa2kA7LB+a/futKXxj2+8J/3Nb9cUTF8q+USI=)
                          3: 323830343a346530343a3a2f33322d3336203d3e20323638323334.roa (hash: kbCN8ueseZZ3MV/Gx4saHFlv2qZ0Yq0TTCYMtlpzgcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:67:30:99:35:0f:10:4c:65:f2:72:ee:d6:d0:37:b7:ae:3e:6e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E2C587E03D77A09E0236848BE4C5CBC4D782D33
        Validity
            Not Before: Apr 15 02:53:19 2024 GMT
            Not After : Apr 16 03:19:19 2024 GMT
        Subject: CN=7104E7074E06994BAC9007EBAF7A2CEB66DF29E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:7d:d5:a5:28:06:43:bd:15:dc:81:62:2e:
                    30:23:85:68:7d:62:6d:7f:cb:34:89:c2:86:d4:a1:
                    ab:f7:c0:da:2c:6e:39:a5:37:52:2c:95:76:31:94:
                    ce:e6:14:91:18:9d:70:32:88:ed:15:e7:29:b1:20:
                    94:64:96:27:83:ca:28:21:c7:e0:3d:3f:1f:db:86:
                    a8:ca:58:8f:dd:a2:d2:e0:7f:9b:0e:5b:fe:99:7d:
                    9e:e7:58:e5:c7:53:82:7c:3d:60:2c:75:df:19:52:
                    c0:6e:d2:2c:43:d5:b0:db:c3:15:21:bc:e6:3e:58:
                    b1:be:45:c3:13:0a:4b:30:d5:d6:fe:28:15:a5:8b:
                    f9:ca:df:7c:bd:53:6b:31:9a:6d:1d:83:9e:28:62:
                    c2:10:96:c1:b0:ef:5a:63:61:fa:de:f7:36:74:65:
                    b9:e0:70:3d:27:4c:9f:95:ba:03:5d:22:ba:94:9c:
                    2e:5a:9f:c9:16:96:bf:61:a8:be:8f:eb:20:75:ac:
                    d9:f7:38:d9:cd:e4:37:34:63:84:89:11:c0:4d:51:
                    07:e5:70:2d:ae:ff:e6:e8:16:f5:cc:06:c4:05:ce:
                    52:ac:e9:20:44:b7:9b:53:59:e9:6d:2c:69:03:5f:
                    0c:49:91:83:7b:95:04:7f:c4:b2:17:db:cf:01:b3:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:E7:07:4E:06:99:4B:AC:90:07:EB:AF:7A:2C:EB:66:DF:29:E1
            X509v3 Authority Key Identifier:
                keyid:8E:2C:58:7E:03:D7:7A:09:E0:23:68:48:BE:4C:5C:BC:4D:78:2D:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/8E2C587E03D77A09E0236848BE4C5CBC4D782D33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:ef:10:27:20:0d:f6:89:ef:8f:b7:87:5b:b4:7d:61:95:
         88:44:dd:13:e9:6d:55:dd:73:4b:68:d2:f4:25:f7:04:f9:ae:
         63:04:2c:18:c8:34:73:6e:a5:8a:b2:ad:fc:29:fa:e6:04:e1:
         ed:77:84:88:be:68:f8:99:74:2f:f0:36:6f:6d:39:24:66:80:
         7a:e6:d3:9e:34:6e:8f:89:5b:dc:22:f4:6a:80:21:ff:f3:f4:
         02:bc:c1:22:28:ca:53:d6:5d:3f:b4:c6:ba:74:e4:66:88:da:
         92:2a:f4:dc:36:aa:79:da:75:98:06:fb:23:99:30:5c:38:f5:
         21:34:44:45:b3:60:1f:ce:58:f6:80:f2:b4:f7:d1:76:04:d0:
         a1:d0:db:de:a3:27:8b:c8:52:79:62:af:49:c4:3e:58:1b:91:
         0b:9b:79:fc:1a:bf:d8:38:f9:de:a1:bc:56:57:ca:6f:30:5a:
         fd:98:9b:ff:05:d4:3e:f4:fa:a3:2d:eb:fe:12:b7:8e:10:4c:
         12:09:81:4e:ad:d1:77:ab:f1:fd:1f:ef:27:6d:65:ec:2b:a4:
         5a:d2:9c:33:b5:10:7c:2d:53:cb:72:71:93:2a:a8:33:c4:09:
         3d:cd:92:75:76:21:a7:78:8d:a5:d9:e8:44:7d:5f:81:e1:c7:
         db:07:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----