Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.mft
File:                     4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.mft (raw, json)
Hash identifier:          KWBssi8amjONNVmkEYUCpgGu7/66GRXUAa7xnscJDtY=
Subject key identifier:   CD:02:DC:9A:FA:3B:E7:F4:9F:97:E0:E2:7B:A9:FA:D5:1A:2F:E9:CE
Authority key identifier: 4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Certificate issuer:       /CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
Certificate serial:       37DD9A11CEDE7D496FD618E67EC8C9917A4AB5CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.mft
Manifest number:          05
Signing time:             Sun 14 Apr 2024 22:06:52 +0000
Manifest this update:     Sun 14 Apr 2024 22:01:52 +0000
Manifest next update:     Mon 15 Apr 2024 22:16:52 +0000
Files and hashes:         1: 3138312e3138392e3130362e302f32332d3233203d3e20323731333930.roa (hash: Mby7mtHJQ2JhyUFCsYsD3sEP6Wl+77kulDvW2F4URTw=)
                          2: 3138312e3138392e3130342e302f32342d3234203d3e20323731333930.roa (hash: LfxT1lXJn7O8D8nIK2sONferDM2peQXY/osC3kJVXPk=)
                          3: 3138312e3138392e3130352e302f32342d3234203d3e20323731333930.roa (hash: 2GYkIwfcoNhRIX/x6OzR/AqePAsvvPJnn9St0T0faBY=)
                          4: 3138312e3138392e3130362e302f32342d3234203d3e20323731333930.roa (hash: ZX2lArMT3fNrzr7giKdNi084IxCes/eIm7rjhmkuAog=)
                          5: 323830343a376163303a3a2f33322d3332203d3e20323731333930.roa (hash: rgQNC+jZNzEZO0taJdjo6PW4/zisvAuoWps45Vi1A2Y=)
                          6: 4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl (hash: JyKo+0DYi2Mu6cCYidvmpXVg2TgH6PXzMp9SkEyj/FM=)
                          7: 3138312e3138392e3130372e302f32342d3234203d3e20323731333930.roa (hash: fX2yF0W32iG4uTdK6IGRams/P4cADYPcWzP7aK0NcWE=)
                          8: 3138312e3138392e3130342e302f32332d3233203d3e20323731333930.roa (hash: AAiBjkHgI/Ke53bgpKs9qb9D5YcYv6DokUqszHqGbfU=)
                          9: 3138312e3138392e3130342e302f32322d3232203d3e20323731333930.roa (hash: OWMl++r7yFxivZnRCHDTner70kb/4eqUmC+WlB3uJRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:dd:9a:11:ce:de:7d:49:6f:d6:18:e6:7e:c8:c9:91:7a:4a:b5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Validity
            Not Before: Apr 14 22:01:52 2024 GMT
            Not After : Apr 15 22:16:52 2024 GMT
        Subject: CN=CD02DC9AFA3BE7F49F97E0E27BA9FAD51A2FE9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:61:ea:1a:ed:ed:fb:a8:82:9d:19:14:e8:
                    d6:2d:85:52:43:6c:0b:57:f2:ad:d3:25:c0:84:fb:
                    ae:60:4e:4d:be:c0:cf:8a:cf:55:23:61:25:50:13:
                    2e:e8:48:a7:b4:8f:5d:33:98:5b:5c:93:b5:14:5f:
                    33:9a:67:d0:bb:ee:64:20:aa:62:c4:8f:d1:6c:d6:
                    17:d6:f7:f1:97:27:fb:9a:f8:4a:64:16:f6:eb:6b:
                    ae:b5:18:95:2b:f2:31:3c:14:9d:86:12:62:d7:de:
                    b1:3c:08:22:a8:cc:26:b4:04:3d:fe:18:f8:5c:c5:
                    f7:de:eb:91:5e:b4:d5:b1:7b:3e:44:90:2e:74:a6:
                    ca:aa:35:22:39:fe:40:cd:0d:a7:e9:b2:ba:7f:cc:
                    ab:64:17:52:a5:ea:cc:2b:b8:0c:e8:07:b2:24:30:
                    95:4e:f1:d6:59:c6:a8:c4:91:e6:3f:95:88:81:66:
                    f7:ad:2f:2c:42:d7:59:cf:a7:a0:66:bd:d5:9a:01:
                    8e:a1:c2:0d:77:33:04:1d:1e:ad:b3:bb:d8:cb:b7:
                    32:d2:fd:24:5c:59:ad:80:3b:70:ad:70:7b:a8:27:
                    d0:f5:59:d7:7b:05:05:fe:01:9e:be:b0:e1:44:9a:
                    ab:ba:8b:60:5c:b6:e5:97:be:14:b6:40:25:66:8a:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:DC:9A:FA:3B:E7:F4:9F:97:E0:E2:7B:A9:FA:D5:1A:2F:E9:CE
            X509v3 Authority Key Identifier:
                keyid:4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:fa:d5:9b:d1:ce:97:8b:f6:a6:f7:ed:fb:9b:b4:4a:c6:
         c9:6f:98:11:c8:20:8c:26:53:63:07:44:e5:ff:a0:f7:79:2e:
         99:df:7b:b7:1e:8d:8f:74:2d:70:96:32:c9:20:33:3e:83:26:
         98:8a:55:7e:45:4e:e7:c6:93:71:53:eb:88:4b:9a:b8:14:cf:
         d9:af:5c:07:3b:50:18:08:e9:4b:0c:ca:65:e6:d3:36:6a:5f:
         ad:2c:e4:39:c5:c0:23:af:79:34:80:68:d4:23:8f:ce:12:88:
         ae:c9:17:d0:4f:7a:2c:18:41:15:15:34:58:05:08:07:eb:d5:
         50:45:00:8d:08:cd:25:5e:88:46:0d:0c:7f:6a:4c:ca:b5:d9:
         f3:ae:b1:cb:f5:5e:08:86:d0:59:b4:6c:ee:aa:5c:19:ee:00:
         6c:fe:fc:bf:3b:4b:7a:5f:26:f3:42:93:93:b8:f6:44:bf:4c:
         14:b4:8b:7e:4e:81:20:a2:b2:db:37:53:1f:08:c0:be:09:ec:
         b0:10:9f:d2:1e:de:6a:3f:17:40:d7:22:4c:f2:e0:71:4d:7e:
         fb:e5:59:ed:9a:9c:aa:2e:4e:0e:b8:e9:56:37:3f:1a:23:f6:
         b3:fe:40:c2:c1:54:12:10:12:87:ed:cb:be:45:3f:71:4a:81:
         6a:53:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----