Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.mft
File:                     CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.mft (raw, json)
Hash identifier:          fDQeBdO5BAzdXnlLMueJbWPT09JGUZlGm5uCgWd64Dc=
Subject key identifier:   4C:AB:A4:80:42:28:5F:9F:01:8E:6B:25:2C:23:33:B6:6C:3F:1A:03
Authority key identifier: CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
Certificate issuer:       /CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
Certificate serial:       55E7C39D2F49F0C5C03954660A28A2833B7E7B66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.mft
Manifest number:          05F5
Signing time:             Mon 15 Apr 2024 11:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 11:00:00 +0000
Files and hashes:         1: CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.crl (hash: ZaURjtcTCgumjyYYUUa3oTxS8K+tqdiMpvuXMOz1OzU=)
                          2: 32342e3135322e36382e302f32322d3234203d3e20323730343835.roa (hash: LpoB01UwtzC66Uj/px9l3WxGLqyAk3/BNxgRBk6T5MY=)
                          3: 323830343a366362303a3a2f33322d3334203d3e20323730343835.roa (hash: 2bLTpeVWmBReABmpBrlek3wPLzqOST/s512q9gQRdkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e7:c3:9d:2f:49:f0:c5:c0:39:54:66:0a:28:a2:83:3b:7e:7b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
        Validity
            Not Before: Apr 15 10:55:00 2024 GMT
            Not After : Apr 22 11:00:00 2024 GMT
        Subject: CN=3082010A0282010100CC846772ECDC6AE0B344B86D768FC18CCC84A9C63CB76872A382F15A5AC6631F27916FF954A92454FF9A8EE35F2236CEDB4E7ED0FBCE9FD16C995537D5124066D113DF802431660C5002DD9595974930674B5C57A22211926655F9AC05AAFC24313EB20DF7DAF12C88007490B6B1C5FE7B8D0675256B49C128B8F3F246C440DBE0860288077A850F1B58C490778A58B88C89EAA9D0ADDB515DCBBBFB86DE6ADE9C1E6CED79EB03F95BEDC20BF2114B6377D65791979D4097AFEC013286BF3B5D6D7D528B1EA1900CC755E9DCC8EA9F21E6A76C7F5ABDC65A92E4CFAF0A27E0E93F678DF0F9D7168217E976AF4DBB6EB66C010DA7B501B004DB5BD0532065A1190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:67:72:ec:dc:6a:e0:b3:44:b8:6d:76:8f:
                    c1:8c:cc:84:a9:c6:3c:b7:68:72:a3:82:f1:5a:5a:
                    c6:63:1f:27:91:6f:f9:54:a9:24:54:ff:9a:8e:e3:
                    5f:22:36:ce:db:4e:7e:d0:fb:ce:9f:d1:6c:99:55:
                    37:d5:12:40:66:d1:13:df:80:24:31:66:0c:50:02:
                    dd:95:95:97:49:30:67:4b:5c:57:a2:22:11:92:66:
                    55:f9:ac:05:aa:fc:24:31:3e:b2:0d:f7:da:f1:2c:
                    88:00:74:90:b6:b1:c5:fe:7b:8d:06:75:25:6b:49:
                    c1:28:b8:f3:f2:46:c4:40:db:e0:86:02:88:07:7a:
                    85:0f:1b:58:c4:90:77:8a:58:b8:8c:89:ea:a9:d0:
                    ad:db:51:5d:cb:bb:fb:86:de:6a:de:9c:1e:6c:ed:
                    79:eb:03:f9:5b:ed:c2:0b:f2:11:4b:63:77:d6:57:
                    91:97:9d:40:97:af:ec:01:32:86:bf:3b:5d:6d:7d:
                    52:8b:1e:a1:90:0c:c7:55:e9:dc:c8:ea:9f:21:e6:
                    a7:6c:7f:5a:bd:c6:5a:92:e4:cf:af:0a:27:e0:e9:
                    3f:67:8d:f0:f9:d7:16:82:17:e9:76:af:4d:bb:6e:
                    b6:6c:01:0d:a7:b5:01:b0:04:db:5b:d0:53:20:65:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:A4:80:42:28:5F:9F:01:8E:6B:25:2C:23:33:B6:6C:3F:1A:03
            X509v3 Authority Key Identifier:
                keyid:CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:fa:e3:bb:a5:1b:66:77:11:1a:35:0a:3c:42:0c:9d:73:c4:
         5f:08:7b:82:d5:b4:c1:0f:19:c9:f0:63:ba:8a:a0:b1:e1:bf:
         c1:6a:d6:b9:94:f9:54:7b:11:e6:7a:96:bf:98:9c:65:af:9e:
         64:73:bb:eb:79:69:83:f0:8d:5a:b6:6e:22:99:22:5d:17:c1:
         02:15:21:d7:fe:8d:d1:5f:ed:92:64:62:00:be:50:1d:90:aa:
         85:f1:b6:06:42:4d:80:3a:f2:fc:d8:de:1b:54:58:0b:d9:1e:
         1c:87:99:25:c7:2e:c9:93:60:31:d0:9f:9a:08:7f:6c:f7:ea:
         90:5f:8e:df:01:d4:57:59:f3:c6:fc:58:ce:cd:c6:7d:d2:21:
         04:85:b7:7f:82:55:25:bc:76:b2:65:32:14:bb:0b:a9:5d:c6:
         07:b9:e6:a0:e9:7c:66:eb:39:0b:a9:39:90:24:63:c8:93:06:
         74:0a:cf:25:98:73:9e:99:dc:f6:10:37:c2:36:62:08:0f:c2:
         b0:3e:30:99:c1:98:c5:e2:1a:e2:bd:88:26:1a:d9:01:34:88:
         4c:6d:63:b9:4d:41:a5:9d:bc:ed:0d:6f:2c:f3:42:0f:39:88:
         62:53:1e:01:9f:6e:77:d1:4b:ec:d9:4c:c4:b5:01:5f:d1:ce:
         1f:ba:78:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----