Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.mft
File:                     13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.mft (raw, json)
Hash identifier:          UHMmrcBr//L1q2KA5xsNdqjoK5ZEEuumpXsLsyQ3kS8=
Subject key identifier:   F9:C7:09:FF:29:BE:EE:BC:3C:94:AA:FB:50:17:65:D9:4C:17:FD:04
Authority key identifier: 13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7
Certificate issuer:       /CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
Certificate serial:       45009A81895C26D74497465F93E4B1CA1F6E984F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.mft
Manifest number:          2B
Signing time:             Mon 15 Apr 2024 11:30:41 +0000
Manifest this update:     Mon 15 Apr 2024 11:25:41 +0000
Manifest next update:     Tue 16 Apr 2024 13:12:41 +0000
Files and hashes:         1: 323830343a3838633a3a2f33332d3333203d3e203532383732.roa (hash: wVHhf7f7pvGcRsAydEOA359GJaCd4snhONtz/ZUALLo=)
                          2: 3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (hash: jnMtdsxWrrFXQjb8PqFF70MPVxQLgiY3ls+XAI63uu8=)
                          3: 3136382e302e3233362e302f32322d3234203d3e203532383732.roa (hash: +6b9AKKeiDQCM5tQefv7kmJF175COWmUW4hdmzYkCcI=)
                          4: 13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.crl (hash: b7ap6geyYuiKQrYhvsQx416lmwPwmxgfOkzWdqKtH6E=)
                          5: 323830343a3838633a383030303a3a2f33332d3333203d3e203532383732.roa (hash: s8qq+RzZ8DkwsMNZrtAcwSJUnK+WLHjZg1+ozFgMhUk=)
                          6: 323830343a3838633a3a2f33322d3332203d3e203532383732.roa (hash: q899UBkAboggPCYKPzb1mfZi+xrmkwxPPuOahvuEvvQ=)
                          7: 3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa (hash: FksLb81nqVGEu8f0SMhv1jK7blxADSutBVQARQe3Vw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:00:9a:81:89:5c:26:d7:44:97:46:5f:93:e4:b1:ca:1f:6e:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7
        Validity
            Not Before: Apr 15 11:25:41 2024 GMT
            Not After : Apr 16 13:12:41 2024 GMT
        Subject: CN=F9C709FF29BEEEBC3C94AAFB501765D94C17FD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:76:d2:10:da:b4:77:b4:44:2b:8a:3b:ec:
                    f7:8f:60:c5:28:15:60:c5:8c:5a:d7:a7:e9:09:0c:
                    ed:f9:57:b2:26:bc:1b:61:d9:76:49:49:54:d4:82:
                    22:59:91:cb:32:ce:ea:ee:c3:1a:93:f1:31:ae:3c:
                    87:6d:97:0c:4a:5f:8d:e2:00:92:f8:b8:b5:3e:11:
                    de:6d:43:b0:2e:33:e3:7e:18:25:a7:f4:e1:52:da:
                    b7:8d:7e:4a:d8:84:b1:14:93:a5:a4:13:66:3a:fc:
                    52:59:ed:c8:08:5b:f0:12:37:ba:46:d2:07:ff:51:
                    72:fa:92:b2:c1:93:dd:30:64:83:fe:a8:87:10:03:
                    ea:4b:86:d8:7c:55:dc:ae:e5:ca:dd:1e:8d:db:6e:
                    d1:ac:68:cf:de:36:9e:35:fd:c8:2e:3f:cd:03:5c:
                    ce:06:16:0f:5a:e4:b3:77:a0:b5:ce:f7:84:5f:de:
                    67:c0:c1:78:81:fd:09:73:1e:c1:88:87:ed:99:7f:
                    f1:da:fd:a9:75:c6:f9:b1:4d:88:89:60:fe:bc:1c:
                    ab:71:09:20:fa:93:63:e5:39:53:de:3c:6a:fa:40:
                    01:4d:82:90:82:04:7d:9f:07:ec:fa:d5:8d:0e:0e:
                    3b:11:b2:08:44:91:55:84:50:71:66:56:5c:b0:c7:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C7:09:FF:29:BE:EE:BC:3C:94:AA:FB:50:17:65:D9:4C:17:FD:04
            X509v3 Authority Key Identifier:
                keyid:13:D1:F1:BF:3A:18:DE:5F:A5:17:A9:8A:F9:7B:C1:2D:FA:B9:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/13D1F1BF3A18DE5FA517A98AF97BC12DFAB985E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4a:cb:23:01:3b:dd:07:1f:57:97:e7:1d:d3:58:d5:2b:28:
         86:4a:14:a1:a8:96:07:b4:27:38:1e:86:8c:56:c2:93:68:62:
         36:a5:f9:40:9d:98:3d:45:58:00:39:37:db:60:d8:f6:2f:d4:
         4d:53:da:29:51:ea:b5:de:d5:6b:ab:92:4f:77:69:e3:c5:1b:
         7d:3d:06:a1:be:5f:80:e8:8d:9f:50:80:fa:c0:57:99:93:ff:
         5b:7c:38:28:f3:47:d0:38:bb:42:1a:43:36:a4:8c:24:d1:5e:
         32:93:1a:72:fb:53:86:d5:c2:e6:2f:d7:7a:a9:de:4e:79:f4:
         d7:ca:04:25:ee:e7:0b:e1:13:1e:9c:c1:9c:b1:f5:83:17:f4:
         59:b3:d4:21:e9:84:60:4a:5f:91:81:17:f0:60:f4:b8:ea:2f:
         a3:8b:55:dd:d1:4a:00:60:84:d8:fe:c5:42:71:20:5a:5f:06:
         56:23:b9:be:e0:7e:f2:aa:30:47:eb:49:1e:57:79:be:ad:07:
         6b:8e:b9:91:3c:4e:49:7f:25:3c:ba:3f:2e:94:fc:ab:d9:3a:
         6e:d1:52:02:e7:94:87:90:01:cd:fa:29:ed:2d:54:71:10:29:
         94:1f:68:57:d0:d9:ed:2b:f5:0b:9b:83:ec:f6:0a:aa:a6:65:
         8d:4e:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----