Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.mft
File:                     35F6CB498D4B581CD56EFC2125053A8C6BF1D329.mft (raw, json)
Hash identifier:          kElkMTyCXIfwMzvyVtZMPgBT4HQdxKAs/7BRN5Ll/zE=
Subject key identifier:   93:48:EF:D3:B5:CE:77:AA:9A:EC:ED:EB:61:85:40:9D:C6:FE:9B:BA
Authority key identifier: 35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Certificate issuer:       /CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
Certificate serial:       68D11E3BCB795F9510BD76084D297A8EFDEC3F54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.mft
Manifest number:          051E
Signing time:             Mon 15 Apr 2024 10:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:10:00 +0000
Files and hashes:         1: 3137372e31312e3133312e302f32342d3234203d3e20323730353134.roa (hash: 3GCefBiygXpyWG3luGEvytWhXM0WdN1vTFFTCAbZ/R4=)
                          2: 3137372e31312e3132382e302f32342d3234203d3e20323730353134.roa (hash: jjuJaHkAmcmFzPCmJexi8pzY7GB3kpTISD9+QkcxM7s=)
                          3: 3137372e31312e3132382e302f32322d3232203d3e20323730353134.roa (hash: R+8qLuaRX8BciVh43fBPl8A5kUbJOy8BophJc6s3Y5E=)
                          4: 3137372e31312e3132392e302f32342d3234203d3e20323730353134.roa (hash: /wflAhhYzVwTIKzgTQs0zorGE412eTzUH2Vgh0e5voY=)
                          5: 35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl (hash: zPKwplhZc97LXbS+d58tIi8ChwZyVSxTQ35dz3Hx98Y=)
                          6: 323830343a366432303a3a2f33322d3332203d3e20323730353134.roa (hash: u1KJEbsXoBlh0IHEw7Cujn/8CkrIM+5nyhFp/VodaOk=)
                          7: 3137372e31312e3133302e302f32342d3234203d3e20323730353134.roa (hash: hKo6huK3hd4xb7DY3SEj6KpDh3KUOWj4+e4QKyx6Djo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:1e:3b:cb:79:5f:95:10:bd:76:08:4d:29:7a:8e:fd:ec:3f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Validity
            Not Before: Apr 15 10:05:00 2024 GMT
            Not After : Apr 22 10:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:63:73:e8:65:fc:be:6e:94:57:7c:0e:8c:
                    e5:00:93:32:e4:8f:48:1c:7b:e6:a5:82:f1:d0:56:
                    20:63:23:88:b3:4a:1c:9c:67:95:42:7f:0b:d8:b6:
                    fc:9c:e0:9c:8f:4a:27:9f:2c:58:a6:39:2c:d8:8c:
                    ce:4c:a5:cb:97:76:bf:ac:8b:8b:97:c9:1c:d3:a4:
                    f9:41:20:79:79:1d:e6:4f:cd:28:48:25:2e:f2:b2:
                    8d:d3:92:51:29:20:fd:3c:2d:c6:af:43:50:86:80:
                    02:ac:f0:52:4e:14:1e:65:8a:3e:6f:15:ca:3d:4f:
                    69:0b:a5:38:d6:6e:e7:c6:32:ac:2b:98:6a:dd:a1:
                    5f:e2:11:8f:22:97:70:7e:2c:69:7f:c4:b4:04:80:
                    b9:48:0f:eb:ea:d1:62:68:f2:f5:db:a8:a8:52:ca:
                    7f:98:56:f9:37:cb:15:ea:15:3e:6d:a5:46:73:b3:
                    ea:78:27:17:0e:56:2f:24:cf:37:3a:36:c1:1f:b5:
                    0e:29:13:c1:76:49:fa:4c:82:c4:e9:a9:6f:d9:32:
                    f7:9f:32:d1:fc:6d:67:46:df:82:5f:c0:ad:38:13:
                    17:05:b6:ec:3f:d2:69:a9:4a:80:ae:5b:32:1d:3a:
                    42:c2:a7:61:fd:06:64:be:74:fb:ef:37:c7:d4:f5:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:48:EF:D3:B5:CE:77:AA:9A:EC:ED:EB:61:85:40:9D:C6:FE:9B:BA
            X509v3 Authority Key Identifier:
                keyid:35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:29:44:ba:c9:7d:82:10:93:1c:d6:97:23:c4:32:74:50:
         eb:d8:9a:d9:9d:3d:e9:41:51:81:02:7e:ae:16:ad:6c:b2:2d:
         4c:f8:14:10:0a:30:67:df:49:b2:bd:c5:e7:a0:4a:e5:cd:91:
         00:66:b6:79:48:7a:54:78:f5:29:19:e7:6e:ab:a4:57:3a:67:
         4b:69:a7:ba:24:44:bc:ad:26:43:f7:a0:6d:7d:41:6d:07:94:
         71:75:76:a8:c0:06:8c:dc:af:90:f4:86:f4:b7:b5:f4:4a:1e:
         ab:d4:a3:bd:3c:63:02:85:f2:d8:7e:ce:26:45:a4:ab:3d:b6:
         96:1a:c1:79:ec:84:7f:70:6b:e1:33:d6:bd:1e:63:19:f8:2d:
         ea:52:28:06:8d:5e:1c:d8:c6:5a:2c:cf:6c:cb:5e:45:03:03:
         1a:12:e9:25:3e:68:05:bf:3f:b1:df:63:60:3d:2c:8c:51:ea:
         ac:12:95:bc:ca:6c:a2:9d:cd:8e:f4:68:7a:82:f4:29:a7:5c:
         e6:4c:8d:8a:bf:fe:4c:c4:3d:a8:66:26:51:8f:14:a4:15:9d:
         56:c7:40:3e:ba:4f:a2:9b:84:a2:11:5c:ba:3f:4e:43:7e:2c:
         c7:0a:a4:4e:f9:06:e0:bf:e3:22:26:2d:df:ca:36:bf:7b:c5:
         f1:23:93:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----