Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.mft
File:                     CDF3926C83D9599972E0ACFF737170CB3CDEED52.mft (raw, json)
Hash identifier:          8JIsVOcQsqf2tgVa3u135TO4isIGuYezOSm0Fpy3oEM=
Subject key identifier:   67:3D:BF:D7:0B:7E:AE:93:68:2B:49:D3:BC:9C:CF:D4:FA:35:78:A2
Authority key identifier: CD:F3:92:6C:83:D9:59:99:72:E0:AC:FF:73:71:70:CB:3C:DE:ED:52
Certificate issuer:       /CN=CDF3926C83D9599972E0ACFF737170CB3CDEED52
Certificate serial:       612186A442CD04E0CC05B606D8C7ABDE9F97D534
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.mft
Manifest number:          0344
Signing time:             Mon 15 Apr 2024 00:18:27 +0000
Manifest this update:     Mon 15 Apr 2024 00:13:27 +0000
Manifest next update:     Tue 16 Apr 2024 02:25:27 +0000
Files and hashes:         1: 3137302e3234342e3231322e302f32322d3234203d3e20323636353038.roa (hash: 7o3oOA3jYZSwuh3PttyS+5nmGz79JNa3qlJ0MfIYWfI=)
                          2: CDF3926C83D9599972E0ACFF737170CB3CDEED52.crl (hash: HBxfPBEH6xZs+1dM0HHJvdddG66dZLlPz6PQPO7ybJM=)
                          3: 323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (hash: iLzyD1L6mL3wqqxXRMf5dLLwLGxhhHSK3A1/zM/ENOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:21:86:a4:42:cd:04:e0:cc:05:b6:06:d8:c7:ab:de:9f:97:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDF3926C83D9599972E0ACFF737170CB3CDEED52
        Validity
            Not Before: Apr 15 00:13:27 2024 GMT
            Not After : Apr 16 02:25:27 2024 GMT
        Subject: CN=673DBFD70B7EAE93682B49D3BC9CCFD4FA3578A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:7a:25:34:8d:2a:33:13:c4:08:e4:58:b6:
                    85:9e:49:fe:81:84:86:08:1a:b9:15:62:8d:12:de:
                    04:f2:23:f1:5f:cd:28:e0:d5:92:b0:c1:ed:7c:82:
                    a1:1c:9c:23:6d:09:80:e4:1c:16:8d:0e:92:d3:fd:
                    0d:b5:a0:c1:02:d1:bd:ce:ca:e3:a6:5d:86:3c:2e:
                    c7:a5:59:86:3d:fa:67:8e:2b:98:8a:23:87:4f:11:
                    92:74:0e:5b:db:f3:d1:b7:aa:18:c7:65:8c:58:2d:
                    ae:e6:4c:d4:0a:92:e4:16:38:fa:6f:30:6f:9d:8f:
                    70:e5:bf:6e:59:5b:ab:1a:75:b1:1b:9a:f7:2e:de:
                    21:0d:45:80:b9:b8:2e:aa:d7:db:e6:64:08:b1:b5:
                    90:ab:27:c3:06:d8:ee:02:fd:fc:8b:33:19:6b:74:
                    51:39:54:3e:10:89:9c:19:7e:52:63:97:df:e3:28:
                    0f:7c:42:44:dd:ac:ca:1f:9b:e6:b2:b9:04:d5:26:
                    6d:48:1c:f9:85:a0:cf:0c:e6:6f:73:da:e0:42:21:
                    27:51:df:28:64:28:05:13:a9:6c:03:28:06:dd:71:
                    f9:29:7a:99:77:09:45:8e:58:01:c5:93:16:f9:d4:
                    94:66:8d:b6:42:1c:7a:49:d9:95:19:43:57:dd:40:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3D:BF:D7:0B:7E:AE:93:68:2B:49:D3:BC:9C:CF:D4:FA:35:78:A2
            X509v3 Authority Key Identifier:
                keyid:CD:F3:92:6C:83:D9:59:99:72:E0:AC:FF:73:71:70:CB:3C:DE:ED:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/0/CDF3926C83D9599972E0ACFF737170CB3CDEED52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:f2:35:bd:c0:20:c9:bb:3d:93:8d:aa:ce:62:bb:2c:30:
         8f:0b:2c:f8:5b:2c:02:24:6d:c9:a7:0f:71:ea:73:c5:6c:9a:
         74:cb:f8:a0:6b:f5:ad:10:e4:70:cb:86:c4:76:24:53:9c:84:
         66:2c:c4:a7:cd:cb:42:e8:1b:22:e3:96:af:22:25:ae:6e:52:
         fb:06:ea:3f:79:31:05:84:06:d4:67:20:c3:f6:0c:0d:1c:f7:
         71:21:70:77:1b:9d:7d:8e:58:b9:8d:2d:03:fe:1e:b6:6e:c7:
         bd:3e:bc:fd:f2:3a:95:a7:99:07:41:61:ba:9c:2c:13:3f:8e:
         d5:8d:da:cb:21:8b:46:64:36:8c:6b:ec:a4:f5:6a:a7:bc:33:
         12:b8:0e:30:ba:5b:96:63:9b:35:aa:8c:06:8f:f5:aa:ca:a0:
         e2:e2:62:45:1a:98:9c:1a:2d:5a:d7:dc:c5:73:e5:14:32:33:
         67:52:50:58:0d:b7:eb:4c:44:dc:66:c4:b4:93:e7:40:8d:4f:
         17:b0:4c:af:ec:b1:cf:76:a3:a1:90:96:67:b8:93:c8:fa:65:
         0d:ad:e9:2c:35:3e:23:17:f3:f8:e3:cc:04:4b:61:fc:33:f1:
         b5:ef:89:50:bd:36:01:8e:ab:0a:cb:b3:36:41:61:db:46:c9:
         08:1f:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----