Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.mft
File:                     3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.mft (raw, json)
Hash identifier:          NoabVY4A754FdpMg5GleKGC49RhkW30H1fsZ29klrH0=
Subject key identifier:   57:CE:6A:E6:97:87:ED:69:F7:91:D4:91:3E:33:D8:F0:89:3F:A4:24
Authority key identifier: 3B:9F:68:A3:C5:11:18:C6:F5:03:60:4B:DA:6B:59:E6:23:EC:A3:CE
Certificate issuer:       /CN=3B9F68A3C51118C6F503604BDA6B59E623ECA3CE
Certificate serial:       0450FC5D767FAE989FF3684DAD7F4B5F5DE6A0C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.mft
Manifest number:          5B
Signing time:             Mon 15 Apr 2024 05:58:00 +0000
Manifest this update:     Mon 15 Apr 2024 05:53:00 +0000
Manifest next update:     Tue 16 Apr 2024 05:58:00 +0000
Files and hashes:         1: 3133312e3235352e37362e302f32322d3234203d3e20323634353138.roa (hash: sKT5rZPdbc834gIx6qPJT/BPOX+uWgBZ0bN0cTbkka8=)
                          2: 3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.crl (hash: jz8hrqVXqR6YAU79I2ZixUcZFKJMRpyIkUhouKN4MVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:fc:5d:76:7f:ae:98:9f:f3:68:4d:ad:7f:4b:5f:5d:e6:a0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B9F68A3C51118C6F503604BDA6B59E623ECA3CE
        Validity
            Not Before: Apr 15 05:53:00 2024 GMT
            Not After : Apr 22 05:58:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:29:69:31:51:83:62:5d:39:f2:21:00:04:
                    a8:6d:88:ea:a5:ac:12:4f:a1:75:27:39:66:71:e4:
                    92:1b:66:90:b1:ee:83:f8:70:6c:4f:be:fb:ca:5e:
                    ec:42:f8:64:27:d1:e5:e0:d7:8a:7a:82:b6:52:1e:
                    7e:10:1f:47:f1:07:c3:c2:44:7e:93:38:4d:32:90:
                    f0:92:ec:5f:11:b2:b0:6c:fe:60:b3:6c:a1:f6:75:
                    43:1b:62:ea:c5:7a:a4:76:bf:30:49:eb:02:32:6e:
                    94:9e:b9:33:44:01:d0:0e:1a:fc:ae:06:91:6d:a9:
                    cc:83:e3:cc:ce:ba:71:78:d5:e2:96:2c:74:a7:b3:
                    d1:9a:11:64:5e:ea:c2:f9:f7:cc:c6:03:bf:9d:d7:
                    27:60:3c:ce:f7:7b:a4:5d:43:8d:a9:3d:8e:96:cf:
                    7e:06:21:b8:63:e7:03:ca:da:ab:81:b0:e4:f5:46:
                    6e:f3:85:ea:b8:21:40:bf:79:6f:12:7d:39:2b:d4:
                    f7:61:46:ff:10:cf:a5:c4:7c:67:4a:c7:e8:d2:57:
                    b2:7d:47:29:4b:51:71:9e:e3:2f:ba:fd:d0:40:7e:
                    00:15:50:42:f0:1e:56:a3:c3:4a:fc:cd:0a:10:78:
                    cc:e7:7a:f2:7f:c2:ef:8f:a4:7d:d6:de:5f:7f:9f:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CE:6A:E6:97:87:ED:69:F7:91:D4:91:3E:33:D8:F0:89:3F:A4:24
            X509v3 Authority Key Identifier:
                keyid:3B:9F:68:A3:C5:11:18:C6:F5:03:60:4B:DA:6B:59:E6:23:EC:A3:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3B9F68A3C51118C6F503604BDA6B59E623ECA3CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:39:34:f9:fb:df:b8:86:0f:02:f8:17:57:b3:35:fc:d8:
         5f:1f:36:d5:87:91:a6:69:e6:1b:01:41:bb:5c:7f:b1:27:bd:
         a8:f7:46:7f:c7:e1:7a:19:9e:99:5d:5d:25:2e:93:e8:45:3f:
         0d:04:3d:e6:98:a7:6a:11:f4:c6:b1:e8:94:2a:6a:6e:68:22:
         40:be:9d:10:18:3f:ca:7c:12:d3:07:0c:29:d2:f5:d3:dd:f4:
         bc:c0:2f:bb:15:ed:bb:9a:84:06:51:53:47:07:2b:23:4e:10:
         a4:68:63:17:f9:4a:35:8b:ac:77:98:65:bd:3b:34:18:e3:b6:
         2e:a7:5b:cd:3d:69:48:11:fb:d8:3a:67:a7:f7:89:9e:6a:06:
         ad:ae:db:f6:cb:ec:68:bc:7c:5d:60:6a:64:62:a0:b2:6b:60:
         00:3f:45:b8:ff:c3:58:bb:5c:5d:dc:11:64:37:a0:6e:08:f5:
         61:e0:0d:fa:0c:8f:60:da:0b:82:12:3c:90:b1:dd:7c:0c:63:
         ce:60:50:d6:e0:78:98:11:1d:e1:66:bc:b8:4e:48:07:57:41:
         f9:53:e5:be:6f:07:0a:2a:7b:14:a7:f9:6b:96:b2:55:6b:9b:
         73:3c:71:78:1a:b7:a0:f1:79:97:ff:e2:63:7e:36:fc:4c:d7:
         08:3e:50:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----