Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.mft
File:                     1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.mft (raw, json)
Hash identifier:          Bq0uGx0VLwYz0pp5MNSUyTA61MUmIlt9uxbtLZQGMNo=
Subject key identifier:   90:66:7C:95:39:65:DC:EB:C8:5E:38:F2:CB:9F:46:74:53:37:99:76
Authority key identifier: 1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02
Certificate issuer:       /CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
Certificate serial:       0147160BDCCD2FF6B7BBD90BBE7FE1294F92A46B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.mft
Manifest number:          054C
Signing time:             Mon 15 Apr 2024 01:40:00 +0000
Manifest this update:     Mon 15 Apr 2024 01:35:00 +0000
Manifest next update:     Tue 16 Apr 2024 01:40:00 +0000
Files and hashes:         1: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (hash: eIm/QrFqe1dzsa4dFaZF23T1Ctkd29Iwn7xMrZyhKOM=)
                          2: 1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl (hash: L6x8+xERfmnKU+dlle1T5Fjt8x1NEs52X8m11XEfVVE=)
                          3: 34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (hash: nK4B5uTxJIWRNOaifKdiBwPoFgLXRoGVqjgciOUM5KU=)
                          4: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (hash: X0bgBNeawz0MHNpdS7OxR+xUpqI6xE5cjIaBJh4EGHQ=)
                          5: 34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (hash: Mthjf0yvugNq0hIZW743oa/K3f4308nT9ERPbP7XMiw=)
                          6: 34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (hash: /7tqb/ICwuV88EWLPwJ60ni/WcD80YYVs5ymc7l0oP4=)
                          7: 34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (hash: IS7V39pmjxj+GtKom9GUxrRJU9ic3LTT3jF3rOu14CU=)
                          8: 34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (hash: K59/ZzmnaBG9wMnFiLykqS0C8YjRXvuuDyMpq6oz4FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:47:16:0b:dc:cd:2f:f6:b7:bb:d9:0b:be:7f:e1:29:4f:92:a4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
        Validity
            Not Before: Apr 15 01:35:00 2024 GMT
            Not After : Apr 22 01:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:84:63:a5:b7:50:1f:68:7d:4f:3e:bb:ba:
                    10:e1:9d:1c:f5:d9:8e:8c:16:73:7d:8c:b9:a8:60:
                    f2:71:87:90:2b:62:f0:96:f7:4b:a4:8a:98:f9:cd:
                    b8:5f:6a:31:52:66:f2:fc:6b:f7:33:76:7b:f3:d9:
                    d8:87:73:a4:5f:b0:47:cd:b6:e9:23:c8:08:f6:8c:
                    47:0e:aa:64:30:bf:32:b9:86:2e:d9:26:1a:24:c3:
                    df:f3:49:ec:8c:f3:fc:b5:ba:97:37:52:54:89:fa:
                    0c:ab:68:4a:45:81:30:83:2d:3c:f5:ae:6c:40:83:
                    51:f5:0d:cb:0d:d8:45:a7:49:e6:bb:72:c7:8f:62:
                    1e:ce:9a:61:d7:42:58:39:90:9f:e7:e7:d8:cf:29:
                    2f:fe:90:a5:94:f9:67:5e:e7:77:c5:e8:fe:a1:ba:
                    f6:8b:b6:68:a7:48:b2:45:1d:d0:e4:37:32:15:e0:
                    74:e6:ed:a0:d1:cc:3d:dd:e2:2c:26:6e:0d:84:23:
                    64:08:df:69:5e:1c:31:06:bc:4d:90:e1:4b:33:3a:
                    0e:4a:8f:cd:17:ab:bf:8a:11:00:55:a3:8c:29:5d:
                    a4:d9:ed:4d:02:84:52:0c:8c:b2:59:d6:4e:0b:2d:
                    7e:55:c9:18:35:d3:7a:88:59:7e:a7:53:ce:85:16:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:7C:95:39:65:DC:EB:C8:5E:38:F2:CB:9F:46:74:53:37:99:76
            X509v3 Authority Key Identifier:
                keyid:1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:1b:ba:00:88:11:51:6f:50:0c:a4:15:9f:06:e7:33:48:
         49:08:f6:0e:7f:11:52:72:b5:3f:fc:30:2b:ca:96:61:3b:c7:
         a5:49:4d:0f:54:25:6a:46:6c:b9:0f:1e:b0:9b:9c:33:88:f5:
         76:ce:a3:05:77:a5:fd:a6:c2:3a:03:de:9b:54:1b:0a:5e:56:
         39:b5:88:d8:f8:65:bc:2c:e6:b4:cc:d6:9c:ec:02:5a:29:79:
         e2:17:ec:fe:3e:9e:f8:eb:5e:d0:67:ce:3c:92:b6:9e:34:e6:
         05:81:c6:59:2d:a8:29:2f:cb:de:8a:de:99:9b:a7:21:12:9b:
         57:0f:c9:51:5a:f6:4e:b8:a7:7b:c6:fe:3e:aa:9a:ab:6a:a6:
         74:71:46:60:c1:99:e4:ab:7b:d6:c7:9b:11:cc:df:30:74:c5:
         29:ef:37:92:f4:30:ef:83:cc:a1:d5:cd:07:d9:8d:91:1b:13:
         24:f8:02:f3:52:b9:43:aa:0c:ea:c4:2e:7c:b2:64:a4:3b:5c:
         a4:84:27:dd:e1:b1:fa:cd:46:18:87:fe:e0:34:42:bd:98:ae:
         09:bc:81:28:bd:06:d4:44:27:c9:d5:26:f2:34:f6:a7:3f:8a:
         2b:b0:b0:be:2a:e5:98:3c:4f:de:06:a3:92:76:18:d9:0e:a7:
         14:a9:93:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----