Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.mft
File:                     D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.mft (raw, json)
Hash identifier:          Fxb/8vCCI5aZSLge6jef++sStOhmG5xbEHjilIRJZ2E=
Subject key identifier:   8B:C9:6D:AF:54:73:C7:DC:E8:4E:E8:0E:E5:2B:8E:9F:C8:11:7F:7F
Authority key identifier: D3:A6:87:E7:CF:C4:F6:B7:A2:D9:FF:9D:CD:5D:1A:7E:18:D2:0C:F4
Certificate issuer:       /CN=D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4
Certificate serial:       5D3F170DE463FC8DA216906C7039E7042F11D6CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.mft
Manifest number:          053B
Signing time:             Mon 15 Apr 2024 05:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 05:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 05:10:00 +0000
Files and hashes:         1: 323830343a323662303a3a2f33322d3336203d3e20323633383439.roa (hash: tGq9ISRZfXI/UNKJmhRpXUgDyQkD71ZyLLsj9lPRvKY=)
                          2: 3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa (hash: iRCvXpL2f0/aKa8SzC8pg1r1MBBAPuBsE/hQnXKneN4=)
                          3: D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.crl (hash: KkjmrBfxflGqo3LH0U+L5wWSa1OZ/0jbAY+sMeBVryY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:17:0d:e4:63:fc:8d:a2:16:90:6c:70:39:e7:04:2f:11:d6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4
        Validity
            Not Before: Apr 15 05:05:00 2024 GMT
            Not After : Apr 16 05:10:00 2024 GMT
        Subject: CN=3082010A0282010100C3DEB6B6A3E67B73B540F7FC4B65F45D55525A7893B0938075E1E79972CFD85E2505E53DBA95B9BD82EC06F8606ECE7A1EFEE7E78D5657F5EDF151B2061B1171657FD339E088286315AFEFBEB4ADD27EC7A5A0526EBDA8611C623C869BCBB11A73EC2A7C9C646627DBAFD6985F9312D9CE8F0B4A5EFA35A0A60FCE8A6FB505C6B2489B59B50C51139A756BACB34E862564D5D8C85E89D23E540D090654E9A874016171DE78A0964CFB161F89A5A988DB754AC66E39F30DA43AC596303C9A570DA66B15CECE4161121322450B5FA9D5E4205516E5649A40B69662C2A2848EA3C74D7317C4E086F53CD6867441BFCA4930A9ED4D2741DF636B578AD09D7BE90CE90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:b6:b6:a3:e6:7b:73:b5:40:f7:fc:4b:65:
                    f4:5d:55:52:5a:78:93:b0:93:80:75:e1:e7:99:72:
                    cf:d8:5e:25:05:e5:3d:ba:95:b9:bd:82:ec:06:f8:
                    60:6e:ce:7a:1e:fe:e7:e7:8d:56:57:f5:ed:f1:51:
                    b2:06:1b:11:71:65:7f:d3:39:e0:88:28:63:15:af:
                    ef:be:b4:ad:d2:7e:c7:a5:a0:52:6e:bd:a8:61:1c:
                    62:3c:86:9b:cb:b1:1a:73:ec:2a:7c:9c:64:66:27:
                    db:af:d6:98:5f:93:12:d9:ce:8f:0b:4a:5e:fa:35:
                    a0:a6:0f:ce:8a:6f:b5:05:c6:b2:48:9b:59:b5:0c:
                    51:13:9a:75:6b:ac:b3:4e:86:25:64:d5:d8:c8:5e:
                    89:d2:3e:54:0d:09:06:54:e9:a8:74:01:61:71:de:
                    78:a0:96:4c:fb:16:1f:89:a5:a9:88:db:75:4a:c6:
                    6e:39:f3:0d:a4:3a:c5:96:30:3c:9a:57:0d:a6:6b:
                    15:ce:ce:41:61:12:13:22:45:0b:5f:a9:d5:e4:20:
                    55:16:e5:64:9a:40:b6:96:62:c2:a2:84:8e:a3:c7:
                    4d:73:17:c4:e0:86:f5:3c:d6:86:74:41:bf:ca:49:
                    30:a9:ed:4d:27:41:df:63:6b:57:8a:d0:9d:7b:e9:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C9:6D:AF:54:73:C7:DC:E8:4E:E8:0E:E5:2B:8E:9F:C8:11:7F:7F
            X509v3 Authority Key Identifier:
                keyid:D3:A6:87:E7:CF:C4:F6:B7:A2:D9:FF:9D:CD:5D:1A:7E:18:D2:0C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:e2:2f:77:92:a3:62:ea:28:ae:03:c8:98:80:46:02:43:
         98:d2:98:ef:ea:57:41:11:16:45:7d:98:fe:4c:32:5c:6a:30:
         dd:16:7f:83:86:30:b0:d5:ac:02:98:ec:7e:de:49:6a:f4:e8:
         b3:37:45:63:f5:71:dd:41:c2:d5:cd:68:9d:ff:3e:7b:10:08:
         3f:c9:e5:86:10:34:8e:39:1c:82:06:6f:fa:e7:aa:f3:15:a4:
         1a:5e:b5:40:e6:1d:cd:5c:13:60:6a:03:c5:9b:ac:79:f1:c2:
         5f:f7:ae:1a:ca:39:ae:b5:f4:af:06:ec:88:68:e5:92:36:6e:
         62:e3:65:08:1c:9e:5c:ed:c4:a0:38:b6:d4:22:89:9b:b3:d4:
         e0:17:ea:92:9e:17:bc:af:70:67:cf:ed:04:64:0b:a6:e1:5a:
         6e:74:5a:f1:33:22:2b:12:8e:d2:81:65:08:8e:b3:73:b8:57:
         39:8b:a9:d6:44:c3:e8:61:74:27:fe:ca:3a:9c:b9:53:72:19:
         d5:6b:1e:55:7b:a9:c1:fa:cc:d7:14:14:7d:22:90:7a:7c:c5:
         46:3f:f8:e7:06:c5:66:0b:e2:77:d6:42:38:cc:bf:0e:0d:ae:
         87:a2:91:ee:b8:9c:ad:d7:7b:8a:55:f0:ed:48:53:5c:f6:5a:
         26:8e:41:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----