Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.mft
File:                     D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.mft (raw, json)
Hash identifier:          D0sLarpCVrNjbBW+LjXliXQi7WQ6KijEB/RgPYIOSkM=
Subject key identifier:   3A:C6:A8:73:24:E5:85:5E:43:0D:09:18:B8:E4:66:D4:AC:9A:FE:C4
Authority key identifier: D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Certificate issuer:       /CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
Certificate serial:       027B056A54A93E0AD50EFD1D693AE99152DC7FE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.mft
Manifest number:          0232
Signing time:             Mon 15 Apr 2024 00:00:00 +0000
Manifest this update:     Sun 14 Apr 2024 23:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 00:00:00 +0000
Files and hashes:         1: 3137302e37382e3135312e302f32342d3234203d3e20323636323732.roa (hash: O25dRW63rrnxCwyAeI+7HR7aUj0nryK075OpYyCBtlY=)
                          2: 3137302e37382e3134382e302f32342d3234203d3e20323636323732.roa (hash: euywZ3pLKge8Bx1Dbas5XMcj8gWBBZrN1ClnbuRFP0A=)
                          3: 3137302e37382e3134392e302f32342d3234203d3e20323636323732.roa (hash: 9hq8owrygz/E+Fqayq/rSBSGyFnzZO5VXg5doPv/Ddc=)
                          4: 3137302e37382e3135302e302f32342d3234203d3e20323636323732.roa (hash: MLg6wkfrgyeOqend+jOVeGjRtsm5ME8E4SUMkJsWaAI=)
                          5: D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl (hash: 6E35XT+JmYILuSB36O5A2dYtmq+Q53hE/tlm891MTto=)
                          6: 3137302e37382e3134382e302f32332d3233203d3e20323636323732.roa (hash: 3/ffPZxUvhKm5rFwPCliHfhCQcyXP53zdruXfwPssbw=)
                          7: 3137302e37382e3134382e302f32322d3232203d3e20323636323732.roa (hash: aW6mNUMdyj27TsZu/INBi5io0r4wEJj3pmqIDZfOklo=)
                          8: 3137302e37382e3135302e302f32332d3233203d3e20323636323732.roa (hash: gVGhvTuLc3BEYbRFYapUhpfSXCrzvNlsssdgHTTI6hU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7b:05:6a:54:a9:3e:0a:d5:0e:fd:1d:69:3a:e9:91:52:dc:7f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Validity
            Not Before: Apr 14 23:55:00 2024 GMT
            Not After : Apr 22 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:0f:d6:f1:dc:ef:46:cf:33:7d:b7:57:8a:
                    f8:3a:b8:c7:5f:23:78:2e:69:25:f9:ea:bf:e4:4e:
                    ce:17:75:0b:9d:67:2b:d4:0a:fa:22:a6:4e:46:2f:
                    26:d5:5e:4d:51:a7:6f:e8:75:24:d7:68:20:69:ff:
                    c5:fc:aa:c3:76:c3:aa:ed:80:cc:af:37:0c:2e:cc:
                    f5:4f:d4:eb:38:7b:e2:3e:5a:24:e2:05:a1:65:9e:
                    e3:e0:4a:88:e0:c8:81:13:f9:0e:32:20:32:21:d5:
                    a9:45:ef:91:12:f8:a3:f8:11:60:5c:ac:64:4a:4f:
                    73:b6:99:d4:bd:52:e7:76:06:fe:38:9f:d5:25:e3:
                    36:d1:a4:3f:f0:e4:5f:3a:d6:c0:14:24:7b:9c:48:
                    d9:2a:ff:3b:e1:a8:68:ba:71:91:95:bd:56:6b:f5:
                    5d:07:b6:b9:86:4c:c5:59:fb:fc:79:24:01:ae:30:
                    7c:1e:a5:28:96:35:29:45:e2:85:27:4d:1b:35:5b:
                    d9:e2:9a:35:c3:67:4f:a3:bd:cd:a9:9c:2d:7e:63:
                    6f:55:f5:09:89:84:bb:80:ac:e1:c8:a5:dd:15:e0:
                    07:4b:1f:dd:8f:80:ec:36:e4:b4:e9:79:14:cd:df:
                    ed:36:64:d2:4b:6f:de:4b:8a:e0:d1:7e:89:2b:e8:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:A8:73:24:E5:85:5E:43:0D:09:18:B8:E4:66:D4:AC:9A:FE:C4
            X509v3 Authority Key Identifier:
                keyid:D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:c1:e7:55:a0:27:fc:4e:22:06:c4:36:bf:44:8d:3c:4e:
         19:72:a7:31:e9:f4:de:cd:98:3c:1a:3d:ad:d1:ac:2a:d4:1f:
         66:b2:38:1b:97:9a:ca:3b:1e:0a:96:0a:70:89:a3:e5:4f:50:
         51:21:3a:6d:8d:1d:d5:e9:e1:8c:31:d8:08:36:e6:e5:6e:4b:
         02:86:07:01:43:57:a1:9e:d7:42:8f:97:57:27:40:aa:7c:95:
         9d:51:e4:9f:93:fd:37:eb:1f:7e:72:76:5a:02:e7:08:2e:08:
         01:c8:fc:3d:d5:cc:af:7f:f9:92:4d:dd:52:fe:09:25:fa:0e:
         ed:27:64:91:0c:55:14:cc:de:44:76:17:a2:3e:19:36:a6:3f:
         bd:e0:7a:eb:3e:ea:0e:c8:b0:f6:17:02:76:6f:b2:c7:0e:80:
         88:0b:7e:1e:11:cb:f8:66:a8:c7:10:79:d1:07:9e:70:3b:cd:
         e2:0a:9d:f3:34:80:be:8a:42:7f:b5:1b:e2:5d:8c:92:7c:d5:
         89:da:f7:6c:85:0c:01:51:0c:58:40:25:6b:c4:b3:bb:0d:1a:
         93:09:95:13:8c:f7:98:3b:1a:1f:3a:fb:ec:dc:84:dd:dd:72:
         d8:ef:cc:4f:c6:a3:c7:7a:0b:45:58:4f:82:6b:e6:49:ac:44:
         b6:13:71:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----