Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.mft
File:                     255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.mft (raw, json)
Hash identifier:          fmhtHfXOLjOnHMbmkoChcmOdujri3e3a/hZo8sYUBE0=
Subject key identifier:   B2:E6:59:01:E2:F4:B9:ED:21:69:94:95:32:BA:2D:50:4B:9D:FD:DE
Authority key identifier: 25:55:14:29:2E:08:C6:C3:9E:1D:BD:7F:DA:B9:4F:6A:E9:DF:99:0E
Certificate issuer:       /CN=255514292E08C6C39E1DBD7FDAB94F6AE9DF990E
Certificate serial:       41E17070E696980C9ACF059BD13F14E28003F410
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.mft
Manifest number:          023B
Signing time:             Mon 15 Apr 2024 11:11:25 +0000
Manifest this update:     Mon 15 Apr 2024 11:06:25 +0000
Manifest next update:     Tue 16 Apr 2024 12:41:25 +0000
Files and hashes:         1: 255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.crl (hash: 1DtvJoXXC/ju7ON0HOlCAR+GDplDwIP6EoOqYG+mMr8=)
                          2: 323830343a323037383a3a2f33322d313238203d3e20323634343932.roa (hash: TJcqj8lAEg30MRw6gB3W0/ZhAhNut8wEA0YqaC+kZq8=)
                          3: 3133312e3235352e3138342e302f32322d3332203d3e20323634343932.roa (hash: YSPoBG44LdkjtWil7NrpAJiRaoB2zGSuryrwhoV8Cuw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:70:70:e6:96:98:0c:9a:cf:05:9b:d1:3f:14:e2:80:03:f4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255514292E08C6C39E1DBD7FDAB94F6AE9DF990E
        Validity
            Not Before: Apr 15 11:06:25 2024 GMT
            Not After : Apr 16 12:41:25 2024 GMT
        Subject: CN=B2E65901E2F4B9ED2169949532BA2D504B9DFDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:f8:02:d0:59:2b:47:95:de:41:da:c9:01:
                    33:25:2b:89:df:bc:63:26:8f:72:04:af:20:30:86:
                    5c:14:3a:84:5a:a3:f4:fb:63:df:aa:2f:5d:72:4b:
                    1e:1d:6b:91:5d:79:f3:d7:b2:0b:2f:fd:54:4f:40:
                    02:c3:57:5b:56:09:36:ae:86:27:e6:50:76:8c:10:
                    a9:bc:79:b9:0f:04:c3:4f:ca:46:80:1a:87:cf:3d:
                    9f:07:8e:8e:a5:c2:9f:d4:a7:9c:f8:df:ae:31:0e:
                    2c:0d:d9:d8:80:1e:d8:a1:a1:e1:52:2f:6b:c4:88:
                    3e:6b:fc:46:6c:75:37:54:44:3d:c8:db:1f:7d:7d:
                    12:c9:41:73:2c:1d:00:f7:31:9f:9c:b5:e6:83:24:
                    23:e6:f2:27:f3:7a:b8:62:1f:57:00:4d:30:1e:12:
                    e7:bc:32:0e:d5:a1:58:d8:11:79:db:84:0e:5e:82:
                    68:07:ae:4d:d4:48:e7:28:0c:4f:64:1d:b6:8e:8a:
                    63:a7:35:e0:09:fc:41:f2:f4:17:42:60:fa:7f:c9:
                    33:45:5d:c0:55:d5:40:57:ad:04:d9:ee:aa:3f:33:
                    b2:b7:fe:a9:ae:b9:f8:69:3f:c4:3d:1e:af:3d:0d:
                    a3:12:7a:a7:05:e3:d6:92:fe:f7:5d:7c:e6:62:ed:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E6:59:01:E2:F4:B9:ED:21:69:94:95:32:BA:2D:50:4B:9D:FD:DE
            X509v3 Authority Key Identifier:
                keyid:25:55:14:29:2E:08:C6:C3:9E:1D:BD:7F:DA:B9:4F:6A:E9:DF:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bq699JJdroUQEEdyd8t8dJ4yjT6Ujnkdnx7bzrZaFvpc/0/255514292E08C6C39E1DBD7FDAB94F6AE9DF990E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:49:b7:b7:e8:a2:23:f4:15:32:d2:8b:ff:d3:2c:41:9c:2d:
         60:13:55:1e:57:f0:bb:8f:a0:06:bc:84:59:0d:52:45:4d:7e:
         59:fb:19:15:02:85:be:ff:3a:87:3a:a2:59:27:96:3d:50:b9:
         5c:ac:ab:25:a9:0e:b2:6b:55:54:c6:f7:c5:e1:db:7c:f7:a8:
         86:c6:9f:5a:c8:aa:43:de:90:f4:51:86:e8:8d:08:74:aa:e8:
         60:31:a3:96:14:49:0c:a0:9a:e0:d7:18:0f:44:4b:d4:53:9d:
         a9:66:a1:1a:77:a4:59:c9:38:a7:0b:cb:26:06:2b:16:c0:a7:
         d1:46:01:b6:59:0c:06:55:23:34:f6:c1:6c:f5:34:a2:89:9c:
         17:e7:1a:f7:70:8e:ce:e6:09:d2:a7:e2:a2:10:1f:f3:9e:bb:
         ae:03:f3:e2:ee:fd:41:8f:d9:39:4c:37:de:50:50:8b:62:69:
         95:c0:41:a5:91:60:02:b3:7f:5e:b2:b9:a7:d2:f7:e8:00:64:
         2c:85:a5:90:f7:cc:c4:b9:8f:5f:ce:b9:5e:40:7c:67:52:67:
         21:1e:39:73:30:c3:90:da:df:28:a5:4e:8f:99:66:78:e5:16:
         49:2c:aa:27:68:fe:d8:5d:76:e6:9d:9c:6d:3d:00:df:9d:da:
         2f:77:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----