Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.mft
File:                     2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.mft (raw, json)
Hash identifier:          oAVCF+Kacf6fufd8P/px8S2/Uu8WbnkB+X3CWtRXDnI=
Subject key identifier:   3D:EC:0F:FB:E3:1F:C7:01:6C:DB:F1:4D:CE:7C:15:57:7A:CD:87:23
Authority key identifier: 2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C
Certificate issuer:       /CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
Certificate serial:       2CB2B831A08F67A334BB684A5568FE3682D54EA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.mft
Manifest number:          0163
Signing time:             Sun 14 Apr 2024 20:29:47 +0000
Manifest this update:     Sun 14 Apr 2024 20:24:47 +0000
Manifest next update:     Mon 15 Apr 2024 22:53:47 +0000
Files and hashes:         1: 2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.crl (hash: 2tf1DTu7oXttCOrQN7Y9fh+y+/0O7PV9bXSilbQE8ik=)
                          2: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: yccRn2sYgIynXl1clarTO39mi6d0xjTWFl9d3hfA9y4=)
                          3: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 7C++mQ53skwzfr6YxmDZseP32ifNty8cxQEkt4BB93w=)
                          4: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: pMBiKzq56ZMzBQUw/XStFF75i+w46pgLFNGHhPXIFH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b2:b8:31:a0:8f:67:a3:34:bb:68:4a:55:68:fe:36:82:d5:4e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
        Validity
            Not Before: Apr 14 20:24:47 2024 GMT
            Not After : Apr 15 22:53:47 2024 GMT
        Subject: CN=3DEC0FFBE31FC7016CDBF14DCE7C15577ACD8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:57:5d:54:9a:ef:a9:b6:11:6d:b0:d7:25:
                    40:13:fb:4a:ab:6f:dd:fd:14:65:a2:52:1b:76:f9:
                    31:d8:b8:8a:06:62:05:36:be:75:29:e6:0b:4b:46:
                    84:c5:f0:d1:8d:2e:10:0f:fc:bc:fe:4d:8a:3a:1b:
                    32:f0:09:7d:cc:f1:ff:8f:1d:9a:9a:5e:cb:ec:9d:
                    72:37:12:82:58:41:3a:73:6d:c4:01:bd:e1:e5:77:
                    08:1a:f7:c0:c3:fd:9e:cd:bf:df:33:c7:78:9e:56:
                    15:99:2c:ff:bf:01:5f:3b:82:2e:5c:c1:39:71:a6:
                    fe:ec:88:e7:c5:9f:fe:de:71:ba:d1:c2:61:ba:41:
                    5b:54:e4:99:43:39:3a:7f:29:f0:48:5a:f2:c9:20:
                    72:55:f4:1c:ec:1d:4b:37:31:bb:79:2b:80:d4:d4:
                    05:d2:4f:69:48:e0:d4:a7:0c:a8:31:6f:26:5d:80:
                    1f:72:2d:f1:e4:cc:6f:37:54:2f:48:d0:61:64:17:
                    5c:d1:c4:d5:82:63:3f:75:7e:9c:a0:2a:0d:91:29:
                    46:ba:0f:a1:ef:c2:8a:a1:a1:06:d6:00:83:c3:6d:
                    69:a2:4e:17:88:f1:2e:34:9b:26:c3:ff:43:df:90:
                    5b:c5:8b:68:34:15:c1:9f:aa:cf:9c:40:60:22:96:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:0F:FB:E3:1F:C7:01:6C:DB:F1:4D:CE:7C:15:57:7A:CD:87:23
            X509v3 Authority Key Identifier:
                keyid:2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:07:e7:d6:f5:6a:10:7a:f9:4b:58:b1:2b:c4:47:5b:45:29:
         98:26:23:64:eb:03:69:2d:a9:d7:10:ef:9f:74:be:ca:fb:b2:
         98:91:5a:ae:41:3a:34:d1:08:d8:5b:7b:aa:73:25:78:a0:f7:
         fc:a6:6c:a4:32:c2:af:3f:b8:db:b6:bb:1f:90:bc:0f:59:7e:
         b8:df:41:3a:94:9b:b2:55:93:60:a5:d3:de:d8:3a:2e:db:8d:
         5c:4c:ac:b5:05:8e:00:1c:7a:48:5b:27:73:16:8c:b0:74:12:
         87:d1:5d:e4:d0:0e:4c:99:16:5b:d6:fb:59:08:bd:93:8e:2b:
         dd:6e:09:0f:03:df:02:5b:a9:53:27:cd:c2:b1:ec:cd:ea:41:
         2e:8d:9c:56:1b:a5:41:9a:47:3a:a0:af:8d:88:8a:21:7f:41:
         7b:28:4d:11:2e:7f:5e:06:c6:cd:5c:2c:86:bf:17:b3:98:f4:
         5e:87:90:ce:f7:0a:8b:63:27:90:e3:6e:86:83:26:e6:a3:1c:
         d3:f0:93:8f:a9:bb:af:1f:2b:a1:8e:c8:52:a5:68:b8:6b:b5:
         82:bd:c0:52:17:cf:b8:85:d3:1c:82:0e:d4:b4:a4:04:4c:fd:
         76:51:49:6b:47:ac:73:ff:2d:9a:e3:12:20:e1:6a:5d:5c:26:
         02:23:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----