Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.mft
File:                     0D25620AE740DFCD9F67E9941A6F9DF08938B501.mft (raw, json)
Hash identifier:          FVDH2FmU3cOMp4k0nGvq4Al2XnKPNbuwZmiUvv4YK44=
Subject key identifier:   EE:08:48:C9:77:6A:ED:8A:21:04:1C:75:65:0A:56:66:59:E1:F0:8B
Authority key identifier: 0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Certificate issuer:       /CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
Certificate serial:       2500B03F895B492B070028624C1983683704D645
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.mft
Manifest number:          0272
Signing time:             Mon 15 Apr 2024 06:10:11 +0000
Manifest this update:     Mon 15 Apr 2024 06:05:11 +0000
Manifest next update:     Tue 16 Apr 2024 08:01:11 +0000
Files and hashes:         1: 0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl (hash: +bsHtUHUerrRFnPOn75n+qnaO2Jwv4VbROU1dSLj86Q=)
                          2: 323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa (hash: 1lzgWoH2uUfTgMXFjLvGhVQ7AkpDIpUN1doHD5hybeI=)
                          3: 3138312e3232342e35322e302f32322d3232203d3e20323636333132.roa (hash: HwXMJPwFzgkMMmHtgv8hC2WHFx73WCtYcO1zyp/2jTM=)
                          4: 3137302e3233382e35382e302f32332d3233203d3e20323636333132.roa (hash: poLI+KyP10e1u5AlLsE/M7O3m+y/kLtq4GhJQ3SbGm0=)
                          5: 3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (hash: ZGdRMETrNonPgcqr+sJ/HpPYCt2oC+fv3j2VNbJhGVo=)
                          6: 323830343a333565303a3a2f33362d3336203d3e20323636333132.roa (hash: o+xPKilwazzIj4FLjZ7NUCSsjmk3fJMSkrWTxwHY8nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:00:b0:3f:89:5b:49:2b:07:00:28:62:4c:19:83:68:37:04:d6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Validity
            Not Before: Apr 15 06:05:11 2024 GMT
            Not After : Apr 16 08:01:11 2024 GMT
        Subject: CN=EE0848C9776AED8A21041C75650A566659E1F08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:e5:2f:a9:4b:49:1a:95:49:a6:9b:26:f3:
                    48:b2:d7:59:1c:43:f3:e3:c9:69:09:88:31:ff:81:
                    39:b3:97:4e:b1:a0:53:50:35:6e:8b:6d:f4:2e:0f:
                    cd:d4:82:c5:2b:ad:ac:86:43:2f:72:46:7b:0d:ce:
                    81:56:bc:b3:5e:a0:ad:23:fd:b6:02:62:63:e3:64:
                    23:1f:fa:df:6f:15:0c:6b:0a:18:7b:f4:b3:b9:37:
                    28:5b:86:b9:b9:e8:67:40:7f:70:3d:e6:9d:9d:3e:
                    38:63:fc:b9:04:e5:c2:eb:15:98:b9:d2:7d:18:97:
                    e2:51:33:5d:f3:fe:7b:3f:13:40:6e:1e:c5:0f:b2:
                    9d:60:95:6f:f8:5b:b5:7c:87:72:da:4e:fe:77:5f:
                    2f:dc:1b:9e:0f:d5:68:ad:a8:ba:b0:1a:ba:19:51:
                    84:6f:71:56:9f:78:da:16:b2:44:c1:9a:66:c3:a7:
                    c9:f6:3f:99:c8:87:14:9c:0c:77:36:a7:12:ad:a5:
                    b6:bc:64:27:84:7e:81:8a:32:e6:d6:59:93:57:77:
                    e6:e4:a4:88:92:8d:71:9e:2a:c8:77:b2:94:79:67:
                    fd:87:b4:23:d2:d7:fe:91:31:78:51:bf:90:ab:da:
                    e6:c9:ea:84:51:0c:ca:e9:4c:5a:c4:b0:bf:90:03:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:48:C9:77:6A:ED:8A:21:04:1C:75:65:0A:56:66:59:E1:F0:8B
            X509v3 Authority Key Identifier:
                keyid:0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:ec:f1:a4:ed:49:76:0c:15:47:91:80:85:d1:4f:4b:b9:
         23:79:a7:c2:58:a8:62:89:2a:94:32:73:d1:e4:31:01:a8:8a:
         c3:1a:d2:6f:30:e0:be:6d:99:29:e1:ae:28:f6:bf:d1:29:36:
         47:bf:73:31:34:23:af:f6:f5:9c:11:3f:62:39:d0:35:f2:08:
         94:d9:0d:7b:71:6a:b1:4f:62:de:21:93:76:7e:b0:6a:7f:25:
         8f:bf:73:15:f2:ea:31:e7:80:f1:3b:c4:85:48:19:99:98:5e:
         6a:4f:f5:74:29:79:27:b4:8a:9d:08:b6:b8:e4:9c:2b:25:0d:
         23:55:26:cf:b8:ed:e6:bc:c0:c3:1b:38:12:56:5c:eb:28:26:
         45:59:62:24:a3:22:d3:ad:b2:f8:fc:44:d5:dd:5e:1c:1e:ca:
         ab:cd:eb:3d:87:4d:1b:34:2c:3a:e4:f6:d1:46:e6:3d:25:e7:
         9a:d8:87:0b:28:c7:9b:8a:38:c4:3c:f4:8a:ad:be:d6:69:7c:
         fe:64:11:3e:2d:22:9e:d3:aa:87:67:67:9b:fe:99:b3:88:96:
         9d:1e:23:f5:5b:13:1e:f1:79:d5:cb:0b:b9:a5:90:b3:54:25:
         1d:5b:31:7e:b8:83:a3:e5:90:3f:31:ee:7f:00:86:00:e7:22:
         14:02:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----