Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.mft
File:                     C8336EEDF024BF7C85698838BBD22B1A5E1136B8.mft (raw, json)
Hash identifier:          2QQlxcSPmvduqe8XUMRUX99/+soT2THAl5tRQAGHg38=
Subject key identifier:   48:F9:B1:53:B3:0F:D2:ED:67:EC:15:2C:66:C5:0A:BA:33:8B:BE:9B
Authority key identifier: C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8
Certificate issuer:       /CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
Certificate serial:       2251D1FDAD95CA2A541E61F110966561B217669E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.mft
Manifest number:          05EA
Signing time:             Sun 14 Apr 2024 20:08:23 +0000
Manifest this update:     Sun 14 Apr 2024 20:03:23 +0000
Manifest next update:     Mon 15 Apr 2024 21:29:23 +0000
Files and hashes:         1: 323830343a6639303a3a2f33322d3336203d3e20323633353932.roa (hash: UIDdtcU/czqmWCiI6UwNkJ3A/pNTgwqYHHTGpPanPkM=)
                          2: 3136382e3132312e3132302e302f32322d3234203d3e20323633353932.roa (hash: 49S/5GxuLTCod1RKnRr8z/DpllgitFYPZZf9gfAxbzI=)
                          3: C8336EEDF024BF7C85698838BBD22B1A5E1136B8.crl (hash: /JRHJPC5mALivJOdR2dDmJW5QLCuTL8R5SmHaKACsNQ=)
                          4: 3137372e31302e37362e302f32322d3234203d3e20323633353932.roa (hash: mjgqwNfA2pEZAlBgc3Zs2K93HYtQ3Ik9Zs8CeGSm/yI=)
                          5: 3133382e302e3136382e302f32322d3234203d3e20323633353932.roa (hash: bEhkGwWavaf8E8AMd8jsjFakhcYwQLkDWxRVRKGNeCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:d1:fd:ad:95:ca:2a:54:1e:61:f1:10:96:65:61:b2:17:66:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
        Validity
            Not Before: Apr 14 20:03:23 2024 GMT
            Not After : Apr 15 21:29:23 2024 GMT
        Subject: CN=48F9B153B30FD2ED67EC152C66C50ABA338BBE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:98:4c:77:7a:d2:d6:71:06:24:6c:85:7d:
                    4a:3f:46:a3:f1:87:3a:16:31:d0:80:a6:85:b1:44:
                    88:1a:3a:a8:c7:06:05:07:0a:fc:9e:35:cb:84:29:
                    0e:a3:f3:b1:78:c7:17:f2:d5:e2:63:1e:68:ef:b1:
                    c4:e4:be:51:e4:dd:79:29:c9:cd:e2:ae:13:30:f0:
                    af:ed:a4:e8:49:c1:2a:da:70:be:60:58:d0:bb:62:
                    a7:2b:f5:27:ae:22:9b:16:3b:84:fc:4a:ed:23:16:
                    57:49:7e:40:0d:2b:f8:c1:44:fa:dd:c5:58:ad:3a:
                    68:c2:18:a1:6c:fa:bf:ea:66:86:40:17:24:e8:5f:
                    01:60:c5:ef:c9:09:13:b7:98:56:1a:4e:e6:1a:68:
                    1b:33:db:dc:bc:21:01:c6:9e:23:8a:03:61:bc:9c:
                    ae:45:98:1c:cf:cd:19:fe:13:61:3d:55:17:ac:13:
                    3a:1e:97:c3:ee:d2:fc:06:0c:b5:5c:8a:42:ac:b4:
                    bc:99:ac:6b:e5:12:a9:c6:52:bf:a7:c8:f8:44:d2:
                    0c:42:ca:cc:0c:e4:2e:c3:55:96:10:72:3f:85:63:
                    8c:84:e0:f1:8f:95:c7:7c:61:e3:c0:9b:52:de:63:
                    cf:0a:fa:ea:6d:06:28:61:db:bd:51:ef:b9:50:6d:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:B1:53:B3:0F:D2:ED:67:EC:15:2C:66:C5:0A:BA:33:8B:BE:9B
            X509v3 Authority Key Identifier:
                keyid:C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2e:6f:01:31:90:4c:8d:01:2e:d1:fb:df:a7:d5:7f:0a:92:
         81:20:78:e3:99:e2:1a:a6:ab:98:5b:46:bc:ef:4c:a4:54:17:
         fe:a5:9c:1f:c5:84:7b:79:2e:2b:f5:19:2a:9e:ef:6a:ef:7b:
         0b:e9:38:cc:1e:67:e1:07:5a:97:6c:64:d0:8b:c9:62:f3:84:
         74:17:b6:82:f2:0c:97:59:ad:05:f5:cb:bc:9c:eb:bc:ac:98:
         83:a4:86:72:07:b3:52:4d:9c:da:d1:df:a8:ee:bc:a3:41:2a:
         c0:64:69:d0:5e:2c:c0:70:1b:a1:b9:f0:46:67:4e:e5:28:43:
         5c:d1:e4:46:c5:64:10:34:94:19:72:d9:49:b2:04:8c:d8:49:
         75:7c:50:2f:9a:13:82:43:7b:75:ff:d0:dd:04:6e:c0:24:68:
         ea:19:31:8a:09:44:40:e1:48:05:4c:76:c8:36:00:89:26:1c:
         02:47:c4:ef:67:25:75:4d:ee:f6:a8:7c:a4:f8:c8:02:ab:43:
         b4:d2:17:01:8d:4c:0a:ff:d7:58:83:39:57:ee:60:de:4a:f7:
         eb:18:a6:2f:2f:fe:76:15:0c:70:0b:eb:b5:de:81:bc:fb:91:
         5a:f4:f8:e9:f3:fb:da:20:3f:1e:ed:a6:18:b2:09:63:55:35:
         6b:f7:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----