Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.mft
File:                     DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.mft (raw, json)
Hash identifier:          F6mxFz0PxMyBZBy7wGHB3FkL7Q8F7n0Ysf/dYMzZ82w=
Subject key identifier:   73:8E:C4:6C:4C:B1:93:34:D9:8D:8E:97:F4:17:B8:52:76:08:A4:EB
Authority key identifier: DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF
Certificate issuer:       /CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
Certificate serial:       0210583908B9C1D5B221829D9DEB0971A40B4E13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.mft
Manifest number:          24
Signing time:             Mon 15 Apr 2024 06:01:40 +0000
Manifest this update:     Mon 15 Apr 2024 05:56:40 +0000
Manifest next update:     Tue 16 Apr 2024 07:57:40 +0000
Files and hashes:         1: DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.crl (hash: qrqRZUBOQKp0QV1pKUs0sxQJlYttsV76ZdHs/S/syfY=)
                          2: 323830343a343630383a383030303a3a2f33332d3333203d3e20323636393634.roa (hash: WrRnhR1B1/dTZ0Bn895cDhhCnAqtGoRrv4oHodJj+34=)
                          3: 34352e3232352e3233322e302f32322d3232203d3e20323636393634.roa (hash: z8b18MuUi8Z5iQSwSgNoZ1juWwcaOxMfW3NwxT/IqMY=)
                          4: 34352e3232352e3233342e302f32342d3234203d3e20323636393634.roa (hash: HBWivpwJ5XFKznZgbOp15sgZgh2GaB7idhVjTRF/Bm4=)
                          5: 34352e3232352e3233322e302f32332d3233203d3e20323636393634.roa (hash: BdOYopWx2YQJ7bGwLJytgwVuVFC8fwYcf8C4zMUUxVA=)
                          6: 34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa (hash: WOiumSYXVOnYjWc58DQw+EGpA5o89oOYtB7r8OxOLyE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:58:39:08:b9:c1:d5:b2:21:82:9d:9d:eb:09:71:a4:0b:4e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
        Validity
            Not Before: Apr 15 05:56:40 2024 GMT
            Not After : Apr 16 07:57:40 2024 GMT
        Subject: CN=738EC46C4CB19334D98D8E97F417B8527608A4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:b8:4a:c9:3d:f2:ee:46:d7:e5:4c:d4:3b:
                    a9:e7:4c:52:fd:90:fd:cd:9e:1e:99:d7:56:f1:64:
                    fb:9f:79:cf:af:99:22:35:c9:93:cc:6c:e7:2a:ba:
                    0d:00:24:d0:64:87:91:74:95:72:ee:42:38:9e:32:
                    9d:83:95:78:d1:83:23:56:a1:3f:e6:45:e6:81:04:
                    84:b9:0c:50:39:03:be:94:a8:64:91:8e:97:b1:09:
                    55:be:9d:d2:f1:47:6c:45:31:5a:43:48:23:9c:a7:
                    ca:74:ed:49:dc:a7:85:16:80:1e:76:fe:c2:0d:8b:
                    10:aa:a2:41:b3:0f:6f:f9:fe:be:0c:43:65:66:d9:
                    eb:57:6a:8d:8a:d2:4e:c6:91:70:d3:79:19:03:bd:
                    47:54:ba:fe:fb:2a:7f:10:10:38:b8:c8:c3:a5:3d:
                    15:13:3f:a3:de:28:62:7a:33:29:af:e0:7a:b3:c6:
                    29:60:94:18:e6:47:52:98:88:6d:7d:83:b1:53:17:
                    3e:c2:d9:9d:d9:c4:f6:91:35:e6:40:32:10:6f:ed:
                    9b:99:d6:d3:b8:eb:68:9d:8f:c3:eb:d9:9f:d8:a3:
                    7b:fd:f9:10:0c:56:6b:19:a2:95:28:d0:30:d6:5d:
                    02:b8:14:df:03:cf:98:96:0c:77:d6:95:1e:fb:35:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8E:C4:6C:4C:B1:93:34:D9:8D:8E:97:F4:17:B8:52:76:08:A4:EB
            X509v3 Authority Key Identifier:
                keyid:DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ff:7e:c5:6d:9f:a3:05:da:8c:6d:36:75:cf:e8:37:41:37:
         d3:17:ce:b3:8e:1c:71:d9:69:85:4a:d7:7f:ba:91:c4:53:96:
         31:72:7d:1a:5c:41:b9:38:ec:5f:6d:31:2d:e1:98:7f:b7:e3:
         76:5d:32:5f:30:4b:d1:71:04:3e:25:24:2e:ac:41:74:19:03:
         5d:8c:0d:51:27:9a:ca:16:ef:f7:35:1e:04:39:0d:55:19:1c:
         c5:cb:d9:16:3b:a0:fa:6e:70:39:01:96:28:75:7b:cc:9f:55:
         8d:0d:df:0f:a5:3c:a3:21:50:6c:4e:1c:0b:d3:90:88:bf:68:
         55:1d:f7:f3:a0:3c:6b:84:a2:4e:74:e8:6c:8f:2f:ab:40:20:
         0b:c7:3f:18:2d:1c:ff:b1:dd:44:3b:b0:bb:56:fd:4b:c1:cc:
         fb:18:85:f7:2e:f0:8d:4a:34:06:46:12:a7:b4:d4:38:e0:53:
         b5:47:74:64:dc:6b:64:39:f9:71:06:dc:9f:98:57:b9:76:75:
         33:d6:4f:d4:fe:2f:88:41:87:29:ac:c8:cc:0a:77:94:c9:c2:
         6c:01:b5:b4:3f:79:ae:8d:06:fc:11:6a:8d:cf:11:78:2c:69:
         c6:3d:f8:7a:3d:67:f6:90:06:2b:19:18:43:13:47:ec:2e:03:
         4b:16:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----