Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.mft
File:                     BA67A26F29951B044D426A0B6615C66CA1ABE0DB.mft (raw, json)
Hash identifier:          F4m0VNtP6mcJLDZQGS8OwLCN9N4eOEkjchPK3/LZALM=
Subject key identifier:   F4:E2:88:51:1F:3E:F2:54:4D:14:4A:51:3E:74:65:E5:37:9C:3B:30
Authority key identifier: BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB
Certificate issuer:       /CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
Certificate serial:       3592D84918B1773D748FE686BDFED867AA3C6F1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.mft
Manifest number:          18
Signing time:             Sun 14 Apr 2024 20:55:28 +0000
Manifest this update:     Sun 14 Apr 2024 20:50:28 +0000
Manifest next update:     Tue 16 Apr 2024 12:54:28 +0000
Files and hashes:         1: 3230302e31372e39362e302f32302d3234203d3e203130383831.roa (hash: 8KyYB9ZVdkW9yDXeB8MDcZoxAqJps8Sk15Gj0WEvz/8=)
                          2: BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl (hash: ezIyIqhOT+eL8eqc3D3kO/WmQzo5VuNPmTq2l3lNSHY=)
                          3: 3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (hash: n/HJB2mPLesXol48DDJ8cmrlWj+nw58R/Tc8IYFxDbs=)
                          4: 3230302e3233362e302e302f31392d3234203d3e203130383831.roa (hash: weSIZ+nvikhpJVkaCJu4WewOQHXXPkhlnO92tHfvYhc=)
                          5: 3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (hash: G6A6IdVQnBp2P51cKdEDdNw3tKSZSUlJZkKWiYKjJMs=)
                          6: 323830313a38323a3a2f33322d3438203d3e203130383831.roa (hash: qfIXtbovfWEme8W4vNjdwOaYIr/6xKIm/T8BRmyPips=)
                          7: 3230302e3133342e302e302f31362d3234203d3e203130383831.roa (hash: SDEGm6NBgl+Q4omiH7Z6zUknd5aDmNg2VO1UN3Fx1kE=)
                          8: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (hash: RpiWx4cQkt+P+FcRuIyA9H8OCC4TRLAuAjb8/281kP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:92:d8:49:18:b1:77:3d:74:8f:e6:86:bd:fe:d8:67:aa:3c:6f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
        Validity
            Not Before: Apr 14 20:50:28 2024 GMT
            Not After : Apr 16 12:54:28 2024 GMT
        Subject: CN=F4E288511F3EF2544D144A513E7465E5379C3B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:92:51:d7:e2:dc:9f:3d:7e:fe:01:3a:b1:
                    7d:23:ea:ce:1d:dd:5e:36:fb:d9:05:bc:8b:39:73:
                    65:6e:54:a4:da:b0:e3:c3:f4:c3:78:14:ee:26:7b:
                    2a:2c:60:82:4e:7d:8d:3b:be:10:13:93:f5:5c:58:
                    6b:de:bc:98:89:c0:33:81:84:5b:5e:8b:1b:23:4e:
                    60:69:77:c1:ba:74:c7:75:3c:2a:c5:69:86:7f:f8:
                    90:c0:3d:6f:bd:38:fb:25:0b:9d:3c:1a:7d:97:5b:
                    71:41:54:fd:60:e6:b1:d9:7d:5c:85:67:9b:95:f5:
                    c4:9b:87:90:50:30:a9:a5:0b:12:43:31:e1:8c:0b:
                    a6:1d:c2:45:20:e3:27:99:b3:05:7c:14:68:cf:cf:
                    40:a5:1d:4d:20:94:55:c9:d7:1f:0a:37:df:2e:89:
                    7a:66:88:4d:c5:47:dc:86:f3:6d:54:d8:86:98:7a:
                    42:e4:26:1a:09:aa:3e:19:e7:73:37:6c:a4:90:9b:
                    4a:04:6e:a6:c0:c1:dd:71:c9:af:96:5b:ad:c2:45:
                    9e:a1:c2:2e:3a:91:3d:ca:02:29:db:fc:d6:b2:ad:
                    2e:c5:e2:e0:8e:22:de:90:12:47:22:0b:c6:fb:fd:
                    62:46:c6:fe:b0:06:9a:8d:48:2b:23:35:1d:88:78:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:88:51:1F:3E:F2:54:4D:14:4A:51:3E:74:65:E5:37:9C:3B:30
            X509v3 Authority Key Identifier:
                keyid:BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:11:94:be:6e:ce:61:a6:26:25:6c:4a:55:4c:29:02:51:
         e1:13:bd:0a:db:43:3b:64:23:a4:16:05:f4:7c:8d:2a:de:75:
         41:9e:57:2d:83:02:d7:e8:bf:f5:d9:72:ac:e9:1c:6b:27:a8:
         23:d6:7b:ed:4c:13:1b:68:dc:1c:c0:70:9c:aa:5a:d2:bf:b0:
         8a:48:50:e3:5e:a1:49:13:d4:3c:63:48:82:6e:cf:b0:7a:2c:
         13:8f:21:4c:53:db:9c:06:19:7f:13:cc:6b:00:dc:dd:90:f7:
         7d:89:8d:52:11:a1:9b:21:6a:d0:d8:d6:4f:32:36:c2:a8:7d:
         f8:09:d1:88:49:a9:2d:c7:aa:c7:a8:3d:79:4c:1c:46:3d:be:
         2e:12:22:56:63:c2:e3:85:5b:38:69:70:b0:95:d7:d4:3c:36:
         69:8b:1c:03:da:89:5a:04:09:f3:ec:48:9a:71:80:89:63:96:
         b7:b2:fe:dd:f1:2f:d5:b6:c7:98:29:a5:db:f4:4b:95:c7:84:
         78:41:ea:d7:e8:2f:8c:12:d6:96:fd:d9:75:2d:05:e1:40:52:
         f4:00:8e:81:90:62:c8:2e:50:de:9b:73:3e:2b:ee:da:c4:a9:
         6f:c5:74:b5:dd:1c:33:99:95:bc:13:52:8b:b2:43:1b:c2:54:
         fd:d4:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----