Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/D552E799518BE11EB398BA00E9BDD3127A582632.mft
File:                     D552E799518BE11EB398BA00E9BDD3127A582632.mft (raw, json)
Hash identifier:          HfGcnsmGBpiuOnaY9/myIyG9A/g018eXd3ZdvxdxCbk=
Subject key identifier:   D3:A3:88:43:97:B7:6B:95:49:6E:23:9A:73:32:29:55:22:59:04:BA
Authority key identifier: D5:52:E7:99:51:8B:E1:1E:B3:98:BA:00:E9:BD:D3:12:7A:58:26:32
Certificate issuer:       /CN=D552E799518BE11EB398BA00E9BDD3127A582632
Certificate serial:       783CC1D3AFEB90F0B43F931DEA17ECC6156A541E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D552E799518BE11EB398BA00E9BDD3127A582632.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/D552E799518BE11EB398BA00E9BDD3127A582632.mft
Manifest number:          4B
Signing time:             Mon 15 Apr 2024 03:05:49 +0000
Manifest this update:     Mon 15 Apr 2024 03:00:49 +0000
Manifest next update:     Tue 16 Apr 2024 05:37:49 +0000
Files and hashes:         1: 3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa (hash: nDvP7WcZqX+LluJm3P87J/Y1IXKaxywtlU0JuE6BiX0=)
                          2: 323830343a326239343a3a2f33322d313238203d3e20323635313631.roa (hash: ydPwgt84I/sGZ6xvCe/7es3Re4nEGhZKSCFRSJssssw=)
                          3: D552E799518BE11EB398BA00E9BDD3127A582632.crl (hash: 3nItAWLWAuUeQ81OS53vI6Sln7A1EoMSGkmOzrKqSXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3c:c1:d3:af:eb:90:f0:b4:3f:93:1d:ea:17:ec:c6:15:6a:54:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D552E799518BE11EB398BA00E9BDD3127A582632
        Validity
            Not Before: Apr 15 03:00:49 2024 GMT
            Not After : Apr 16 05:37:49 2024 GMT
        Subject: CN=D3A3884397B76B95496E239A73322955225904BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:a0:89:36:81:83:fa:96:40:60:fb:0e:f0:
                    f5:dd:fe:cb:6d:9d:2f:dc:14:67:6f:7e:b0:f3:66:
                    3b:e0:da:61:37:59:50:ff:20:84:73:62:fd:af:36:
                    f0:ed:1f:aa:67:5f:e1:0b:3b:4f:b4:94:39:d5:52:
                    2f:25:44:e4:66:d7:79:f3:8e:48:89:47:09:4e:6b:
                    44:07:04:e0:b8:64:32:9f:15:b1:4d:86:8c:b9:6e:
                    23:27:65:dd:2d:c9:8f:94:32:6d:0a:7d:11:f0:11:
                    bd:dc:3d:97:3e:8b:66:01:8e:38:30:21:75:5a:94:
                    8a:c6:b0:e1:5f:af:ed:a5:c7:3b:05:f8:d1:06:e6:
                    df:80:12:2d:ba:46:99:f3:d8:55:bc:fc:3e:13:94:
                    a0:26:f2:3e:c5:32:d7:ee:5e:be:78:97:f7:79:c6:
                    37:94:60:63:99:4d:70:81:2a:80:17:c0:44:03:8d:
                    9d:7e:4d:5f:5d:15:71:93:1b:e5:dc:e3:fd:88:4f:
                    dc:5b:3a:61:73:ce:d0:b8:6b:0b:aa:63:aa:6b:4f:
                    6d:88:ca:c5:01:5c:09:18:c2:6e:9e:eb:8c:3b:0b:
                    33:9c:2b:56:19:1e:67:22:69:13:5c:71:0f:ca:e1:
                    91:c1:1c:ef:d3:12:35:aa:fa:36:b0:5b:2e:9b:1f:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:88:43:97:B7:6B:95:49:6E:23:9A:73:32:29:55:22:59:04:BA
            X509v3 Authority Key Identifier:
                keyid:D5:52:E7:99:51:8B:E1:1E:B3:98:BA:00:E9:BD:D3:12:7A:58:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/D552E799518BE11EB398BA00E9BDD3127A582632.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D552E799518BE11EB398BA00E9BDD3127A582632.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/D552E799518BE11EB398BA00E9BDD3127A582632.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:40:48:85:40:dc:a5:d3:2c:ce:b0:ce:2f:e1:90:5d:09:46:
         e8:c0:a4:26:ff:1b:bd:56:a2:36:eb:14:51:23:a2:0a:a9:ae:
         c1:9e:f4:ef:6a:35:ac:9d:b9:40:fe:62:21:e6:23:47:bb:7c:
         9f:6f:bf:c9:a5:a2:00:1f:bc:9d:b9:c3:95:0e:8c:8d:06:51:
         0b:3d:a7:20:fd:d4:3f:e1:7f:0e:1f:35:de:40:4d:15:47:20:
         6e:3f:05:f8:32:85:b5:b8:df:9f:19:1b:f5:b7:94:35:3e:1b:
         d5:34:5a:97:e8:83:86:31:d9:a3:69:00:b3:8d:5e:9d:3d:37:
         bf:4a:b8:db:55:dc:7f:f1:1c:3b:08:c6:6b:64:ba:87:3e:3d:
         d1:6a:f2:7f:a5:8f:ee:16:27:fa:21:d2:af:49:0b:8a:88:d4:
         a4:fc:77:a8:be:40:35:e9:5f:ee:64:61:b2:25:61:ab:21:99:
         49:53:36:39:c5:da:e0:a0:47:17:ca:f4:b1:4a:b5:f5:19:26:
         5f:03:ea:00:26:b5:95:7f:ff:47:03:67:09:b3:bf:ca:11:61:
         67:3a:80:9c:3f:2b:e7:25:b7:b2:f0:8d:3d:58:29:da:fc:a9:
         12:5e:5a:80:a7:ec:aa:b7:04:5e:65:d6:4b:0d:6d:00:21:14:
         b0:08:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----