Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.mft
File:                     3B650AE130217DC191EA44A022BABF2EECE6BA37.mft (raw, json)
Hash identifier:          yGPnffjIMiN1Wejh1FTC3l2UTg5h27RnKrN+3GOrgwI=
Subject key identifier:   37:DF:19:2A:83:DF:F4:77:3B:1B:3B:B0:7C:7E:9D:D3:45:0F:C3:3F
Authority key identifier: 3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37
Certificate issuer:       /CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
Certificate serial:       061C93BBEEBFC00F784D974BDB7306347A766B43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.mft
Manifest number:          05AC
Signing time:             Sun 14 Apr 2024 23:02:51 +0000
Manifest this update:     Sun 14 Apr 2024 22:57:51 +0000
Manifest next update:     Tue 16 Apr 2024 02:45:51 +0000
Files and hashes:         1: 3138392e32382e302e302f32302d3234203d3e203238323739.roa (hash: IMnivhHC4rpq7b6pvR3sXR4xOLBzydLAdq0hoLtJNRM=)
                          2: 3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (hash: 4T8wH0yOOJaWi99CPHK4j8V4xB3ZyIXpHX3ERRNazXk=)
                          3: 3B650AE130217DC191EA44A022BABF2EECE6BA37.crl (hash: NO5aA8HDBSoBtkBFco74FEfc7OkSUJcJ1hL97QcTWA4=)
                          4: 3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (hash: wASGt3k20ajmXs0gaqx6PthtMzFNXvq2qx6CjcPi8vU=)
                          5: 3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (hash: fi9xa0WGEEuYfumeY+EOF+nRQHTb9VAZ3HG4pNf037M=)
                          6: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (hash: XUVcojOzqu/oxShVjZDv7d1OFZWjheRYjqblou285bQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1c:93:bb:ee:bf:c0:0f:78:4d:97:4b:db:73:06:34:7a:76:6b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B650AE130217DC191EA44A022BABF2EECE6BA37
        Validity
            Not Before: Apr 14 22:57:51 2024 GMT
            Not After : Apr 16 02:45:51 2024 GMT
        Subject: CN=37DF192A83DFF4773B1B3BB07C7E9DD3450FC33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:f9:50:e9:8d:bd:90:99:54:ea:ea:c2:9d:
                    d2:de:ba:b0:9b:d2:84:59:34:84:0f:f9:4a:22:6c:
                    b6:9d:62:19:80:db:6e:f4:02:48:a6:c5:bf:a1:bf:
                    da:50:b2:eb:70:62:c7:24:80:a0:a8:64:3b:18:55:
                    3f:64:04:b8:52:71:68:00:ac:b3:3e:d6:35:38:4d:
                    92:21:e9:96:a8:5c:1c:52:a8:e8:d6:f7:d8:aa:e7:
                    42:cd:49:c7:c8:f1:83:43:3f:fa:11:c9:13:97:54:
                    40:80:f4:94:c4:4e:74:44:59:d1:d0:45:d0:6b:1c:
                    94:75:25:6f:17:b8:89:ad:f6:e5:9f:6b:9d:a4:b7:
                    92:ec:3e:a9:f3:12:ad:42:b2:f1:17:53:5d:d7:2d:
                    39:a3:1d:2c:71:8a:3d:f0:1f:46:f6:6f:5a:ba:ee:
                    b1:e1:f8:c6:ca:ef:97:dd:28:36:eb:0c:7b:2d:61:
                    b0:35:0f:71:20:87:f7:68:61:6d:6e:0a:de:bd:5f:
                    1c:4c:1e:ff:8a:b8:d1:4b:45:99:87:75:f1:63:64:
                    ef:7c:2a:49:8e:7d:8d:41:01:54:0c:7b:72:fd:5e:
                    8f:01:7e:c9:48:3d:e6:25:5b:9b:ee:ff:c4:94:18:
                    a4:fc:f1:33:b2:28:2c:8d:05:d4:9d:9e:9d:48:84:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DF:19:2A:83:DF:F4:77:3B:1B:3B:B0:7C:7E:9D:D3:45:0F:C3:3F
            X509v3 Authority Key Identifier:
                keyid:3B:65:0A:E1:30:21:7D:C1:91:EA:44:A0:22:BA:BF:2E:EC:E6:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/0/3B650AE130217DC191EA44A022BABF2EECE6BA37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:84:c4:ff:bf:a7:ad:4a:05:f1:76:5d:76:24:cd:50:46:
         24:1f:c0:ba:47:d0:41:52:3f:3c:8b:c0:75:e4:e2:00:8e:89:
         f4:61:25:ea:42:99:9a:3c:53:95:8c:cb:e5:c1:e7:7d:3e:52:
         14:7f:c7:11:bb:70:b7:dc:61:a4:18:e8:96:b6:02:85:db:82:
         bc:96:70:10:b8:67:b3:ed:73:2d:f5:be:c5:83:8d:9a:83:e3:
         be:a1:d1:b9:4e:b0:40:e0:b1:4d:52:fc:e4:95:f3:bf:4d:2e:
         0b:f3:3f:82:d1:92:60:9f:66:8d:11:06:16:9e:17:2e:1e:22:
         95:69:3c:3e:f2:0d:bb:dc:da:87:72:ee:54:b5:23:7a:2a:3e:
         8f:21:c1:53:b6:1c:71:d3:a9:7e:f3:1d:a2:c8:38:38:21:f8:
         5c:3b:f4:44:c2:24:f2:9c:71:30:ae:e9:e5:49:3d:21:ef:6d:
         d5:0e:0e:b4:c5:64:c8:ef:fc:7e:30:4c:b4:e0:04:f1:48:fe:
         56:aa:87:14:f8:18:2f:65:2b:c9:5f:90:88:06:cd:4d:4e:f2:
         97:74:8a:03:95:07:c9:29:a7:70:e9:07:50:9b:a9:c6:63:04:
         4b:10:78:f7:c9:8f:35:41:b3:d6:54:bd:98:ba:02:fc:ee:ee:
         fc:23:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----