Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.mft
File:                     5442614336999E86885B6AC9A40CA8953FC17D75.mft (raw, json)
Hash identifier:          S8E68rPP5GTlRrPc8MfiPsbRC42rS0pU4a0cApawQ+I=
Subject key identifier:   75:DE:2B:07:23:D9:41:CE:DE:FD:19:01:4F:BB:19:CC:C4:39:D7:83
Authority key identifier: 54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75
Certificate issuer:       /CN=5442614336999E86885B6AC9A40CA8953FC17D75
Certificate serial:       4C294383B8E9AA825273D452C38A8045D2B27F2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.mft
Manifest number:          02B7
Signing time:             Mon 15 Apr 2024 00:17:37 +0000
Manifest this update:     Mon 15 Apr 2024 00:12:37 +0000
Manifest next update:     Tue 16 Apr 2024 00:30:37 +0000
Files and hashes:         1: 3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa (hash: IKy6jXlenap3BueR5XCZ9yimgsiXLty5VAoAFjRbXpI=)
                          2: 5442614336999E86885B6AC9A40CA8953FC17D75.crl (hash: aF5KEipHA2oxOl9IxclVIv+JImWj7Yu0Tvk1ZhtMJcI=)
                          3: 323830343a313238303a3a2f33322d3332203d3e20323633343830.roa (hash: xbEzTUJwo9mS7VJE/Az4JMUdiOWg1Td7kU4x6BfqDsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:29:43:83:b8:e9:aa:82:52:73:d4:52:c3:8a:80:45:d2:b2:7f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5442614336999E86885B6AC9A40CA8953FC17D75
        Validity
            Not Before: Apr 15 00:12:37 2024 GMT
            Not After : Apr 16 00:30:37 2024 GMT
        Subject: CN=75DE2B0723D941CEDEFD19014FBB19CCC439D783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:24:df:d8:b3:3a:ea:da:57:72:5b:3a:78:e5:
                    5e:dd:a8:f0:5f:bb:fc:94:f9:56:0e:b3:b5:81:6c:
                    64:1e:68:58:d0:d4:9d:62:f3:36:f0:6c:b6:67:4d:
                    9c:15:aa:9d:a8:8e:92:20:f3:84:ee:1e:e5:8f:10:
                    1e:7a:01:a2:00:fc:6f:44:98:c4:8a:f5:0c:57:51:
                    fc:b8:c6:0f:80:0b:3e:4a:ce:9d:76:0c:75:74:60:
                    87:20:7c:e2:2f:4a:5c:70:58:85:86:c9:80:8d:6a:
                    d7:15:ec:2e:2c:be:b0:01:bd:c8:a0:d9:d3:5a:e8:
                    8d:f6:60:5b:4b:bd:c5:bd:a5:eb:56:4e:89:7c:ee:
                    02:92:49:4a:2f:aa:92:0a:c1:b0:76:fa:1c:dd:b9:
                    e7:fe:b5:73:98:38:23:58:81:c8:99:75:18:a1:dc:
                    a2:a1:4e:70:53:2d:65:eb:a1:f3:c8:84:a5:5c:c1:
                    32:5d:23:69:50:fc:c1:c4:7d:98:29:87:ff:87:74:
                    24:64:73:50:70:27:9a:77:21:4c:07:5c:0d:0e:89:
                    e5:45:67:eb:f9:ce:4b:09:67:ad:12:16:23:7e:b2:
                    f4:99:a9:0d:53:27:66:07:99:cd:e3:3e:95:30:d6:
                    8c:04:5f:76:34:92:bc:55:3c:80:09:ab:f1:97:6a:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DE:2B:07:23:D9:41:CE:DE:FD:19:01:4F:BB:19:CC:C4:39:D7:83
            X509v3 Authority Key Identifier:
                keyid:54:42:61:43:36:99:9E:86:88:5B:6A:C9:A4:0C:A8:95:3F:C1:7D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5442614336999E86885B6AC9A40CA8953FC17D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/5442614336999E86885B6AC9A40CA8953FC17D75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:51:82:0a:b7:4a:77:4c:1d:e7:18:2e:c5:43:d7:20:84:cb:
         52:0a:dc:55:ed:81:be:24:6f:aa:74:ce:fd:c6:6e:dc:ca:d7:
         21:d2:46:9c:bc:24:2e:3d:ae:ef:a8:17:2d:f4:99:64:9c:c1:
         28:2f:5d:9b:2d:1a:ef:50:a6:d9:f6:ff:74:5a:d6:69:2a:d9:
         c7:8c:8a:1b:27:f8:59:d1:95:4b:d5:4e:aa:09:88:12:56:0a:
         a8:83:b6:14:0e:7b:50:b4:7a:17:e9:4a:30:2e:49:a3:fe:2c:
         8d:1f:b9:7d:db:80:97:8b:27:b5:30:61:40:ee:82:38:c4:f4:
         b1:7a:fa:8b:1b:5c:2a:a0:0b:c5:7a:0c:fe:82:32:78:54:ab:
         49:b3:5f:d7:c4:3a:26:52:ce:7a:f5:68:d8:fd:83:23:19:d1:
         1c:cb:29:b0:f7:45:0f:2a:cc:53:f4:12:35:a3:88:a8:01:de:
         04:6d:93:49:9b:00:8b:e8:1a:16:63:2a:a1:8d:13:db:03:c7:
         2e:ce:3b:d4:23:1f:ca:78:04:c3:02:bd:ac:a2:dd:75:56:a9:
         31:31:f1:ee:89:2e:03:9d:cb:a8:60:3a:0a:e3:b2:15:fa:8e:
         18:3f:38:de:f2:7f:11:1c:0f:a6:98:a7:35:52:73:9e:dc:ed:
         98:7a:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----