Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/313A191B06B02446EDEBC87D42685A96816A487A.mft
File:                     313A191B06B02446EDEBC87D42685A96816A487A.mft (raw, json)
Hash identifier:          BWxg0abniDTFNonJGOZgKJFwM+jOZzszaHPBrHWwREc=
Subject key identifier:   95:57:D1:B2:8D:CF:4A:B6:AF:00:F4:D1:7E:17:68:73:AE:54:54:73
Authority key identifier: 31:3A:19:1B:06:B0:24:46:ED:EB:C8:7D:42:68:5A:96:81:6A:48:7A
Certificate issuer:       /CN=313A191B06B02446EDEBC87D42685A96816A487A
Certificate serial:       4ED27805D145D174AB0F240E30989A4B880B0DF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/313A191B06B02446EDEBC87D42685A96816A487A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/313A191B06B02446EDEBC87D42685A96816A487A.mft
Manifest number:          C8
Signing time:             Fri 30 Aug 2024 09:08:19 +0000
Manifest this update:     Fri 30 Aug 2024 09:03:19 +0000
Manifest next update:     Sat 31 Aug 2024 12:23:19 +0000
Files and hashes:         1: 323830343a3564633a3a2f33322d3438203d3e203533303139.roa (hash: GJ/JUCY4RCH62PAZDMkFH7c/j2rtLGA+IK+3TbU0lZo=)
                          2: 313A191B06B02446EDEBC87D42685A96816A487A.crl (hash: fZ1Fx0cGdg4Og2KZ2ADB9i1Gm99ZoMFH+Zu+lRsRW9g=)
                          3: 3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (hash: cSeBFlpY9CR6jqf0BWxXIOIZPyrckABzpdqb8a94xDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:78:05:d1:45:d1:74:ab:0f:24:0e:30:98:9a:4b:88:0b:0d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313A191B06B02446EDEBC87D42685A96816A487A
        Validity
            Not Before: Aug 30 09:03:19 2024 GMT
            Not After : Aug 31 12:23:19 2024 GMT
        Subject: CN=9557D1B28DCF4AB6AF00F4D17E176873AE545473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:7d:9d:75:af:31:59:a8:13:e9:db:d2:da:
                    73:a8:15:b7:6a:fe:a3:63:4b:11:10:31:92:e2:11:
                    ff:48:fc:b3:78:e6:cb:e0:91:70:d4:90:57:82:ae:
                    f6:7e:22:62:25:0b:53:23:f7:b9:a6:a6:65:60:06:
                    63:6b:b7:d4:bc:d6:25:04:c3:05:be:4f:42:82:e0:
                    31:b6:28:7f:92:ce:77:73:89:65:79:5c:fc:90:f1:
                    18:55:af:55:0e:fa:95:1c:e7:c5:ee:6e:94:49:d1:
                    6a:a1:61:c3:6d:aa:ad:69:d7:4a:2a:8d:06:67:22:
                    d3:8a:75:10:e1:6d:42:73:18:8c:39:0e:5f:b6:78:
                    3f:c2:ff:f9:83:ea:04:45:35:1b:74:5a:23:2f:a9:
                    3d:0d:ad:2e:89:0f:64:4f:a8:f6:f7:d8:3b:64:9b:
                    2a:16:5f:34:ff:61:43:27:8b:bd:c7:5f:8f:38:ca:
                    cd:86:b2:36:27:cb:6a:4b:1d:30:ee:fa:99:97:df:
                    39:d6:d1:2e:c7:23:4c:ff:e7:a0:f3:b8:18:28:81:
                    c0:be:25:38:c4:97:85:f3:00:b2:3f:fa:61:e9:19:
                    66:b7:bf:77:85:01:83:2f:68:e9:51:24:36:8e:91:
                    2d:b1:0c:49:9f:0b:43:36:ea:2c:28:5a:9d:32:b0:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:D1:B2:8D:CF:4A:B6:AF:00:F4:D1:7E:17:68:73:AE:54:54:73
            X509v3 Authority Key Identifier:
                keyid:31:3A:19:1B:06:B0:24:46:ED:EB:C8:7D:42:68:5A:96:81:6A:48:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/313A191B06B02446EDEBC87D42685A96816A487A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/313A191B06B02446EDEBC87D42685A96816A487A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/313A191B06B02446EDEBC87D42685A96816A487A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:30:53:cf:9c:85:7f:b5:fb:6e:fc:dd:16:55:f1:b3:ec:6a:
         6d:19:7d:51:7d:3f:44:e9:54:34:b6:7f:7c:d6:2f:a6:7b:92:
         dd:61:13:22:85:f9:55:ad:e1:6f:5f:67:7a:43:b9:23:83:dc:
         c7:d5:ef:ba:0c:1d:4d:40:80:8d:1c:1b:dc:9a:09:75:2b:fb:
         d5:3b:2a:93:31:67:22:1e:5a:49:a0:a9:31:c2:d9:ea:e8:a6:
         d5:40:13:de:f2:bc:db:c8:b7:fd:bb:a0:8d:65:84:c2:07:0f:
         94:07:6b:2e:23:4a:4d:a6:b0:c1:54:e9:01:59:32:7f:62:ac:
         90:bc:b8:cb:70:fa:be:19:aa:55:7f:31:d6:36:ef:37:4c:8c:
         b9:35:55:2e:fe:02:ea:bf:19:59:cc:b6:38:48:fe:ad:56:5b:
         be:28:6c:a9:84:af:bf:a2:35:29:ba:90:df:3e:4b:07:37:ac:
         38:b1:07:65:50:16:f7:48:1f:1e:f2:bc:e6:91:f9:eb:85:88:
         ce:40:6f:62:a4:37:a9:0b:31:f3:c2:3e:1c:a2:71:cf:0a:63:
         38:96:03:00:69:8e:e4:01:4a:8b:b5:c7:ed:3d:af:75:c0:56:
         98:5a:b2:02:70:41:bc:a3:e2:c0:ca:e5:f1:71:cc:db:b8:e2:
         42:79:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----