Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.mft
File:                     047373399CFBEE82DEED0368B29F232D682D13E1.mft (raw, json)
Hash identifier:          ipJAdBJrYJQxfSpny4gBmWqnQYQjHLJN490dWm1U1uU=
Subject key identifier:   B4:2C:EA:B9:07:4F:47:64:E0:34:B7:6E:CE:64:F0:5F:A7:30:32:F8
Authority key identifier: 04:73:73:39:9C:FB:EE:82:DE:ED:03:68:B2:9F:23:2D:68:2D:13:E1
Certificate issuer:       /CN=047373399CFBEE82DEED0368B29F232D682D13E1
Certificate serial:       62E01FFA27E690F4F6BE91B6450AAF303AAC9039
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047373399CFBEE82DEED0368B29F232D682D13E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.mft
Manifest number:          1C
Signing time:             Wed 24 Apr 2024 14:27:54 +0000
Manifest this update:     Wed 24 Apr 2024 14:22:54 +0000
Manifest next update:     Thu 25 Apr 2024 16:14:54 +0000
Files and hashes:         1: 047373399CFBEE82DEED0368B29F232D682D13E1.crl (hash: U7YdvAfKyuDAiRcWhi3kJiZrSxCgtVfxvCu+4FrtHA4=)
                          2: 3230302e3132342e38342e302f32322d3332203d3e20323730323734.roa (hash: WVklCwxcuMLVghj1SzoZor/7aTOhMWelOToPUGkqbcI=)
                          3: 323830343a363938303a3a2f33322d313238203d3e20323730323734.roa (hash: R2U3khC64xK4nYDOtFrYmzD7xknRt5onoK2EtSojB4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e0:1f:fa:27:e6:90:f4:f6:be:91:b6:45:0a:af:30:3a:ac:90:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047373399CFBEE82DEED0368B29F232D682D13E1
        Validity
            Not Before: Apr 24 14:22:54 2024 GMT
            Not After : Apr 25 16:14:54 2024 GMT
        Subject: CN=B42CEAB9074F4764E034B76ECE64F05FA73032F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:b4:91:91:7c:00:d5:a3:ed:bc:c2:43:50:
                    0f:48:77:3c:91:7a:19:be:eb:bb:db:32:1e:dc:40:
                    2b:d9:1d:43:cf:54:cc:64:bd:52:1e:3f:6b:9e:ef:
                    75:25:5c:e1:64:55:c1:0b:ed:7e:d2:1c:2a:f2:2c:
                    d1:55:3b:56:dc:7e:73:9f:96:45:25:7f:4e:0d:35:
                    16:eb:2d:89:76:87:e0:fa:15:74:25:f3:f8:d2:b2:
                    b0:f3:51:22:9f:b6:41:48:6c:2f:7b:9e:cf:25:bd:
                    0b:7c:fd:7e:c8:4a:61:d5:3c:dc:a5:b4:78:e4:d8:
                    1a:5d:7b:95:92:43:12:00:b1:f2:04:b3:0a:5f:89:
                    9b:4d:b8:46:93:b9:a3:23:7d:f0:0c:41:da:3b:69:
                    7f:6c:4b:75:82:eb:d1:0e:5b:96:a2:45:fb:e0:01:
                    01:d0:18:23:3d:3c:aa:eb:ba:65:c6:34:86:2b:16:
                    8c:dd:69:ae:bf:68:b3:5d:72:24:69:18:c3:c2:e9:
                    b6:fc:57:1d:3a:c1:a3:12:fd:eb:f5:e7:59:45:b8:
                    d2:02:5a:e9:9f:d2:23:99:22:52:6f:02:c5:7c:2e:
                    9b:e1:35:ba:3c:35:95:41:55:01:7a:ed:6c:cd:e2:
                    12:80:78:e9:44:61:9c:be:1e:e2:fa:83:6b:73:a3:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:EA:B9:07:4F:47:64:E0:34:B7:6E:CE:64:F0:5F:A7:30:32:F8
            X509v3 Authority Key Identifier:
                keyid:04:73:73:39:9C:FB:EE:82:DE:ED:03:68:B2:9F:23:2D:68:2D:13:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/047373399CFBEE82DEED0368B29F232D682D13E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/1/047373399CFBEE82DEED0368B29F232D682D13E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:d6:0a:81:88:7d:ec:2c:69:b0:3c:ca:dc:77:48:30:eb:
         30:b6:04:6d:52:0e:ae:4f:b2:69:6c:6f:7d:9c:05:ce:d8:df:
         52:f6:67:42:ef:2e:71:29:27:1d:91:e0:5b:83:48:d5:c3:9d:
         f4:d3:8f:7a:71:30:ee:4d:92:3d:96:1b:3b:0d:67:ab:21:87:
         41:67:23:50:c9:0b:4d:f2:0f:e5:d8:ee:e2:df:82:bf:1b:4a:
         dd:81:58:4e:ee:41:33:99:85:01:e7:22:cc:d4:90:97:de:18:
         98:49:50:66:30:6e:2a:ac:8a:33:48:c1:c8:14:ba:58:5b:c4:
         c5:01:00:78:22:e0:18:05:81:02:3b:bb:83:e8:d8:f0:54:9e:
         82:84:e8:52:ef:ce:d5:fb:89:a8:1a:44:6c:30:42:16:29:37:
         73:e8:cb:a1:5e:60:b1:51:b6:4f:c6:bb:75:91:f2:8c:6f:eb:
         32:84:2a:a3:3f:7c:e8:22:34:5a:57:a4:ee:92:e8:51:d8:a5:
         d4:50:16:95:a9:8a:47:12:09:20:2f:09:9d:e8:94:ae:49:fd:
         50:86:0f:28:65:d2:b0:ac:4f:4b:2f:2a:1d:f6:32:85:d7:a8:
         65:df:a2:7e:e5:04:4e:04:7b:58:22:18:4e:ea:54:1a:f0:7f:
         b0:fc:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----