Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.mft
File:                     B016900AD234CF99B5077C525DF4FFE7A750EAB2.mft (raw, json)
Hash identifier:          uPPc/KGOJG1sDctvOAfV9XD2VMCzp/EVuqWfwfhTkKg=
Subject key identifier:   F2:30:D2:23:87:3A:1A:64:A5:75:E3:C9:CA:1C:53:6E:E1:94:60:7A
Authority key identifier: B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2
Certificate issuer:       /CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
Certificate serial:       4B62AD242A6763B8007302E52AB8EBBE06E8B116
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.mft
Manifest number:          0248
Signing time:             Sun 14 Apr 2024 16:03:47 +0000
Manifest this update:     Sun 14 Apr 2024 15:58:47 +0000
Manifest next update:     Mon 15 Apr 2024 19:50:47 +0000
Files and hashes:         1: B016900AD234CF99B5077C525DF4FFE7A750EAB2.crl (hash: Zmgnw6t158e+xmiVz2VQJ90j31QR0EsLdIGn3N7K3Z0=)
                          2: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: ilfPegDoanLceFWTihsZfSLEy9vTRuvpS+6K+uaHYxU=)
                          3: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: VGlM6QV8rSttppiFHRnqAo+Yr5ZtyEMzuwIEAcBPAUE=)
                          4: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: 1JZr6ZpkTCvxQndBomjqBGw1TaH/3poETEOR1D+KZ1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:62:ad:24:2a:67:63:b8:00:73:02:e5:2a:b8:eb:be:06:e8:b1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
        Validity
            Not Before: Apr 14 15:58:47 2024 GMT
            Not After : Apr 15 19:50:47 2024 GMT
        Subject: CN=F230D223873A1A64A575E3C9CA1C536EE194607A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:a8:dd:ca:f5:00:20:92:d2:93:d9:32:7c:
                    29:fd:1f:02:ed:f7:e0:52:cf:49:74:b1:e7:0e:9e:
                    ff:b2:1b:5f:54:92:b4:5f:63:97:d6:39:94:0a:55:
                    48:cb:f4:56:0a:e0:2f:5b:2f:82:13:6a:cc:07:6e:
                    6c:9e:0c:23:de:33:f0:81:7e:90:04:0c:e5:c0:a9:
                    3f:64:00:1e:6d:ed:bc:ee:e0:54:4e:cd:a7:24:cb:
                    4f:f3:6b:e5:ab:49:2d:7e:f0:3b:af:80:f0:00:a1:
                    c1:8c:a6:37:71:9e:c0:d2:68:bf:ae:8a:7e:2a:bf:
                    8a:00:d4:ef:1f:89:dc:d0:f2:23:6a:a7:4e:6b:8a:
                    39:0f:ab:45:71:20:b9:54:eb:d5:cd:57:ae:0d:af:
                    0b:44:7d:54:63:fb:79:2d:71:0b:fb:6d:a0:da:79:
                    6d:fb:9f:bc:19:5f:de:b6:c3:2b:fc:39:25:0c:a3:
                    62:f9:f6:db:fc:3b:25:d0:56:b4:bd:16:02:e8:75:
                    da:15:39:68:39:cf:0c:f1:f9:4a:a5:fe:24:47:78:
                    db:91:a2:e3:37:1f:cf:3f:65:d1:48:aa:eb:a4:78:
                    36:05:15:82:36:a4:2d:8c:10:7f:45:87:a1:5c:54:
                    71:aa:d1:3b:c0:ab:7a:fe:a1:a8:20:c2:cc:96:9f:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:30:D2:23:87:3A:1A:64:A5:75:E3:C9:CA:1C:53:6E:E1:94:60:7A
            X509v3 Authority Key Identifier:
                keyid:B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:57:77:ac:3f:09:76:af:9f:c2:80:ee:18:14:bd:e3:85:7c:
         75:bb:23:b0:80:70:e1:52:22:ff:45:e8:ca:d0:f4:18:7b:7b:
         6e:f5:20:12:08:3b:b0:d6:62:00:73:6a:53:66:65:5a:3d:62:
         fb:b7:6f:ce:82:7f:03:4c:45:62:45:52:32:a9:07:f0:6b:2b:
         30:b4:8c:ec:69:7f:6d:42:4d:f2:48:62:e1:57:88:2e:a8:47:
         d3:a8:29:75:ab:8a:74:f9:ca:af:76:12:34:0b:a2:e9:c8:1a:
         37:8f:be:7d:80:8c:d5:82:a9:af:ca:f8:53:e4:11:e3:da:11:
         3e:5e:f9:e4:6d:17:05:eb:09:69:bc:d2:66:35:db:a8:78:c9:
         99:08:74:26:a4:31:dd:9d:c2:e9:13:88:6a:68:55:be:3d:66:
         e0:45:f1:60:27:12:ce:f7:cb:f0:a4:0d:aa:72:93:6f:b0:cd:
         c9:43:75:47:7d:d1:98:08:a4:56:5e:9d:09:ee:12:64:89:88:
         73:dd:f1:0e:84:89:19:56:61:b0:39:27:f2:e0:a3:98:da:d8:
         ec:1a:95:01:fe:ea:27:71:e7:27:df:d5:76:e3:ae:fc:7c:3d:
         ed:74:b2:44:13:94:d3:80:19:a9:78:ee:65:e0:cb:32:9e:ec:
         f7:a1:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----