Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.mft
File:                     2CE578A76B552A900AEBA274A7AC55C6D4398631.mft (raw, json)
Hash identifier:          y9CBYhJSTuJhySepK80xhvMUh1vKsThQmb1JnTmO51o=
Subject key identifier:   6C:DF:FD:E0:FE:3F:FF:B7:BF:98:04:4C:69:81:7B:43:19:B1:12:8B
Authority key identifier: 2C:E5:78:A7:6B:55:2A:90:0A:EB:A2:74:A7:AC:55:C6:D4:39:86:31
Certificate issuer:       /CN=2CE578A76B552A900AEBA274A7AC55C6D4398631
Certificate serial:       247BEF8B43FE4D4A917D3690132A6452496D3BC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.mft
Manifest number:          3B
Signing time:             Mon 15 Apr 2024 09:56:59 +0000
Manifest this update:     Mon 15 Apr 2024 09:51:59 +0000
Manifest next update:     Tue 16 Apr 2024 10:09:59 +0000
Files and hashes:         1: 323830343a333732633a3a2f33322d313238203d3e20323636333934.roa (hash: uolOa/wRjeYsls4zliKTNxpaPavXS9lnKPIoZYUwIWc=)
                          2: 2CE578A76B552A900AEBA274A7AC55C6D4398631.crl (hash: XU6Prsqa7wXTH1afKNORwaWSUXAsBASDk0D7hBYcjTk=)
                          3: 3137302e38312e37362e302f32322d3332203d3e20323636333934.roa (hash: co2xzWWfft0THRob5G2eGbWMMCKC+MX5Bs/YMYOUJFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7b:ef:8b:43:fe:4d:4a:91:7d:36:90:13:2a:64:52:49:6d:3b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE578A76B552A900AEBA274A7AC55C6D4398631
        Validity
            Not Before: Apr 15 09:51:59 2024 GMT
            Not After : Apr 16 10:09:59 2024 GMT
        Subject: CN=6CDFFDE0FE3FFFB7BF98044C69817B4319B1128B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:5a:52:b1:df:c9:f3:75:16:29:c2:f6:29:
                    8f:7e:33:7b:f8:e7:79:e1:fd:62:3e:50:f2:fd:19:
                    11:30:7f:7a:84:40:f5:ad:60:d2:ca:89:65:1c:28:
                    66:a0:01:4a:cc:5b:e4:1f:b1:cb:55:8a:9d:cf:da:
                    bf:6a:04:87:ef:e5:35:2c:aa:d8:13:11:cf:d9:85:
                    10:b4:1e:6f:f6:9d:dd:07:59:9e:ee:05:e1:4d:bf:
                    bf:8d:17:02:10:a5:3d:4b:8d:39:b7:50:9d:5f:0b:
                    64:0a:56:95:5a:52:86:4a:5b:55:23:8e:ea:a2:41:
                    b9:e8:ba:47:47:73:d1:bb:f6:8b:d1:49:25:17:0d:
                    13:ca:da:50:ce:83:e9:7d:e8:c7:91:12:18:a2:81:
                    dd:89:eb:1d:a7:8e:0e:eb:88:14:cc:b8:6f:b4:13:
                    d4:f3:c0:1a:0b:e5:dd:e3:fa:a7:9b:7a:e8:78:ea:
                    72:2f:db:5b:76:ca:f1:75:da:a8:e7:24:2b:90:0e:
                    6a:e5:13:0e:87:db:61:95:c1:b8:df:0c:08:37:9d:
                    16:d6:4c:2e:8c:2e:77:f1:ce:cb:50:f4:e1:55:49:
                    91:43:fd:8c:2e:90:77:1b:32:b3:8b:ef:e2:50:ac:
                    de:73:3c:e5:57:03:78:f2:50:d8:1f:11:b7:ff:e8:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:FD:E0:FE:3F:FF:B7:BF:98:04:4C:69:81:7B:43:19:B1:12:8B
            X509v3 Authority Key Identifier:
                keyid:2C:E5:78:A7:6B:55:2A:90:0A:EB:A2:74:A7:AC:55:C6:D4:39:86:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/2CE578A76B552A900AEBA274A7AC55C6D4398631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ff:85:43:32:b6:83:ad:a8:9d:04:cd:61:86:12:1f:9f:35:
         65:90:d7:50:8f:04:23:e3:d3:ba:5d:b7:ff:9b:b3:be:42:d4:
         f1:54:0f:ad:6a:f4:02:2f:f0:78:80:90:ed:a9:b5:3d:47:d3:
         d0:12:9e:7e:cc:e8:ac:4c:1b:70:b4:21:09:95:51:da:50:65:
         0f:c0:30:66:78:9f:37:40:be:d8:cb:39:1d:c6:49:75:3b:3e:
         ca:52:50:b5:13:79:88:ee:e3:da:28:68:df:03:69:4a:c1:33:
         7d:46:d5:82:ca:05:ec:ab:38:4b:4f:5b:39:18:2b:80:1c:41:
         7b:7a:7e:90:d9:53:46:83:6b:f5:24:78:06:64:02:4e:05:9b:
         42:16:4e:9c:c9:62:39:15:79:82:ea:fa:9c:41:e7:c2:e4:1c:
         1e:cd:90:c3:bd:c0:e7:11:c1:25:9e:8f:d2:c8:20:d7:fb:59:
         06:4f:ef:52:14:70:52:6d:68:e0:9d:31:6e:2e:27:3b:ef:32:
         fc:31:f0:67:a8:5c:0d:76:17:b3:d2:20:53:9b:20:ec:68:e4:
         98:1c:d9:9b:5c:75:bd:1e:1e:14:98:42:b2:9c:4a:3b:82:e3:
         a8:32:15:42:a5:0d:e7:fa:01:fa:05:51:f4:2e:fe:85:2c:7e:
         65:3e:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----