Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AE99472A810991844BAB99BFAFE3733A748E8150.mft
File:                     AE99472A810991844BAB99BFAFE3733A748E8150.mft (raw, json)
Hash identifier:          V/q8QUAH3fDS9V83Q6RG4nmJfwrEd3IXQscFus22CLU=
Subject key identifier:   5B:D6:0C:C1:65:A0:1C:27:F5:3B:0B:12:90:7D:46:FB:65:BA:60:A4
Authority key identifier: AE:99:47:2A:81:09:91:84:4B:AB:99:BF:AF:E3:73:3A:74:8E:81:50
Certificate issuer:       /CN=AE99472A810991844BAB99BFAFE3733A748E8150
Certificate serial:       48FCC59E29391CB9ABD3AF0A00B002BB49C2B03A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE99472A810991844BAB99BFAFE3733A748E8150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AE99472A810991844BAB99BFAFE3733A748E8150.mft
Manifest number:          B2
Signing time:             Sat 23 Dec 2023 03:57:17 +0000
Manifest this update:     Sat 23 Dec 2023 03:52:17 +0000
Manifest next update:     Sun 24 Dec 2023 05:30:17 +0000
Files and hashes:         1: AE99472A810991844BAB99BFAFE3733A748E8150.crl (hash: lS4X9fHfIT8VjGL0foll+NICYqiHbcH7psHBB5eb1go=)
                          2: AS264209.roa (hash: tJcyZMj0dL7jU2+Ads7TMPT2Md6amBaQxJcqFsrAIvM=)
                          3: AS28640.roa (hash: XK02ejJU6uY5zux70avck/P7jTGtEXRtJI287Z6mjEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fc:c5:9e:29:39:1c:b9:ab:d3:af:0a:00:b0:02:bb:49:c2:b0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE99472A810991844BAB99BFAFE3733A748E8150
        Validity
            Not Before: Dec 23 03:52:17 2023 GMT
            Not After : Dec 24 05:30:17 2023 GMT
        Subject: CN=5BD60CC165A01C27F53B0B12907D46FB65BA60A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:3e:bf:37:9f:d9:29:31:8c:59:b4:5f:4e:
                    9a:23:30:7c:1d:83:db:b8:1d:2f:cd:a3:92:18:17:
                    1e:c6:ce:a2:ee:cb:9e:bb:16:de:4e:97:a9:a2:92:
                    cd:b7:5b:51:d3:43:3c:04:42:7b:37:0c:69:3b:30:
                    31:f0:d1:6d:90:6f:92:ab:a4:48:fa:cf:92:26:41:
                    f0:99:d4:94:55:f5:8f:17:f4:b0:b8:3a:36:8a:7c:
                    7c:b4:89:e3:e5:00:5d:12:6b:02:3b:9d:a8:bf:88:
                    e5:c4:96:58:91:3a:f1:5c:2a:74:5f:ab:e3:42:84:
                    12:ba:b8:b6:df:a0:ec:38:09:92:3c:f2:1e:92:84:
                    a1:8f:80:2e:27:8b:f2:f4:11:ec:c2:b3:55:96:73:
                    7f:30:fb:bb:e8:f0:84:9b:c7:e2:5a:93:66:be:02:
                    8e:07:40:80:1d:33:02:d7:07:17:bf:5d:9e:f8:bc:
                    5d:b6:bd:1c:95:c6:3d:4b:b8:5c:07:dd:a0:51:c2:
                    27:3a:af:b3:d2:88:84:f8:68:d6:b7:20:9f:da:79:
                    27:ba:a2:74:29:38:d6:29:85:d8:2e:7a:71:8a:22:
                    d0:ee:a1:00:40:4d:fc:db:cd:8e:e3:2e:81:cd:fd:
                    04:f4:81:59:ff:fe:b3:ce:14:b5:91:13:a6:44:67:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:0C:C1:65:A0:1C:27:F5:3B:0B:12:90:7D:46:FB:65:BA:60:A4
            X509v3 Authority Key Identifier:
                keyid:AE:99:47:2A:81:09:91:84:4B:AB:99:BF:AF:E3:73:3A:74:8E:81:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AE99472A810991844BAB99BFAFE3733A748E8150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE99472A810991844BAB99BFAFE3733A748E8150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AE99472A810991844BAB99BFAFE3733A748E8150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e2:88:f6:d2:82:ad:28:87:67:8b:c6:1f:06:da:74:b5:66:
         c9:5d:4b:93:53:6f:b0:2c:93:6a:ed:b8:bd:cb:29:e5:c8:f6:
         54:61:b3:c3:da:ce:03:23:0d:99:dd:fa:a7:d0:e5:a7:b1:b7:
         b7:74:ad:2c:e7:2d:79:31:7f:80:59:06:2c:fd:8c:f0:6d:42:
         2a:f7:b8:0e:4b:4c:fb:cf:6a:d1:fd:9f:7d:43:14:c0:42:d9:
         84:a4:4e:87:7c:d6:bf:6f:04:67:90:2f:f2:e1:16:4c:73:23:
         fe:0f:97:27:9c:9a:e9:b1:2e:a8:83:31:1b:0c:ef:b0:16:79:
         1c:bc:79:a3:a0:f2:b1:ea:a9:89:a8:45:af:5c:25:c3:66:ed:
         32:57:c2:9a:2e:f7:99:e5:d2:7d:90:f9:db:e0:4d:fe:4d:c6:
         52:aa:aa:d7:aa:c9:97:fc:78:58:2b:4f:c2:f2:ba:c2:50:ed:
         2e:8b:37:cd:67:0d:ed:94:d7:05:78:3e:4d:47:9a:e9:b4:c8:
         6a:fc:bf:ef:dc:5e:90:c7:5f:52:00:11:15:85:8d:e2:7d:62:
         19:ca:94:b3:2c:a1:98:ca:7e:07:87:7f:71:b7:ba:91:76:31:
         65:90:83:10:89:f1:a0:0d:06:8a:84:0f:d5:cc:8b:f3:62:60:
         8c:e9:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----