Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.mft
File:                     9D291B973130E34B8410AEA2E18AECCC5DFC9096.mft (raw, json)
Hash identifier:          BiqzzxlFgkaRYgOtiN84rScLjQXLJSxnkTqMXYTVH9I=
Subject key identifier:   BC:AA:90:DA:2A:9F:57:FF:66:A4:C7:C6:39:BD:91:00:02:21:C9:9E
Authority key identifier: 9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96
Certificate issuer:       /CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
Certificate serial:       5679B1E5948789CE3E16EB2D86C5A7B285D43318
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.mft
Manifest number:          38
Signing time:             Mon 15 Apr 2024 10:44:58 +0000
Manifest this update:     Mon 15 Apr 2024 10:39:58 +0000
Manifest next update:     Tue 16 Apr 2024 12:10:58 +0000
Files and hashes:         1: 34352e3232362e342e302f32322d3234203d3e20323636393533.roa (hash: XqYhMKcNNtSwhd9fOs4LC/wsTcPbj552DL9Ie7/r9GE=)
                          2: 9D291B973130E34B8410AEA2E18AECCC5DFC9096.crl (hash: abgOEvrLRurlzcPZ1rC0i1wwseAyhiUdo0WUlFGxdHc=)
                          3: 323830343a343564383a3a2f33322d3438203d3e20323636393533.roa (hash: inZ4YECHSRyJQP+9s0sneBuew75lTT06nE7jo0k0Hcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:79:b1:e5:94:87:89:ce:3e:16:eb:2d:86:c5:a7:b2:85:d4:33:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
        Validity
            Not Before: Apr 15 10:39:58 2024 GMT
            Not After : Apr 16 12:10:58 2024 GMT
        Subject: CN=BCAA90DA2A9F57FF66A4C7C639BD91000221C99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:3e:c3:e3:84:e3:62:ef:f3:dc:97:98:d4:
                    ce:d6:d3:c6:2c:fa:33:a6:ec:61:0d:e2:24:b3:49:
                    dd:81:e2:7d:ef:6f:c7:12:ec:b6:79:3b:13:40:84:
                    f3:8c:4b:f7:4f:1d:60:77:23:8d:a0:51:63:ed:66:
                    14:10:7b:c7:b8:af:15:b3:3f:a5:a8:04:5c:de:a4:
                    85:74:5c:2b:ae:11:59:45:c7:b0:8b:90:44:27:89:
                    5a:cf:7b:3e:2e:b6:61:95:f3:cc:f8:db:c5:0f:ad:
                    2a:fa:41:01:89:65:56:67:9e:a9:9d:71:83:89:39:
                    d6:cc:a0:6f:73:d0:a9:d2:96:c8:c0:25:c8:14:25:
                    ef:dc:ef:7d:34:2e:fb:f9:c3:16:a1:b4:e9:cd:6b:
                    82:33:45:7e:5b:eb:94:4d:ed:b3:26:c7:72:1d:c7:
                    80:52:e9:6e:84:30:89:a0:e4:ca:78:16:af:4f:da:
                    1e:c1:c7:10:d1:84:09:fe:d9:06:fc:92:4e:bb:db:
                    96:f9:9f:5b:ed:dc:2d:c0:6c:b2:09:c1:33:3f:7d:
                    49:87:58:1e:e3:90:83:e9:7c:0b:ec:4b:43:ae:05:
                    67:21:12:da:15:14:e0:83:27:7e:2d:6a:2b:6e:42:
                    8b:ca:d8:25:ec:80:2b:2b:8f:fc:5f:41:bc:fc:4d:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AA:90:DA:2A:9F:57:FF:66:A4:C7:C6:39:BD:91:00:02:21:C9:9E
            X509v3 Authority Key Identifier:
                keyid:9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:41:d6:af:f3:8c:ab:b6:33:af:37:ae:eb:a0:3d:33:29:4d:
         b0:20:5e:c5:89:67:93:ad:f9:78:ab:29:33:bb:37:5c:3f:17:
         5f:e0:bb:3f:dd:65:71:52:01:1c:2c:4d:ae:3a:c3:f0:ea:a6:
         97:e5:23:73:85:59:ad:39:cb:ef:4a:b0:bf:90:e1:e7:cf:1e:
         06:eb:39:d5:49:7f:c4:bc:36:b9:81:48:e1:c9:04:6b:ba:8d:
         ef:01:43:17:24:37:32:7b:ff:06:f1:6a:3e:96:6a:19:f4:41:
         4a:aa:3a:1b:24:99:0d:3d:b4:bd:43:e9:09:c2:fc:06:7b:c9:
         50:40:1f:c5:46:5d:0b:8a:54:8a:75:74:1e:09:62:ae:93:36:
         e7:c8:b8:8c:06:c2:ca:9a:0b:a4:2a:ce:5c:68:93:a5:c2:41:
         62:2e:4e:2e:52:ca:2f:a8:97:49:ce:03:42:21:58:41:5b:6e:
         66:39:06:e0:c6:3b:9b:f8:8d:52:47:04:90:b1:2f:2e:bb:fb:
         20:2b:f6:82:55:20:8e:1c:e2:1b:7c:3f:7c:7b:d0:0f:10:14:
         ea:02:fb:20:d1:70:c1:26:48:00:7b:9d:7d:24:4b:2b:cb:38:
         82:0a:ae:ad:cb:79:e6:af:2c:8e:6d:6e:42:52:c1:60:9f:af:
         ba:b9:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----