Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.mft
File:                     1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.mft (raw, json)
Hash identifier:          93u1Bnndv3weyrS/bRyYC9f9VSTyL50+1sJkqWtlMvo=
Subject key identifier:   9A:B1:32:FE:0B:54:DC:DB:CE:95:33:47:56:A4:44:B6:A1:09:53:F7
Authority key identifier: 14:74:B1:FB:59:CC:BD:EC:AE:0E:CB:3C:A7:D2:C9:DC:35:48:52:B1
Certificate issuer:       /CN=1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1
Certificate serial:       059675B2AE2A5C90FF96A7F0062E1B26C7CD0330
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.mft
Manifest number:          27
Signing time:             Mon 15 Apr 2024 03:08:11 +0000
Manifest this update:     Mon 15 Apr 2024 03:03:11 +0000
Manifest next update:     Tue 16 Apr 2024 05:19:11 +0000
Files and hashes:         1: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: utKo2Mof6uc23k6oVU5SruYuDd70loDdb+DN8+2LXOQ=)
                          2: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: 1tLUHBYF4XzVjc0Qs12Yamu7PQSJTqZAN6V3NPWg0nM=)
                          3: 1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.crl (hash: wg8gQuc4Ia4fpKgxHztxLtR/mbDmWZ3aGIQWkrklcFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:96:75:b2:ae:2a:5c:90:ff:96:a7:f0:06:2e:1b:26:c7:cd:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1
        Validity
            Not Before: Apr 15 03:03:11 2024 GMT
            Not After : Apr 16 05:19:11 2024 GMT
        Subject: CN=9AB132FE0B54DCDBCE95334756A444B6A10953F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:fe:8b:aa:a8:1f:19:63:89:5a:c6:8b:5d:
                    7d:6c:90:cb:7b:a8:ba:e8:bb:d4:da:0f:11:e1:b3:
                    3b:03:53:d7:81:50:b8:2d:0d:b0:04:cb:7a:84:21:
                    f4:db:f0:ce:f3:03:98:d8:f2:6c:5b:15:cc:a9:44:
                    0f:e5:29:11:9c:50:d4:3b:9f:e1:83:5f:8a:96:ed:
                    44:6a:8e:f9:f5:9c:c5:d5:cb:28:37:f8:84:02:6e:
                    fa:75:49:17:60:60:14:0c:ab:af:67:55:13:85:6b:
                    9e:2b:6f:36:23:1d:7b:6b:0a:28:fd:fb:08:49:ee:
                    1a:43:4c:11:99:dd:6a:4a:02:64:81:c7:4b:c6:43:
                    16:cd:2c:b1:bb:18:60:c0:30:d7:76:23:a9:e2:d2:
                    15:19:05:55:03:ef:2f:2c:4a:c9:64:af:a6:ba:3d:
                    26:a3:57:a0:39:8c:dc:8b:57:c6:fb:8d:53:57:c8:
                    00:7e:fc:b9:c4:3b:27:a9:c2:08:ed:7d:0d:e7:04:
                    06:a7:0e:73:8c:3e:83:d6:29:3c:96:78:73:8c:be:
                    4f:73:28:da:6c:2e:37:5d:ad:fe:30:55:c0:12:7a:
                    d7:ff:78:d0:1d:b8:7d:a6:58:7b:f0:12:32:4e:b4:
                    7e:bf:a1:e0:08:d3:75:5a:94:3f:3a:c0:44:81:8e:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B1:32:FE:0B:54:DC:DB:CE:95:33:47:56:A4:44:B6:A1:09:53:F7
            X509v3 Authority Key Identifier:
                keyid:14:74:B1:FB:59:CC:BD:EC:AE:0E:CB:3C:A7:D2:C9:DC:35:48:52:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/1474B1FB59CCBDECAE0ECB3CA7D2C9DC354852B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:2a:34:2a:9c:b6:7a:84:aa:86:38:f2:13:20:6f:cd:f1:
         83:6a:e0:fc:04:b5:5b:54:15:71:c4:88:bb:70:b7:d0:30:a8:
         9d:5b:87:16:89:cc:7e:b3:fb:b7:9d:93:93:82:e4:f9:46:26:
         5f:49:8b:6e:3f:ff:3e:a2:f5:c4:89:c0:98:09:da:d3:91:d3:
         c8:05:53:99:f3:88:84:83:6b:a1:99:25:10:d5:30:22:08:08:
         7b:6a:01:59:69:a2:23:14:9c:78:70:44:36:c0:f2:9d:77:ad:
         86:03:27:29:06:2b:3d:6c:4f:8c:76:c5:d1:95:88:ff:6f:1d:
         c4:49:ba:4e:c6:88:57:86:8f:ac:41:4c:41:bc:bc:9c:8b:98:
         a9:d9:c7:70:c8:d6:20:ba:ac:bc:aa:e2:a4:86:e2:c1:23:d7:
         c4:83:1b:9c:96:a6:e4:34:54:21:71:ed:25:50:06:dc:32:87:
         8c:53:ec:f2:85:f1:ca:4d:f7:6c:89:4c:11:31:b4:f9:21:61:
         7b:cf:ac:b3:1f:61:6d:a4:e0:f7:10:3b:b6:5a:a1:48:c9:59:
         e1:99:42:21:b9:0a:f4:80:8d:1e:dc:0d:0c:7c:3e:b2:cd:b8:
         5b:ea:57:93:aa:64:24:bc:25:96:b2:6e:49:97:7f:d1:79:c8:
         d9:aa:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----