Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/00A11C7AD994FADA94CDDB398BF4111F38632AF3.mft
File:                     00A11C7AD994FADA94CDDB398BF4111F38632AF3.mft (raw, json)
Hash identifier:          Fx7R5K+0bjfBY/AF2Fr0Zx/zAuOy7strlfzfLTneQxs=
Subject key identifier:   DD:C4:65:1C:AA:D0:88:7A:88:62:DB:AF:19:8B:72:18:19:57:A7:EB
Authority key identifier: 00:A1:1C:7A:D9:94:FA:DA:94:CD:DB:39:8B:F4:11:1F:38:63:2A:F3
Certificate issuer:       /CN=00A11C7AD994FADA94CDDB398BF4111F38632AF3
Certificate serial:       1C3B2B6BF8F5012072C83F89DE6573DFFC4535D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A11C7AD994FADA94CDDB398BF4111F38632AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/00A11C7AD994FADA94CDDB398BF4111F38632AF3.mft
Manifest number:          3B
Signing time:             Wed 18 Sep 2024 02:00:52 +0000
Manifest this update:     Wed 18 Sep 2024 01:55:52 +0000
Manifest next update:     Thu 19 Sep 2024 04:28:52 +0000
Files and hashes:         1: 3137302e3233332e3233362e302f32322d3332203d3e20323635303938.roa (hash: CKwFqDX+aT/0BvxaGnZeRqSAm/SkhLO/IeoVsEfs1tY=)
                          2: 323830343a333263633a3a2f33322d313238203d3e20323635303938.roa (hash: pMGgJMDTDrx9Knzg3pipmMqzpcHBXu+q/ZVCPSnoJFY=)
                          3: 00A11C7AD994FADA94CDDB398BF4111F38632AF3.crl (hash: qJtocRW902yKg4qeoBWqYeIs7C3A+Bf/SqkR2sAIZR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:2b:6b:f8:f5:01:20:72:c8:3f:89:de:65:73:df:fc:45:35:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A11C7AD994FADA94CDDB398BF4111F38632AF3
        Validity
            Not Before: Sep 18 01:55:52 2024 GMT
            Not After : Sep 19 04:28:52 2024 GMT
        Subject: CN=DDC4651CAAD0887A8862DBAF198B72181957A7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:03:9c:a9:86:7e:66:41:72:55:ae:0a:d9:
                    78:0b:28:a8:7c:f1:d8:8f:bf:16:2d:18:b3:5b:96:
                    22:13:7e:2c:e5:d9:99:1d:1f:00:2b:a1:b9:ab:e7:
                    cd:7a:3b:c8:66:75:74:6a:82:41:a9:be:4e:6b:e5:
                    ff:ae:42:fb:95:84:b8:a8:03:2c:c5:30:d1:54:45:
                    2f:63:b1:03:1b:57:5c:0e:b9:c5:c3:3a:57:16:73:
                    60:e6:c2:e3:9d:9d:61:3b:7b:8a:f3:61:42:05:8c:
                    c0:2f:2e:70:83:3a:a1:4e:eb:8d:99:a3:4f:25:84:
                    62:1a:46:a6:b5:7a:d4:d2:c9:db:bc:52:85:68:f5:
                    85:d8:96:ce:21:5b:9c:1f:47:3c:56:35:bb:ca:0f:
                    7f:5f:78:85:83:6b:ee:39:69:ef:c7:06:dd:43:af:
                    d8:a5:22:8d:1e:b5:90:8f:9a:a8:11:5b:42:05:4e:
                    32:f0:f5:7d:6c:a5:58:4f:9d:36:81:88:e1:96:03:
                    05:54:f2:a8:e9:5d:d2:89:3b:89:c5:b5:d7:47:69:
                    46:72:a5:55:6c:36:01:06:15:09:c8:d5:18:d7:7a:
                    53:4d:32:46:16:84:cb:ae:a0:29:f3:00:e3:e9:ac:
                    6b:d6:fd:38:91:3e:40:9a:c4:99:03:52:c2:29:90:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C4:65:1C:AA:D0:88:7A:88:62:DB:AF:19:8B:72:18:19:57:A7:EB
            X509v3 Authority Key Identifier:
                keyid:00:A1:1C:7A:D9:94:FA:DA:94:CD:DB:39:8B:F4:11:1F:38:63:2A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/00A11C7AD994FADA94CDDB398BF4111F38632AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A11C7AD994FADA94CDDB398BF4111F38632AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/00A11C7AD994FADA94CDDB398BF4111F38632AF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2c:f8:2e:2f:c6:ee:37:9f:e7:cf:3b:76:c8:9d:dd:07:69:
         74:74:dc:45:ef:75:63:3e:0d:1e:76:9a:5b:e2:ff:1c:e5:c9:
         4a:0e:3e:ea:bc:c9:ba:8d:e9:7c:46:0a:4c:2e:70:ca:24:d6:
         d6:0e:34:67:45:34:cc:a2:44:d8:bd:90:05:3b:b7:23:0c:40:
         37:5e:d4:25:2e:e3:40:93:36:15:a5:c7:ab:32:71:b4:ee:bb:
         b4:71:9a:fc:41:8b:80:7a:ef:f9:b4:f5:02:2f:c6:4c:a1:05:
         66:4c:da:85:c7:63:79:55:ec:d1:5c:44:44:8f:e2:61:0d:8f:
         67:06:95:03:c9:06:98:fa:c3:c9:35:b5:c4:cc:23:65:dd:82:
         7d:ad:79:26:e7:78:27:c2:07:76:44:81:f4:15:9b:d9:68:59:
         ff:dc:2b:b7:00:14:a7:67:84:b6:cf:b0:5b:6c:b8:be:dd:c2:
         e9:12:37:bf:bb:03:7d:30:92:62:aa:7c:4e:81:85:fd:dc:33:
         2c:f5:a1:58:b1:d1:c1:20:4b:a3:05:0e:71:c2:ad:34:02:db:
         4b:25:82:27:f8:cf:1a:df:2d:11:cb:28:8d:b5:38:4a:14:f4:
         e3:d1:a8:db:7b:e7:67:4f:96:0e:c8:d0:b1:89:b4:e2:f0:67:
         6a:b3:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----