Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/CADCDC5F3731B1927F5755A498829CCDD415D156.mft
File:                     CADCDC5F3731B1927F5755A498829CCDD415D156.mft (raw, json)
Hash identifier:          e/micpUCYiu0BItnS3mnr9fWxtMEU5GIegeNjq0hKeA=
Subject key identifier:   86:1F:1A:66:08:41:DF:F7:0D:20:50:33:1A:2A:59:5A:0C:C0:2D:83
Authority key identifier: CA:DC:DC:5F:37:31:B1:92:7F:57:55:A4:98:82:9C:CD:D4:15:D1:56
Certificate issuer:       /CN=CADCDC5F3731B1927F5755A498829CCDD415D156
Certificate serial:       2BF3D06B1D3548D59B57E8685B4AF1E34D45E90B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CADCDC5F3731B1927F5755A498829CCDD415D156.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/CADCDC5F3731B1927F5755A498829CCDD415D156.mft
Manifest number:          01BF
Signing time:             Fri 08 Mar 2024 16:30:48 +0000
Manifest this update:     Fri 08 Mar 2024 16:25:48 +0000
Manifest next update:     Sat 09 Mar 2024 18:42:48 +0000
Files and hashes:         1: 323830343a333263633a3a2f33322d313238203d3e20323635303938.roa (hash: BMDGX8vyX6Eu/gNLTuaqXO4TP0MujTZ1ZbcJnYYF2fA=)
                          2: 3137302e3233332e3233362e302f32322d3332203d3e20323635303938.roa (hash: bTMNTVjW3L1JXKQWPa/UjiE2LbrHqob9zdug69Us9qE=)
                          3: CADCDC5F3731B1927F5755A498829CCDD415D156.crl (hash: yRqtVuDtzQ/L7xFKx2C7nhJ9z8uPhF1A2+jEaq9o0us=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f3:d0:6b:1d:35:48:d5:9b:57:e8:68:5b:4a:f1:e3:4d:45:e9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADCDC5F3731B1927F5755A498829CCDD415D156
        Validity
            Not Before: Mar  8 16:25:48 2024 GMT
            Not After : Mar  9 18:42:48 2024 GMT
        Subject: CN=861F1A660841DFF70D2050331A2A595A0CC02D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:9c:8a:86:31:8e:1c:e0:77:8e:53:a0:4d:
                    6c:68:b2:5e:85:68:a4:8a:84:17:d9:49:55:92:80:
                    5f:a8:2c:e2:94:26:2f:2b:cf:91:0d:0d:ca:73:c0:
                    c8:0f:67:6c:73:04:e1:1d:5e:13:08:fd:46:a0:b1:
                    8d:ca:18:6b:7f:ad:5a:1e:7f:02:78:ba:7b:a4:25:
                    e5:74:0a:b6:df:7a:5d:af:c2:ae:74:d2:d6:52:c2:
                    70:45:98:42:40:5b:c9:a2:43:51:9a:d8:eb:e1:b3:
                    37:31:44:91:ea:45:ad:58:f4:9e:52:1e:02:f0:c0:
                    25:ab:38:17:f1:aa:16:e9:01:31:af:02:5b:58:9e:
                    c4:f0:31:33:ff:6c:16:5d:95:3d:da:b1:49:1a:c1:
                    23:fa:9d:bd:8f:ab:4d:04:7d:da:94:44:8b:d5:76:
                    b4:e9:5d:f4:53:d2:0d:97:44:7f:7d:ec:98:80:9f:
                    e2:f1:9c:6a:0e:62:41:c1:40:0a:22:2c:c0:65:09:
                    bc:c6:d5:52:9d:69:62:9f:5f:bd:da:32:68:15:22:
                    36:07:3d:18:6a:be:a9:14:d4:c9:ac:36:20:6a:6d:
                    c3:50:85:6a:28:b6:dc:97:94:39:63:4c:91:c4:9f:
                    72:63:13:c5:ca:1d:d5:c4:7f:aa:84:7e:74:35:11:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:1A:66:08:41:DF:F7:0D:20:50:33:1A:2A:59:5A:0C:C0:2D:83
            X509v3 Authority Key Identifier:
                keyid:CA:DC:DC:5F:37:31:B1:92:7F:57:55:A4:98:82:9C:CD:D4:15:D1:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/CADCDC5F3731B1927F5755A498829CCDD415D156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CADCDC5F3731B1927F5755A498829CCDD415D156.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/CADCDC5F3731B1927F5755A498829CCDD415D156.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:79:72:dd:1a:63:44:94:ca:d5:08:9f:e4:9c:a2:b8:39:
         69:b9:12:0a:a2:75:2b:0e:0a:f2:2a:ec:07:fd:0e:62:c6:41:
         b1:d9:b9:d9:37:6d:a2:b4:60:53:64:c9:23:2f:6f:44:e4:f9:
         30:8d:b9:10:eb:18:51:96:44:4b:a2:dc:79:de:66:0e:08:3d:
         a6:87:c7:96:0b:62:d0:13:bb:93:16:70:11:05:72:6c:6b:db:
         65:9f:b3:73:91:61:70:e2:31:92:36:25:1f:22:de:d9:ce:33:
         54:03:7e:bc:20:7b:84:7c:b1:5a:f2:c2:76:c4:ab:cc:d4:95:
         ee:ab:a9:11:55:66:2a:6d:95:fc:b2:c9:ce:3c:2e:eb:c1:e0:
         a3:fa:9b:17:14:10:6d:56:2c:ff:38:cd:19:53:2a:50:52:42:
         a3:d1:e5:fe:28:e7:c6:a3:4d:0b:54:36:6d:24:90:f6:33:26:
         d5:f0:5b:92:b2:cc:26:f6:c8:59:c8:d6:93:fe:9b:fe:b0:d7:
         05:93:39:8d:d9:4d:24:15:c3:d4:d8:07:11:df:11:62:61:42:
         c3:4c:6e:56:0e:97:54:78:8f:81:b8:50:80:f0:63:e4:0f:e5:
         ba:a4:50:b6:ce:a8:10:9e:69:94:75:96:b4:f0:1d:c9:ae:48:
         0c:bf:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----