Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.mft
File:                     892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.mft (raw, json)
Hash identifier:          TGd9vRXax8L2SEZAA/+yjqWItTookpZS6nTbT7wtHWw=
Subject key identifier:   5E:2C:24:DB:4E:AB:2B:13:4F:20:A1:5A:D3:B2:39:54:20:4F:67:26
Authority key identifier: 89:2C:B5:47:8D:A1:F9:08:83:BE:5E:6C:A0:13:6E:FF:D2:1F:AF:48
Certificate issuer:       /CN=892CB5478DA1F90883BE5E6CA0136EFFD21FAF48
Certificate serial:       02C6B3E8CBCF760112DE7477E256E0870360EB91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.mft
Manifest number:          6E
Signing time:             Mon 15 Apr 2024 10:07:09 +0000
Manifest this update:     Mon 15 Apr 2024 10:02:09 +0000
Manifest next update:     Tue 16 Apr 2024 10:43:09 +0000
Files and hashes:         1: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: YsrO6Aw0SrNNO2OHee3KVphxOEL/iDEfkw5ptpRoeHo=)
                          2: 892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.crl (hash: nudDzN1PH1MaXncG56IlDA5ee88J+mQP3M7iDGGanNc=)
                          3: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: oLpuBsZx9tEEGwEwf5+vKB197EyPL2PwzuFg1c1VTS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c6:b3:e8:cb:cf:76:01:12:de:74:77:e2:56:e0:87:03:60:eb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892CB5478DA1F90883BE5E6CA0136EFFD21FAF48
        Validity
            Not Before: Apr 15 10:02:09 2024 GMT
            Not After : Apr 16 10:43:09 2024 GMT
        Subject: CN=5E2C24DB4EAB2B134F20A15AD3B23954204F6726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:97:fb:d9:dd:1a:79:e3:59:12:36:74:e5:
                    a1:9a:d5:10:25:56:60:59:1b:04:78:b2:36:c1:b6:
                    0c:15:fd:35:08:2a:fc:7e:fa:ec:29:7e:5e:f9:a8:
                    a9:14:bc:aa:59:a1:aa:93:40:d3:bd:09:87:38:85:
                    74:f9:26:07:e8:2c:45:bc:97:f2:c3:4a:85:e7:7e:
                    9e:d0:d7:fa:81:6c:87:41:2d:b0:86:69:cb:f7:c6:
                    67:ad:6e:bd:e6:67:dc:a1:0d:e4:c5:af:3d:a4:1e:
                    18:d8:bb:34:b6:34:51:30:ac:7d:ca:d6:63:95:5d:
                    4c:c3:5a:78:22:71:fc:b0:fe:ea:45:0e:56:0f:30:
                    19:4f:75:59:5e:1e:44:50:57:4e:4d:6c:bb:0e:60:
                    fe:ab:74:57:82:85:37:3e:5f:5b:7e:44:6d:ee:e9:
                    0d:6f:c4:4b:a4:56:48:1d:52:43:e4:7c:f5:db:e7:
                    31:da:81:0f:dd:85:e5:d3:44:41:2f:bc:fb:7a:19:
                    1d:d0:15:0f:99:96:d1:7f:c6:70:f8:2b:2d:44:ac:
                    ae:b7:ce:3d:60:6d:fc:4e:1f:11:b7:71:93:95:6e:
                    13:a5:69:de:e2:0d:f7:3c:a0:d7:e1:8a:dc:7a:9f:
                    9a:76:4e:0b:00:1d:d7:ef:24:27:51:e0:02:3f:dd:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:24:DB:4E:AB:2B:13:4F:20:A1:5A:D3:B2:39:54:20:4F:67:26
            X509v3 Authority Key Identifier:
                keyid:89:2C:B5:47:8D:A1:F9:08:83:BE:5E:6C:A0:13:6E:FF:D2:1F:AF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/892CB5478DA1F90883BE5E6CA0136EFFD21FAF48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:28:fb:06:a6:22:4b:bc:ba:15:95:8b:59:fa:85:e7:30:
         5d:c0:ac:9e:35:c6:05:8e:6f:74:11:e8:10:ad:20:dc:5f:44:
         0b:57:cd:14:2c:c8:3b:cc:54:e0:43:4b:5c:4f:ce:e2:6b:79:
         03:38:62:19:a8:57:e6:9a:12:06:e2:e7:03:95:61:ba:41:fb:
         81:ea:4d:60:79:24:03:d8:35:2c:da:ef:df:d3:93:2d:31:ad:
         d9:51:31:a6:a7:e7:bc:ed:be:09:7a:61:f4:86:da:a1:cc:d6:
         e7:92:86:98:a7:62:00:4e:e1:ac:fd:e9:94:2a:00:4b:35:d9:
         94:9d:0e:d2:0f:98:6d:71:e4:de:7a:b9:0a:76:09:88:a9:4b:
         c6:70:84:df:53:e9:4e:4e:6c:fd:05:16:af:a0:38:91:d9:00:
         47:fe:a5:58:e8:c3:f3:fc:c0:e4:5a:c6:39:0c:d6:d4:71:15:
         77:9b:74:fc:b8:cb:a2:d4:25:56:62:69:8e:62:24:ba:ab:56:
         73:06:b0:74:cc:01:75:33:c8:88:61:ea:eb:63:8d:d7:00:d7:
         97:53:d9:f5:05:d3:91:8c:31:12:d7:1c:4e:43:42:b4:78:ed:
         93:d9:ff:5c:d2:81:2e:8e:61:2d:07:fe:fe:2f:62:a1:e2:ed:
         ad:6f:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----