Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.mft
File:                     35FC7024265CE242898B3F38745C5FE60CAA741B.mft (raw, json)
Hash identifier:          fIef4XJXOf5V1rHauMUVQ8X8tFRyL5/QHmBY4HMRaVU=
Subject key identifier:   A6:C5:79:CA:C0:26:E6:47:50:D8:9E:22:95:17:67:55:04:6B:E3:EA
Authority key identifier: 35:FC:70:24:26:5C:E2:42:89:8B:3F:38:74:5C:5F:E6:0C:AA:74:1B
Certificate issuer:       /CN=35FC7024265CE242898B3F38745C5FE60CAA741B
Certificate serial:       7D547F6880A748160C0F8C1B4338F9674ACC6F8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FC7024265CE242898B3F38745C5FE60CAA741B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.mft
Manifest number:          43
Signing time:             Mon 15 Apr 2024 11:12:41 +0000
Manifest this update:     Mon 15 Apr 2024 11:07:41 +0000
Manifest next update:     Tue 16 Apr 2024 13:52:41 +0000
Files and hashes:         1: 35FC7024265CE242898B3F38745C5FE60CAA741B.crl (hash: k0Sd1UQ/dauAFprglTLNynyoMEJ2w4NbLf7yT1ni9EE=)
                          2: 323830343a373564343a3a2f33322d313238203d3e20323731303732.roa (hash: DItKIxnUN5JGQruDzBicNYN/sqoNEQ969OfvMvuQP2A=)
                          3: 3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa (hash: SJKU6cpNaqiq5Dys+riQzwYyC+/jM8ZEHSV9fERFe9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:7f:68:80:a7:48:16:0c:0f:8c:1b:43:38:f9:67:4a:cc:6f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FC7024265CE242898B3F38745C5FE60CAA741B
        Validity
            Not Before: Apr 15 11:07:41 2024 GMT
            Not After : Apr 16 13:52:41 2024 GMT
        Subject: CN=A6C579CAC026E64750D89E2295176755046BE3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:5c:5f:da:eb:e4:6c:63:20:c3:5a:eb:6e:
                    12:55:69:12:5a:28:9f:69:22:2d:36:6d:63:d4:3c:
                    bc:b9:6a:f4:26:2c:e7:29:4c:db:40:d3:00:33:38:
                    a0:79:05:5c:bc:b1:22:f4:cd:52:53:0f:a2:a9:b8:
                    f1:c8:d7:10:fb:bb:75:20:59:ad:db:7f:be:b7:c5:
                    07:0f:09:83:bb:92:17:fe:be:77:1c:30:72:0f:41:
                    a0:db:bf:9a:f3:84:cd:dc:2b:fa:6c:06:b7:58:bf:
                    4b:68:03:38:ab:2b:ee:25:e2:32:a0:c8:c0:2d:c3:
                    da:7e:6d:7f:82:ba:8c:ea:c9:61:12:b9:29:4c:50:
                    4e:e0:64:bc:bc:ff:15:3b:7d:65:3a:8b:2a:c6:9c:
                    d4:4b:15:c8:79:63:ef:0c:82:23:7c:02:ac:94:db:
                    35:6e:37:e4:36:25:fb:98:36:cf:65:d1:8e:d1:b2:
                    cd:5a:ad:be:d4:a9:94:46:79:90:58:c8:00:cf:3f:
                    52:b9:05:e5:23:4b:d0:08:17:c5:a8:c1:fa:e1:40:
                    10:67:ca:e4:90:e6:30:52:e2:6b:a9:95:3c:f2:f7:
                    be:c9:00:7e:c7:fb:25:76:b7:86:6f:36:d6:e5:9b:
                    55:f2:17:b8:e2:86:ff:3c:69:18:db:89:a6:9d:e7:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:79:CA:C0:26:E6:47:50:D8:9E:22:95:17:67:55:04:6B:E3:EA
            X509v3 Authority Key Identifier:
                keyid:35:FC:70:24:26:5C:E2:42:89:8B:3F:38:74:5C:5F:E6:0C:AA:74:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FC7024265CE242898B3F38745C5FE60CAA741B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:05:8a:ca:9a:47:19:b5:7d:de:2a:11:df:9b:1f:3c:ac:
         bb:69:fc:82:aa:41:0a:88:8a:de:47:93:56:ef:42:00:13:da:
         7b:c0:2a:8a:0d:69:b7:69:65:10:3e:25:e7:8a:8a:e5:35:7f:
         20:59:cf:3b:ac:dc:b4:3b:42:77:e2:14:8c:54:e9:f7:0b:8d:
         d2:ad:74:8e:07:0a:51:36:a9:26:c6:8a:41:46:22:90:1a:9c:
         94:f5:b3:c2:3e:6b:93:a7:25:e7:31:31:91:cf:83:37:2a:2b:
         5a:5f:0c:50:72:ab:9d:df:6b:4f:05:ab:0f:b2:37:15:dc:59:
         09:9b:c7:81:1f:b4:22:cd:49:fd:bd:38:b7:63:8d:de:2e:a8:
         6b:2a:89:0e:58:ea:50:84:0d:37:bf:c3:1b:c7:98:e2:01:fe:
         9f:6c:52:4d:75:55:b1:a3:6c:26:9f:42:eb:0f:fb:9c:0d:b2:
         d1:6d:8d:e6:72:61:5c:88:a5:95:9e:dd:da:b2:e1:f3:54:88:
         ff:bb:43:4a:53:7d:13:f9:e9:a2:23:88:dc:ab:62:f6:d4:0d:
         15:3a:6c:5b:d5:eb:25:3a:4a:42:ca:d3:5b:f2:a3:5c:72:0e:
         cd:77:b7:6f:57:d4:3a:64:87:74:c8:21:0c:d1:c6:04:c4:1a:
         1e:4b:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----