Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.mft
File:                     003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.mft (raw, json)
Hash identifier:          Huau2okf9DYApVF+sm2qikYeNfz9l0EILYkl3AKSlIk=
Subject key identifier:   86:3B:7B:79:C6:3A:E1:66:86:D9:19:FB:B7:0E:2D:5A:D2:CF:49:B7
Authority key identifier: 00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07
Certificate issuer:       /CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
Certificate serial:       3647D94D2528E3CA44723F9F93C1610B78C21C0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.mft
Manifest number:          0537
Signing time:             Sun 14 Apr 2024 23:53:01 +0000
Manifest this update:     Sun 14 Apr 2024 23:48:01 +0000
Manifest next update:     Tue 16 Apr 2024 02:41:01 +0000
Files and hashes:         1: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: v+ywNa/OoYY4LRNDxxlzPUeeBYmL/0i/dbnc+oMN6JQ=)
                          2: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: 2kRSev7YQAZ9ZbPeZ6w1qnPoLB7emIhEg3TAReS3bqc=)
                          3: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: J0BpXfywpSqWfNu05AUI65n9vdBi4tczur4r38nfGVE=)
                          4: 003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.crl (hash: 8dHopXBtMQRWBrCisY1C/4PkTaymV5R+gNqI30hNzUA=)
                          5: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: pXpLOHUs56MrwlP6fBYVFwYpuE7JNNexgyjbqoU2pNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:47:d9:4d:25:28:e3:ca:44:72:3f:9f:93:c1:61:0b:78:c2:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
        Validity
            Not Before: Apr 14 23:48:01 2024 GMT
            Not After : Apr 16 02:41:01 2024 GMT
        Subject: CN=863B7B79C63AE16686D919FBB70E2D5AD2CF49B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:cd:fa:65:df:32:49:70:50:0d:1a:f6:71:
                    a5:16:43:0e:51:5d:5f:5d:0b:b4:e5:ea:19:64:d9:
                    54:f6:b7:b0:b5:12:71:d4:21:3b:45:eb:b5:f7:83:
                    be:b7:6e:f6:64:3c:75:24:95:c5:c5:96:96:e2:5a:
                    0f:55:e3:cd:51:39:97:23:d2:18:97:35:e4:68:b6:
                    43:30:f2:b9:e5:63:31:28:22:f8:21:ec:ad:67:2d:
                    a2:d0:4a:6c:01:c1:82:f7:91:96:67:11:1a:d1:0f:
                    c2:65:34:f8:e4:9d:68:21:f6:25:a9:37:11:1c:d7:
                    e8:fd:82:a8:18:7b:35:ca:3e:fe:c6:2d:3f:24:39:
                    68:6c:e1:6d:d2:0b:66:84:9b:9f:7c:6c:1c:e3:0d:
                    24:78:c9:c4:04:50:44:ae:99:73:ce:f1:5f:a5:68:
                    dd:91:e5:89:c9:e4:9d:ee:9d:b5:9e:e1:aa:81:92:
                    44:a5:ee:1c:c3:37:d6:f6:45:7b:52:6a:e6:e2:fe:
                    f6:d1:11:7c:0e:c0:db:f8:6c:6d:21:23:59:f8:90:
                    1a:a3:5e:21:38:9f:27:6c:8f:64:c4:bb:70:a5:84:
                    d4:c5:55:86:ff:a1:f4:eb:2a:fe:81:6c:87:a9:43:
                    3f:4e:74:6e:bf:c4:ec:b8:aa:c0:24:fc:8e:0a:98:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3B:7B:79:C6:3A:E1:66:86:D9:19:FB:B7:0E:2D:5A:D2:CF:49:B7
            X509v3 Authority Key Identifier:
                keyid:00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:ad:01:73:52:47:d0:c0:bc:2b:3f:80:5d:d9:90:0c:f3:
         dc:46:a7:dd:30:71:00:7d:cc:c2:44:81:12:15:18:e3:25:2d:
         72:7e:ed:9e:9b:1a:a0:ac:0f:02:30:a3:e9:f3:2a:ba:77:83:
         91:1f:8f:fe:ed:4e:40:83:5e:2a:26:b1:d8:86:4f:b3:79:82:
         65:36:96:9c:bf:24:0b:0c:34:74:cd:7a:81:75:46:27:48:47:
         3b:82:5a:37:b3:ee:fb:cd:34:48:42:62:63:d2:99:e8:70:b4:
         e1:83:66:09:c6:9b:13:1a:47:2a:a7:b5:4e:a4:80:15:0c:a4:
         1d:b9:79:c2:34:63:30:8d:43:77:96:ea:7f:5b:ec:8d:1a:04:
         7f:b4:07:01:b2:c6:3e:b6:6b:f6:5b:5e:f6:ef:cd:28:e6:4a:
         4f:b2:90:02:16:62:1b:df:a4:1e:b4:07:53:0c:35:0a:dd:fc:
         0b:29:33:11:72:36:c5:18:e7:63:fb:8a:7d:b7:40:4c:36:fd:
         bd:a2:2a:19:a5:d8:07:07:8b:bc:e4:a2:29:b5:96:5e:07:15:
         cb:b9:b3:9f:1c:0a:5b:3b:12:ca:fc:5a:3b:64:02:9c:70:d6:
         20:6b:ca:b6:e8:91:c4:21:53:20:96:41:94:ed:2e:c2:0b:2b:
         0e:52:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----