Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/2B52B1DB686046175EE418BD9ACE67606D48092C.mft
File:                     2B52B1DB686046175EE418BD9ACE67606D48092C.mft (raw, json)
Hash identifier:          cZCztF5HBG8PJuqOcP7TdF5jj0s2bh3jOEE5WK6IUgI=
Subject key identifier:   06:0E:3F:26:15:46:94:E4:30:34:63:55:DB:3E:E2:33:D7:C6:20:07
Authority key identifier: 2B:52:B1:DB:68:60:46:17:5E:E4:18:BD:9A:CE:67:60:6D:48:09:2C
Certificate issuer:       /CN=2B52B1DB686046175EE418BD9ACE67606D48092C
Certificate serial:       1C930B60AAFD3D4DC0C33021B3BDB0A3529B6B2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B52B1DB686046175EE418BD9ACE67606D48092C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/2B52B1DB686046175EE418BD9ACE67606D48092C.mft
Manifest number:          01BC
Signing time:             Sun 14 Apr 2024 23:07:01 +0000
Manifest this update:     Sun 14 Apr 2024 23:02:01 +0000
Manifest next update:     Tue 16 Apr 2024 02:15:01 +0000
Files and hashes:         1: 3137372e31302e38302e302f32312d3232203d3e20323632383436.roa (hash: TzR63HT4ZmjJB6WeB+QlulgjYL/3YQoslBCPUcOxMNE=)
                          2: 2B52B1DB686046175EE418BD9ACE67606D48092C.crl (hash: louiU/+5UBwGvlfHdR302vfPU1AJ/e1o8ftjRZbIRf0=)
                          3: 323830343a333936633a3a2f33322d3438203d3e20323632383436.roa (hash: 6CvtEruXqYKxi04AY2NaEYbUHKIjRTZWXyVZ9f+j24w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:93:0b:60:aa:fd:3d:4d:c0:c3:30:21:b3:bd:b0:a3:52:9b:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B52B1DB686046175EE418BD9ACE67606D48092C
        Validity
            Not Before: Apr 14 23:02:01 2024 GMT
            Not After : Apr 16 02:15:01 2024 GMT
        Subject: CN=060E3F26154694E430346355DB3EE233D7C62007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:af:55:23:73:5f:72:ca:9e:9b:70:6d:08:
                    57:e0:00:bc:5b:8a:95:0d:b9:2f:0c:da:b3:2b:17:
                    d9:87:02:f4:7b:e5:19:d9:d8:61:6a:7d:e6:01:9f:
                    2c:e9:8e:e8:a5:e9:88:42:10:72:54:ff:2b:ce:4b:
                    b5:91:c1:ac:4d:5c:92:24:52:53:27:2c:f4:ff:1b:
                    82:11:a7:18:d0:2d:f2:bb:4c:6f:47:a8:a9:50:97:
                    3a:a8:7e:10:17:d9:14:c3:57:64:e2:00:cb:43:e2:
                    a1:eb:ee:0f:69:53:05:7e:d5:1f:e5:12:8c:54:d2:
                    e0:5e:c1:23:97:1e:5f:20:83:04:6f:73:10:72:f8:
                    d6:b7:84:2c:7f:20:7e:47:f1:79:f5:21:85:62:d8:
                    4d:4f:91:9e:65:ce:f6:d4:9e:29:24:47:ef:5f:c5:
                    01:26:e7:93:5e:ca:40:a6:76:8e:0b:71:ae:96:12:
                    50:14:eb:3c:ec:d5:e7:35:eb:a5:17:d2:f1:17:20:
                    6f:48:a9:4b:d5:0b:ff:81:71:50:1d:40:f2:ba:f2:
                    9d:ec:e5:15:67:7e:b1:1c:ed:77:09:0c:38:48:a6:
                    8d:ab:b6:af:8e:10:5c:e7:02:13:30:88:41:3e:7d:
                    2a:cc:8b:98:f5:2e:40:f3:de:62:26:a5:2f:8f:b3:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:3F:26:15:46:94:E4:30:34:63:55:DB:3E:E2:33:D7:C6:20:07
            X509v3 Authority Key Identifier:
                keyid:2B:52:B1:DB:68:60:46:17:5E:E4:18:BD:9A:CE:67:60:6D:48:09:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/2B52B1DB686046175EE418BD9ACE67606D48092C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B52B1DB686046175EE418BD9ACE67606D48092C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/0/2B52B1DB686046175EE418BD9ACE67606D48092C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:e2:21:74:02:c2:50:06:f4:ce:13:4f:d6:86:42:1d:13:
         d3:4e:44:ce:4f:d6:7a:9c:5a:27:87:61:67:3f:da:c0:48:dc:
         41:fc:97:ac:3b:08:96:a8:02:2a:3e:a5:ed:c8:42:eb:0f:fc:
         7d:0a:1d:53:fc:d5:00:d3:ab:71:25:09:b4:a3:05:86:1f:84:
         6f:4b:00:b6:a9:f0:27:a4:c2:d1:74:dc:a1:68:93:8d:e3:15:
         1d:7b:8e:05:b0:c5:a3:ba:2f:93:6a:04:1b:b8:8b:97:d9:30:
         38:dd:64:d1:2c:45:21:9b:75:2b:a0:64:7b:f7:2d:71:4c:93:
         6f:a0:96:c7:ae:90:d1:d8:13:bf:7a:58:44:02:c5:f3:9b:45:
         07:7a:d4:0a:91:cc:68:d3:ad:ce:29:86:ef:ac:b1:b4:6d:99:
         5e:43:31:b7:01:7a:e1:6a:4c:61:be:f7:c2:22:5e:2e:de:bb:
         91:b9:b7:1e:c2:e4:71:6f:00:73:5a:13:83:22:1e:c8:53:d1:
         be:58:13:f5:81:c9:74:4f:60:11:55:82:e2:05:0b:95:69:38:
         fb:04:93:b2:32:a2:90:99:81:98:1a:f0:a9:7a:ca:3b:84:75:
         55:d0:55:7f:40:94:ea:5b:6e:ba:dd:2f:a4:35:73:94:40:64:
         f5:5a:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----