Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.mft
File:                     09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.mft (raw, json)
Hash identifier:          45u1m3gTtR+dskCVZhCHz4y95+eDfzvzZ7vGsBDe4PU=
Subject key identifier:   0B:0D:1A:21:26:B1:0D:E4:37:44:BD:8C:EC:5E:93:A1:40:81:DA:86
Authority key identifier: 09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C
Certificate issuer:       /CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
Certificate serial:       69DCB934967E038165B4576C060FFD09DAF99064
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.mft
Manifest number:          38
Signing time:             Mon 15 Apr 2024 10:14:58 +0000
Manifest this update:     Mon 15 Apr 2024 10:09:58 +0000
Manifest next update:     Tue 16 Apr 2024 12:20:58 +0000
Files and hashes:         1: 34352e3138372e35362e302f32322d3234203d3e20323639353436.roa (hash: 2eCifqIKjRDORGdhl5mNIvhtQpVsTKZ5rD0I7urT6sU=)
                          2: 323830343a363634383a3a2f33322d3332203d3e20323639353436.roa (hash: 4SBz9PzAzuR4hWr/o5QD5lJUwbA1z8oYSZ7dSX+G56k=)
                          3: 09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.crl (hash: oot+kaPgJlAgx8zIQ7Cm4ZoEUjzpGrMsGlxk7FoxDVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dc:b9:34:96:7e:03:81:65:b4:57:6c:06:0f:fd:09:da:f9:90:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C
        Validity
            Not Before: Apr 15 10:09:58 2024 GMT
            Not After : Apr 16 12:20:58 2024 GMT
        Subject: CN=0B0D1A2126B10DE43744BD8CEC5E93A14081DA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:84:1b:f1:e9:f8:13:33:9c:63:7d:3b:b1:
                    d1:b7:b1:bf:d1:25:a1:dd:53:f2:54:d8:12:04:81:
                    17:d7:3e:3c:9f:c5:e5:5a:36:5a:59:00:8d:ae:68:
                    73:bc:a5:08:ee:99:41:47:13:30:80:44:87:15:da:
                    e0:b3:33:d9:b7:6e:52:53:ab:1b:d0:3a:5f:4b:80:
                    49:a1:01:cc:67:e7:51:ff:82:e7:be:57:0e:e1:2a:
                    b3:fa:1e:6c:1e:91:fe:99:29:ea:a4:ee:4e:ee:cf:
                    bb:4d:db:7d:1d:b1:45:0d:51:d4:0c:9a:5a:66:0d:
                    fd:0e:5c:24:b5:4b:3c:bd:b4:39:c9:69:05:f5:f8:
                    e6:aa:c9:06:ac:f7:01:c8:6e:e0:05:9c:5c:df:ff:
                    81:9e:71:7d:ce:89:ae:5d:75:ec:c3:e2:4e:f2:46:
                    77:d2:ef:bf:08:74:85:cd:a9:5e:8c:c1:a6:21:65:
                    39:15:19:a6:3a:a3:39:8b:fa:d5:7b:95:0e:e3:3a:
                    a3:17:75:5c:cd:1f:aa:1f:99:17:f5:b0:ab:b4:21:
                    83:89:c4:11:0d:2b:68:f8:58:e7:65:e0:61:a7:09:
                    00:47:44:81:00:14:4b:44:78:e0:9e:d4:b3:1e:5f:
                    42:31:2f:e2:55:eb:af:07:1f:59:76:4d:c3:70:7e:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:1A:21:26:B1:0D:E4:37:44:BD:8C:EC:5E:93:A1:40:81:DA:86
            X509v3 Authority Key Identifier:
                keyid:09:F8:FC:D6:DF:30:EE:8E:51:B0:8B:F2:0A:61:B5:C9:16:23:6B:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/09F8FCD6DF30EE8E51B08BF20A61B5C916236B0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ed:10:6e:ac:89:c0:08:a5:c8:55:4d:ba:49:eb:1c:97:21:
         12:e5:20:98:88:fd:5b:04:cd:35:dd:67:b5:09:81:fc:32:4b:
         00:41:21:05:f1:e4:60:85:fc:97:66:44:83:38:2d:f1:2e:62:
         02:5c:fb:99:12:55:39:25:3a:63:fa:ec:82:09:be:ee:b0:f9:
         ed:14:f6:aa:01:cb:30:63:70:19:96:1f:5b:5c:aa:78:fb:59:
         77:fe:88:a5:9a:37:98:e7:91:63:e2:d6:75:f6:57:ce:c2:15:
         09:69:c8:39:04:9c:41:99:b0:7b:fa:20:bb:8f:ef:e7:6c:f0:
         82:af:82:13:00:4f:67:6f:cb:ae:f4:87:a8:47:87:52:10:d9:
         e8:db:47:12:25:ec:1a:0a:39:6e:37:72:8d:49:00:3a:6d:fc:
         4a:33:60:d7:56:9a:8b:44:84:18:3c:ed:47:47:54:da:8f:bd:
         25:e3:ee:57:e2:18:e2:0e:82:06:a0:71:a5:31:43:ae:4a:5d:
         aa:45:1f:67:05:aa:7d:bd:60:ad:bb:90:e1:8a:3f:b1:3c:db:
         4c:38:15:59:01:e8:0c:fc:ba:36:a9:2f:b1:ad:ff:4d:2c:c2:
         79:ec:b3:65:9f:a8:f3:55:1f:20:bf:58:02:24:3c:06:55:5f:
         85:39:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----