Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.mft
File:                     1B2C70C653D3E71D6F3474E6BE60A22AA1244095.mft (raw, json)
Hash identifier:          nRGIpYkvIBDOUvnLdHFq/C9KsQXC4m1CH7CWywujZwU=
Subject key identifier:   0A:E8:E6:A1:F3:7A:D7:FB:42:C0:6E:B7:4F:0E:CE:39:17:C3:9E:30
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       7141AC0A6D2FB4D9946815BDAE10F5E6367A3A90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.mft
Manifest number:          CD
Signing time:             Sun 14 Apr 2024 18:25:16 +0000
Manifest this update:     Sun 14 Apr 2024 18:20:16 +0000
Manifest next update:     Mon 15 Apr 2024 21:53:16 +0000
Files and hashes:         1: 34352e3138342e36352e302f32342d3234203d3e20323639333230.roa (hash: AitnVEVsDwNrKRTt+EbQDcRcF5ymDWuKk08JZPxm2ZM=)
                          2: 34352e3138342e36362e302f32342d3234203d3e20323639333230.roa (hash: KVGkOxL6v7T4VG1PS+EbbK6ErfKmHSPgZjVuhLJoRpc=)
                          3: 34352e3138342e36372e302f32342d3234203d3e20323639333230.roa (hash: 5bWhQOJXM7Ov30VRbovpDv2y3cstksUNJuSXHb8EoMc=)
                          4: 1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl (hash: TqkriTtfl6NtAyUu97M8s46VK78q2uYfv11Bt/aLcQE=)
                          5: 323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa (hash: DksDgHnu2N23znAQ8Pspa9hTRjQCtW89WnPQi8CMSAA=)
                          6: 34352e3138342e36342e302f32342d3234203d3e20323639333230.roa (hash: mppgFnVsoUogaCMaeQ6xMplum0cOZ72gYFT/T/5cPJc=)
                          7: 323830343a363264303a3a2f33332d3333203d3e20323639333230.roa (hash: YuAbZZMsfWNKVcxykPFUV35sCucQdx/kVA4yk8S5Mmw=)
                          8: 323830343a363264303a633030303a3a2f33342d3334203d3e20323639333230.roa (hash: m+pLXRefZ2NMmDoRmQlGGcYXnPriH/t7P73SQd2VI1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:41:ac:0a:6d:2f:b4:d9:94:68:15:bd:ae:10:f5:e6:36:7a:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Apr 14 18:20:16 2024 GMT
            Not After : Apr 15 21:53:16 2024 GMT
        Subject: CN=0AE8E6A1F37AD7FB42C06EB74F0ECE3917C39E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:05:57:04:c3:be:8a:cb:52:c0:2e:8d:f3:
                    23:4d:bc:eb:74:39:b3:e6:e8:02:fd:9b:8e:4b:a6:
                    7c:4a:39:29:ec:dc:ba:d4:49:79:82:a9:81:f0:4a:
                    74:44:c2:f9:47:9e:6d:8a:a1:3a:1a:19:b7:39:95:
                    f0:db:8b:ca:93:43:90:17:46:74:0e:3a:c0:67:c3:
                    6d:1d:86:6c:0e:c7:1b:2f:49:e3:30:48:42:8a:46:
                    f3:00:92:16:26:a2:42:2e:7a:19:ac:a3:49:f7:c8:
                    ec:dd:47:b8:9f:65:5b:ca:a6:cc:4a:be:f2:af:da:
                    36:67:66:13:89:66:01:56:30:81:b5:1f:61:75:79:
                    32:bb:e7:ca:cc:96:70:09:cd:7d:bc:9c:35:15:81:
                    3c:c0:34:74:dc:ea:eb:86:1c:d7:0d:f0:27:b9:cc:
                    1a:4a:7c:b9:81:74:f6:5f:8f:6d:63:d5:d3:93:e8:
                    fd:13:59:99:a3:4e:75:9a:c5:30:4a:5e:91:61:cc:
                    bd:24:65:50:44:37:dd:ea:e5:77:d4:af:89:9f:8f:
                    9d:74:fd:38:ff:fe:9c:6f:c0:50:69:7b:39:b4:15:
                    e7:6c:01:e7:9b:82:52:13:40:cf:6e:99:cc:21:8d:
                    2b:1f:12:60:9a:ad:90:08:39:f6:5f:22:ee:20:40:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:E6:A1:F3:7A:D7:FB:42:C0:6E:B7:4F:0E:CE:39:17:C3:9E:30
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:72:ea:de:3c:33:c6:56:b6:2f:2e:3c:9b:28:b3:ce:aa:45:
         27:cd:e4:a3:07:3a:6f:37:eb:7e:e9:f5:2c:dc:56:c9:61:49:
         5f:5b:bb:1a:33:8d:90:7e:91:80:f5:be:0c:11:8c:23:e0:7c:
         b4:09:76:bc:b2:fc:d2:6f:7f:51:db:30:1e:95:5e:6e:10:80:
         73:dd:d4:24:6c:71:22:a6:4e:0e:3b:9b:9f:a4:7e:91:1e:ec:
         55:33:6b:50:34:8e:c7:f3:80:97:76:5f:a0:0b:c4:61:7c:04:
         b7:a4:30:46:a2:9f:c5:20:e6:89:55:37:38:d8:74:c2:02:75:
         17:3c:47:5b:76:57:ee:46:68:ad:d3:a3:ae:15:d9:63:04:bc:
         49:f1:d8:31:8f:a2:58:70:4d:1d:25:2c:5e:e5:04:e5:5e:9d:
         f9:e2:25:65:fe:22:2e:b6:aa:ed:2e:cd:8c:f9:7e:a2:34:7b:
         57:dc:e1:43:31:60:2b:ca:fe:7e:4b:38:17:a8:68:28:f7:08:
         9b:71:a7:16:43:1b:42:c7:33:56:10:f9:a0:e9:e9:33:86:4b:
         33:99:0b:33:01:8c:ed:29:31:ce:fc:c9:81:9e:b1:bf:5f:dd:
         7f:de:99:70:de:89:72:5e:26:bb:b7:d4:c6:7e:b2:03:20:47:
         e1:9f:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----