Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/37DD2B07DE1D14D1842FBA3503B43E9D242F138E.mft
File:                     37DD2B07DE1D14D1842FBA3503B43E9D242F138E.mft (raw, json)
Hash identifier:          t0YtEmRzu3GffbMAqXOHGeqqdIuV7JzdHVXNBmBL/nY=
Subject key identifier:   49:05:73:D1:94:26:07:36:C7:A2:13:54:42:C5:EA:7F:EE:7D:1C:41
Authority key identifier: 37:DD:2B:07:DE:1D:14:D1:84:2F:BA:35:03:B4:3E:9D:24:2F:13:8E
Certificate issuer:       /CN=37DD2B07DE1D14D1842FBA3503B43E9D242F138E
Certificate serial:       66AF3857F788AF224E84C7B5B7D3097FED29557F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37DD2B07DE1D14D1842FBA3503B43E9D242F138E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/37DD2B07DE1D14D1842FBA3503B43E9D242F138E.mft
Manifest number:          0119
Signing time:             Mon 11 Dec 2023 01:46:07 +0000
Manifest this update:     Mon 11 Dec 2023 01:41:07 +0000
Manifest next update:     Tue 12 Dec 2023 03:30:07 +0000
Files and hashes:         1: 323830343a363534343a3a2f33322d313238203d3e20323639343739.roa (hash: L+2yNAvk2MOhQGKk2yxvI+ys/xd1bHM/PTfPZa328wU=)
                          2: 34352e3138372e3133362e302f32322d3332203d3e20323639343739.roa (hash: spoW0Qc12MSHuALbuXDDOlFEQnI+76DKMnmGIcfS8sk=)
                          3: 37DD2B07DE1D14D1842FBA3503B43E9D242F138E.crl (hash: DjArEIjPOBWeepg8JNbvaTkIpESwHGb+AgmszShtod0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:af:38:57:f7:88:af:22:4e:84:c7:b5:b7:d3:09:7f:ed:29:55:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DD2B07DE1D14D1842FBA3503B43E9D242F138E
        Validity
            Not Before: Dec 11 01:41:07 2023 GMT
            Not After : Dec 12 03:30:07 2023 GMT
        Subject: CN=490573D194260736C7A2135442C5EA7FEE7D1C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:b0:98:56:da:9c:e9:a4:7b:28:54:d3:93:
                    24:e6:3d:d8:f2:23:92:8a:82:99:12:ec:9c:bb:e0:
                    b8:6c:ac:2c:4b:41:c7:80:8c:08:fd:a4:22:52:64:
                    66:f3:84:24:6a:62:1b:56:0a:bd:64:61:3e:4b:ec:
                    ee:62:ba:d3:54:a6:9a:ad:36:d7:c0:7e:93:70:44:
                    45:d7:87:8b:e4:86:b8:ef:a5:20:64:bb:de:5e:37:
                    8e:6e:d4:07:09:03:73:47:75:f1:32:80:ef:f8:10:
                    ac:ce:59:4b:ac:24:f6:1b:01:e2:fe:b8:ff:b6:af:
                    50:bc:48:81:00:f8:ee:29:b4:07:1c:6a:ec:2a:8f:
                    6e:f5:5b:a4:dc:23:da:72:14:e5:52:2d:41:c7:87:
                    b0:fe:ae:c8:9c:c7:3b:6b:53:a4:31:f7:34:85:31:
                    96:f6:cd:89:f2:25:27:59:9d:1a:b4:03:42:69:5e:
                    9b:25:ed:1f:00:cd:2f:fb:06:f7:d7:00:d3:5f:28:
                    6e:2e:79:70:ce:fd:91:03:de:a9:84:aa:ef:8b:f2:
                    f0:1a:63:0d:3a:90:4e:45:d9:f0:a3:f8:c8:88:7c:
                    64:16:a4:a6:cc:e7:0f:13:0e:a9:7e:3d:3c:49:dc:
                    1f:a5:b4:56:e4:3e:c0:8a:b6:a7:c7:2d:48:e5:7e:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:05:73:D1:94:26:07:36:C7:A2:13:54:42:C5:EA:7F:EE:7D:1C:41
            X509v3 Authority Key Identifier:
                keyid:37:DD:2B:07:DE:1D:14:D1:84:2F:BA:35:03:B4:3E:9D:24:2F:13:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/37DD2B07DE1D14D1842FBA3503B43E9D242F138E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37DD2B07DE1D14D1842FBA3503B43E9D242F138E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/37DD2B07DE1D14D1842FBA3503B43E9D242F138E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:be:7b:46:92:c7:6c:9e:40:de:f9:5d:05:22:d8:28:f4:9e:
         25:7b:32:82:2f:17:74:b3:c6:00:09:92:fb:be:1a:2c:bd:6a:
         fd:cb:dc:d4:7f:b3:39:83:a0:71:b8:9e:3d:04:5b:4a:bd:1a:
         7b:6e:6d:19:21:0b:42:af:42:42:00:bd:2a:c9:9c:fd:93:32:
         b1:0c:b9:66:68:62:1a:8f:10:f3:07:23:5a:32:59:2b:3e:43:
         d4:a1:bd:94:14:22:85:4e:cc:e8:da:7b:74:fe:3b:8c:13:1d:
         6d:4f:67:81:65:8f:d8:fd:da:d9:18:ae:e8:95:c7:1d:24:92:
         25:e3:19:93:ba:f3:a5:30:a6:4b:64:44:c5:f5:63:09:79:3b:
         ef:59:4a:3a:84:0b:25:78:8e:60:88:49:28:e1:ef:58:de:e2:
         17:a6:7c:1f:39:b0:39:c0:fa:07:31:e9:66:99:8e:b0:2b:34:
         bf:90:a8:63:78:2f:15:5e:94:2a:e6:aa:7c:02:97:b0:7d:23:
         ae:0a:a5:7e:88:c8:df:8f:f6:15:ed:67:9f:ff:60:64:c3:6e:
         86:b6:d2:10:72:d4:43:e2:0c:9b:e8:07:c2:48:fd:33:6b:c5:
         eb:8c:93:41:2f:f6:2e:65:89:52:3b:e2:e4:3c:3b:ab:89:2b:
         1c:77:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----