Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.mft
File:                     033A18EDCCDDC601AF080AF01923CF610C9004AA.mft (raw, json)
Hash identifier:          VBaJd8jK9ApV1ppcU5u2x+3c12VzWkiz/TqQB33y6Qc=
Subject key identifier:   1E:2B:DA:97:1A:B2:EF:7E:1F:91:21:68:4C:29:A7:3C:2B:95:77:4F
Authority key identifier: 03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA
Certificate issuer:       /CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
Certificate serial:       39135A3722D303CFDB607F5A19AE7DC676824914
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.mft
Manifest number:          03F1
Signing time:             Mon 15 Apr 2024 06:40:00 +0000
Manifest this update:     Mon 15 Apr 2024 06:35:00 +0000
Manifest next update:     Tue 16 Apr 2024 06:46:00 +0000
Files and hashes:         1: 033A18EDCCDDC601AF080AF01923CF610C9004AA.crl (hash: Wle5g9vBkS9GCDCA7P5OkEKKrCiLUh+J9HKintTtqII=)
                          2: 3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (hash: LcEFq5yzVMJswjDkAG+Us4Jd5SVx03FxmgHJHU+vDtc=)
                          3: 323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (hash: tmwweGr4s2fNSDPJWhveUfOCDGEB19d6pscI3rx2JpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:13:5a:37:22:d3:03:cf:db:60:7f:5a:19:ae:7d:c6:76:82:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
        Validity
            Not Before: Apr 15 06:35:00 2024 GMT
            Not After : Apr 16 06:46:00 2024 GMT
        Subject: CN=1E2BDA971AB2EF7E1F9121684C29A73C2B95774F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:bf:67:10:e4:ea:b5:1c:47:68:78:69:0a:
                    2e:5d:d4:92:2f:44:10:26:da:1f:59:85:c0:39:81:
                    14:f4:38:70:bb:cf:eb:a4:d3:b3:2d:f1:52:b3:88:
                    91:2a:36:ee:87:b2:6d:fc:70:49:cf:ed:c4:a3:a1:
                    48:44:1f:7d:0f:8d:21:48:89:b2:22:7e:cd:98:13:
                    c6:b1:94:a3:74:c6:68:c1:59:4d:37:99:b8:a8:35:
                    8f:35:45:5f:d2:1c:e3:d1:70:3e:60:63:ad:d2:43:
                    94:97:54:02:cd:c2:8d:0c:a8:ea:97:a4:93:2f:4c:
                    88:ab:3c:55:2e:aa:c0:0d:6f:10:f5:38:74:27:11:
                    b3:e2:cb:d2:60:33:e4:d3:85:f1:26:4e:5d:26:a2:
                    c9:c6:f2:51:8b:95:95:53:cf:af:eb:6c:92:10:84:
                    7f:23:74:f0:16:81:77:a0:f7:92:a4:58:38:bf:3f:
                    c5:1f:b0:b1:37:d1:8c:9c:98:f3:67:1a:56:4e:19:
                    5a:82:46:53:86:e9:e1:f3:c2:f3:ef:ce:8f:99:f4:
                    58:6f:0b:9b:c8:74:ba:12:5f:05:28:a6:fb:5f:93:
                    82:01:1b:5d:9e:59:49:db:83:f1:97:b2:4a:3e:0f:
                    ee:54:ad:4e:9e:f2:8e:65:d4:08:ff:a6:9f:9b:7a:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2B:DA:97:1A:B2:EF:7E:1F:91:21:68:4C:29:A7:3C:2B:95:77:4F
            X509v3 Authority Key Identifier:
                keyid:03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:02:ad:f5:f5:7e:a9:f9:f2:b2:6e:03:dd:66:ce:86:45:8a:
         fb:40:9c:fe:a7:d5:ce:db:62:ac:4c:13:8b:9a:2b:b4:0d:b2:
         9d:63:3a:41:60:cc:26:97:98:54:e2:57:5d:55:29:b4:de:bf:
         50:79:9d:ab:9e:6a:b9:3d:78:2f:0d:a0:73:57:bf:eb:51:6d:
         b4:db:49:3b:70:b4:d2:cf:91:9b:1f:c2:72:48:1e:9e:71:96:
         38:15:9a:cc:7b:5f:ad:f1:37:97:4f:b3:dd:98:a1:5d:4d:22:
         ed:8b:71:f9:52:b0:10:25:1a:3a:7b:b3:69:d4:ef:d7:cb:a6:
         b1:f4:32:3e:36:18:7d:ab:50:ef:4b:51:16:44:f5:55:a2:ab:
         30:6f:d6:0e:18:02:86:75:d2:3b:5b:b9:18:36:22:5a:ce:1f:
         8e:25:af:64:d5:67:3a:d1:33:ed:6c:c4:00:08:cd:51:51:c2:
         77:3b:e5:56:08:fc:f6:79:62:df:24:52:16:76:11:d6:d8:aa:
         d0:b1:b5:d5:49:99:83:be:4f:60:b9:3c:3a:c2:cd:dc:a9:61:
         84:f0:c9:57:bd:03:63:2f:8e:cd:89:00:4d:a9:cc:8a:17:82:
         31:d1:79:ac:d1:36:43:00:f7:47:36:c4:c4:7e:35:01:cf:17:
         b9:b0:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----