Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft
File:                     968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft (raw, json)
Hash identifier:          UeWOIPmEXlgySig2EyacrzWIbi6jNYSBHxc0lCjaV8c=
Subject key identifier:   50:41:19:66:9E:E3:37:27:5F:F7:67:DC:53:54:07:A7:23:F9:C9:B2
Authority key identifier: 96:8A:C0:4D:5F:AF:C6:AC:A0:A1:EA:82:43:EC:C4:47:99:90:A2:85
Certificate issuer:       /CN=968AC04D5FAFC6ACA0A1EA8243ECC4479990A285
Certificate serial:       4B275AEA8F41F2890CD5AFCB902C2A5842968083
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft
Manifest number:          FB
Signing time:             Thu 10 Oct 2024 11:30:09 +0000
Manifest this update:     Thu 10 Oct 2024 11:25:09 +0000
Manifest next update:     Fri 11 Oct 2024 13:41:09 +0000
Files and hashes:         1: 323830343a366662383a3a2f33362d3336203d3e20323730363739.roa (hash: T9v6omvGwL7F9tNHVu6mnw+A1p2+zucZ+citJuQMGX0=)
                          2: 968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.crl (hash: U4dZEwkTe1PyRLdwhXIMUWa81jw9z3+8Q8kJoirG+RA=)
                          3: 3138392e39302e3233322e302f32322d3232203d3e20323730363739.roa (hash: N/h6UGOWKlQmkXevQ9Z/2+exMI+OU4aFHyI0w5z5cQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:27:5a:ea:8f:41:f2:89:0c:d5:af:cb:90:2c:2a:58:42:96:80:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968AC04D5FAFC6ACA0A1EA8243ECC4479990A285
        Validity
            Not Before: Oct 10 11:25:09 2024 GMT
            Not After : Oct 11 13:41:09 2024 GMT
        Subject: CN=504119669EE337275FF767DC535407A723F9C9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:31:59:be:91:40:51:17:f6:23:ec:0a:e7:
                    3a:c9:ff:a3:ab:ac:75:02:61:6f:96:04:25:22:23:
                    ff:1b:95:29:1c:be:61:c1:74:c1:a6:50:59:f2:aa:
                    01:6b:69:79:ba:fd:6e:7d:ab:1c:f0:6a:56:8c:32:
                    5a:fb:34:8e:e4:88:50:e4:f7:a1:43:65:9b:eb:26:
                    95:41:42:66:7b:e8:96:6b:e8:aa:4b:31:14:93:0b:
                    2a:3f:71:62:29:1e:44:f2:ad:00:10:c2:3c:fc:0a:
                    04:dc:ed:bb:3f:9f:ad:2e:14:f0:84:bb:dd:3d:0d:
                    91:da:31:26:31:68:e1:5f:d4:2e:82:69:99:1a:3b:
                    57:01:4e:c8:fc:b3:94:a7:ec:fa:04:29:09:f9:1d:
                    d2:fb:df:15:d7:5c:ec:18:12:2b:76:7e:5e:aa:09:
                    98:68:d9:0d:e5:fb:5a:1d:97:f0:fd:95:41:eb:f6:
                    4a:f2:f5:8b:8c:3c:5e:5e:2e:18:e8:7d:ef:e5:7c:
                    dc:ab:9b:2c:d3:18:dd:5d:33:b1:d9:e3:69:6c:d2:
                    d5:9f:6e:ce:37:d4:fd:2f:5e:b1:a6:33:63:11:e2:
                    d1:3f:b4:09:7a:21:1c:6d:37:ca:30:dd:fd:a3:dc:
                    24:58:d4:70:5c:18:52:ad:5b:81:24:8d:36:8c:e9:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:19:66:9E:E3:37:27:5F:F7:67:DC:53:54:07:A7:23:F9:C9:B2
            X509v3 Authority Key Identifier:
                keyid:96:8A:C0:4D:5F:AF:C6:AC:A0:A1:EA:82:43:EC:C4:47:99:90:A2:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/1/968AC04D5FAFC6ACA0A1EA8243ECC4479990A285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b2:d6:41:c6:b7:9d:15:df:39:f8:06:61:0b:fa:44:91:c4:
         b6:a5:59:86:6a:b6:09:80:65:11:3e:ae:4d:6d:79:cb:54:e1:
         f8:51:76:a7:37:7c:22:9a:41:2f:da:67:44:3e:38:1e:31:0a:
         e5:32:1d:1d:a7:e2:30:bb:ab:72:3f:3f:63:45:ae:19:5b:b8:
         db:b7:19:67:2a:70:57:6e:65:4e:fb:68:fe:d2:31:46:55:ba:
         1e:a6:cd:1c:58:d7:9b:9c:7a:44:7b:a1:ac:44:5e:43:82:74:
         ed:63:76:78:b7:14:ab:56:8c:98:f7:4e:7f:63:3e:ba:5b:89:
         ac:07:34:69:dd:b8:d2:61:ad:cf:f5:3e:8b:8f:9e:20:e8:ac:
         4e:57:73:36:84:51:27:4b:11:b2:ff:37:48:c4:70:22:d7:c9:
         60:4b:a4:e4:84:39:30:f7:a6:73:87:c4:a0:31:1a:f7:c6:7d:
         71:70:b6:1b:aa:30:cb:07:ca:6e:ba:5c:f1:f3:af:72:1f:f8:
         2b:6f:c5:b2:92:1a:b5:a0:51:f4:5b:db:90:5e:88:de:dc:b7:
         fb:8e:14:e7:1c:0d:27:8b:29:33:03:b3:22:3c:60:52:9e:95:
         ff:14:d8:97:d0:0e:b0:46:f6:76:74:ad:6c:d7:38:26:ed:97:
         2b:60:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----