Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.mft
File:                     ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.mft (raw, json)
Hash identifier:          W5w4eTfRiaPFMO8dEzPMlZm+QcQeH/K62gxno+Vc8P8=
Subject key identifier:   79:C9:1B:4C:EC:A5:69:5F:66:D3:BB:3A:C0:8E:FA:08:84:9D:EB:28
Authority key identifier: AB:B1:FC:9F:C7:5D:A9:1B:C5:A6:71:42:27:D1:99:CA:D5:6D:80:3F
Certificate issuer:       /CN=ABB1FC9FC75DA91BC5A6714227D199CAD56D803F
Certificate serial:       414349364C573C070D0874CF3FCF07E0065F8B06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.mft
Manifest number:          2D
Signing time:             Fri 29 Mar 2024 05:39:20 +0000
Manifest this update:     Fri 29 Mar 2024 05:34:20 +0000
Manifest next update:     Sat 30 Mar 2024 06:38:20 +0000
Files and hashes:         1: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: MxENFyb6o6wi1JT7SFqBsDnrc4Kl1hqgmVlDnoEluZA=)
                          2: ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.crl (hash: FEAzox77TKitg69Bu2ioElbEHeJq2v6b5HIgyfkccM0=)
                          3: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: 1rzgzKw5HiQdbokuoa0sfNgmF7s7HeDVVzm9nNMDGz0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:49:36:4c:57:3c:07:0d:08:74:cf:3f:cf:07:e0:06:5f:8b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB1FC9FC75DA91BC5A6714227D199CAD56D803F
        Validity
            Not Before: Mar 29 05:34:20 2024 GMT
            Not After : Mar 30 06:38:20 2024 GMT
        Subject: CN=79C91B4CECA5695F66D3BB3AC08EFA08849DEB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:d2:2c:f8:51:ff:c9:a4:39:af:78:c4:b5:
                    51:12:32:8f:44:c6:2d:2a:04:30:f9:c3:29:55:c6:
                    1c:47:39:0e:4b:42:33:ea:82:86:da:fc:90:c5:5b:
                    b9:4c:fd:a5:ad:94:37:dd:a6:eb:9a:b7:33:d9:dc:
                    9d:d9:72:55:74:90:8e:3f:79:d3:38:3d:38:c5:1f:
                    23:e8:d0:5a:9d:9c:0a:bf:5c:7c:2a:ce:ee:af:c1:
                    7c:36:b2:18:ad:4f:24:a7:ce:13:ff:f6:e1:65:70:
                    6a:fa:a3:b7:09:b9:e3:39:16:2f:ba:f3:13:71:48:
                    db:ab:0d:a0:1a:08:a2:dc:93:de:8d:d2:53:67:e3:
                    eb:59:af:da:4d:bd:a6:cd:5d:e3:72:a6:0a:e0:8c:
                    ce:cc:19:20:b5:14:b7:80:fb:1d:de:18:66:e6:0a:
                    e8:6d:31:3d:cd:33:86:4a:5c:87:09:8e:f0:71:0b:
                    67:0b:14:ad:88:5e:73:2d:63:70:ff:33:6c:49:dc:
                    60:ab:f3:d8:a4:55:b2:83:41:8b:38:32:bf:a5:9a:
                    98:15:44:20:68:fc:7f:ff:32:5e:f7:72:aa:f1:c0:
                    ca:ff:ff:b3:31:7f:64:9f:a7:66:63:c4:63:99:8e:
                    75:8c:3d:73:e7:96:97:35:aa:c8:ce:5b:73:81:a7:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:1B:4C:EC:A5:69:5F:66:D3:BB:3A:C0:8E:FA:08:84:9D:EB:28
            X509v3 Authority Key Identifier:
                keyid:AB:B1:FC:9F:C7:5D:A9:1B:C5:A6:71:42:27:D1:99:CA:D5:6D:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/ABB1FC9FC75DA91BC5A6714227D199CAD56D803F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d6:16:3c:a3:90:ca:4c:f9:c5:dc:35:82:52:ff:65:0d:7f:
         ef:16:7b:1f:7e:52:b6:a6:f5:e6:2e:b0:ba:39:24:94:ae:48:
         7f:14:48:a7:8b:04:52:f8:74:5d:58:8d:17:c8:cf:ad:df:59:
         b4:0b:13:72:c7:2b:7a:62:fe:c7:67:35:ce:03:1e:17:06:a8:
         7b:14:af:4a:fc:d8:8b:4a:95:1f:d7:70:e1:f8:cf:e9:da:6e:
         ca:ae:38:99:3f:03:0c:c5:52:1d:4c:eb:6d:d1:ae:6b:5d:8a:
         db:83:c4:23:22:56:3d:2e:c6:7c:09:a5:48:19:ef:ab:a7:c4:
         e7:b6:2d:a2:5d:18:89:15:28:03:4b:ab:45:4d:13:47:9f:42:
         02:d9:fa:f9:5b:69:19:63:dd:5c:f1:d6:0c:64:a5:51:88:5a:
         43:ca:73:96:1a:72:5d:fb:30:ab:55:d5:79:7e:40:c6:ae:65:
         e5:af:45:87:36:c9:62:98:6f:5c:ba:0c:6c:cb:75:8f:45:14:
         26:7f:9a:a2:10:27:75:1d:ea:dd:e2:83:28:33:90:41:f4:8c:
         31:42:eb:f6:e4:a4:e1:cf:b7:9e:11:2b:91:f7:11:f6:3b:48:
         06:77:36:94:fc:b9:28:5e:8b:f4:79:76:ca:8a:79:2a:97:98:
         8f:44:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----