Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.mft
File:                     21AE386CAD3039E4C970C824F769FF2366BED33B.mft (raw, json)
Hash identifier:          tsY+MhMDgjRXnHVqkSxXkjqLt99y/G+fe9LydDVbatM=
Subject key identifier:   2C:81:17:A7:74:A9:34:8F:04:1E:45:34:3B:ED:2A:83:37:60:8A:07
Authority key identifier: 21:AE:38:6C:AD:30:39:E4:C9:70:C8:24:F7:69:FF:23:66:BE:D3:3B
Certificate issuer:       /CN=21AE386CAD3039E4C970C824F769FF2366BED33B
Certificate serial:       3895E5378F6088ACAFD5E7B4D5305421542127C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21AE386CAD3039E4C970C824F769FF2366BED33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.mft
Manifest number:          76
Signing time:             Wed 16 Oct 2024 11:05:26 +0000
Manifest this update:     Wed 16 Oct 2024 11:00:26 +0000
Manifest next update:     Thu 17 Oct 2024 14:23:26 +0000
Files and hashes:         1: 21AE386CAD3039E4C970C824F769FF2366BED33B.crl (hash: WwkZS2aNsniQgYkQH2egy6TtpxYrH7blMRSLxEX8yKw=)
                          2: 3137372e38342e3234382e302f32312d3234203d3e203532373331.roa (hash: OPvdg3sYLmZGzIufIg3ekW1pT4fApYUG+R4Issi+OpE=)
                          3: 323830343a323839303a3a2f33322d3332203d3e203532373331.roa (hash: srnKUvyRAgt6yMC6XemsbFr2pZo7A6pTEtw/LghLZvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:e5:37:8f:60:88:ac:af:d5:e7:b4:d5:30:54:21:54:21:27:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AE386CAD3039E4C970C824F769FF2366BED33B
        Validity
            Not Before: Oct 16 11:00:26 2024 GMT
            Not After : Oct 17 14:23:26 2024 GMT
        Subject: CN=2C8117A774A9348F041E45343BED2A8337608A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:66:01:94:ae:e1:ed:bc:fe:8f:76:3d:27:
                    22:35:39:ad:aa:e7:66:ee:12:6e:8d:da:4d:7e:c0:
                    63:75:f2:37:1b:82:d0:fb:2a:eb:2e:f1:bf:bc:4b:
                    96:2e:59:38:43:43:26:00:da:3a:8b:34:98:79:cf:
                    4e:e9:f3:17:36:92:4a:07:77:17:e1:b6:16:64:5a:
                    7a:a9:e3:c6:cc:74:ba:06:5b:9b:67:2b:86:e0:67:
                    90:bc:ad:c4:6f:89:f0:46:7f:fa:46:c5:b3:40:66:
                    f1:9f:63:c8:c3:31:19:56:ce:ec:c0:a4:2e:fe:63:
                    72:f3:7c:e0:4c:cf:29:0f:d3:ae:95:75:e5:c5:e1:
                    42:f3:ac:c5:ce:e6:bb:a2:a7:07:20:13:99:cf:90:
                    fa:5a:6b:98:fd:53:51:aa:79:80:5a:18:da:3f:29:
                    67:33:62:a5:da:21:7c:b8:7a:39:d7:4e:21:c9:1c:
                    1b:6c:05:cb:c5:5e:3d:b0:2b:09:07:9a:de:bd:33:
                    75:7f:ae:37:e1:ce:4e:90:91:2d:32:45:2c:c5:17:
                    4b:83:ec:39:fb:35:bb:63:a6:c1:29:bd:37:dc:75:
                    fc:6d:ae:61:13:a3:c7:f5:7e:61:11:3e:eb:6f:2a:
                    5c:ac:9c:39:f8:18:14:c6:01:d9:4e:e2:e2:6a:a1:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:81:17:A7:74:A9:34:8F:04:1E:45:34:3B:ED:2A:83:37:60:8A:07
            X509v3 Authority Key Identifier:
                keyid:21:AE:38:6C:AD:30:39:E4:C9:70:C8:24:F7:69:FF:23:66:BE:D3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21AE386CAD3039E4C970C824F769FF2366BED33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/21AE386CAD3039E4C970C824F769FF2366BED33B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:44:32:61:8a:0f:01:96:ce:73:e6:17:03:bb:c5:64:e5:
         7e:7c:c9:9e:b1:41:b7:51:45:bf:87:27:33:17:50:3f:b0:fd:
         d7:f2:2e:ad:35:b7:03:4e:57:a2:07:33:66:f8:32:52:cc:c6:
         3a:1d:6f:3f:26:c9:ec:c1:ef:09:1d:39:2d:06:83:dd:91:07:
         e6:8f:fc:61:e0:b8:2a:06:8e:ee:ed:9e:bc:59:95:5f:d6:d1:
         8f:d7:82:27:34:5f:ee:97:d6:87:53:ab:6e:6c:2a:ea:86:20:
         30:87:88:8f:08:c7:46:16:88:d0:da:ce:93:7c:44:f4:bc:b5:
         fc:32:b6:76:9b:20:15:58:a3:24:3f:0c:39:f9:aa:e5:4a:5c:
         fd:1e:d9:60:33:86:bc:72:09:01:04:f8:00:ef:37:5e:6d:18:
         f5:30:c8:0d:b9:e2:3d:f3:33:0d:fc:ea:54:05:cc:36:69:29:
         54:41:e7:a3:65:f4:7d:3a:21:04:99:d5:34:79:7d:8c:ee:77:
         55:23:c2:49:9b:ff:48:19:46:cc:38:af:0e:47:55:ed:23:1e:
         92:98:82:60:ee:81:4c:af:83:84:d5:b7:03:5a:81:92:fd:02:
         a3:ac:8d:80:ef:f7:1b:ad:8c:bf:b8:fe:bd:a4:fa:44:1f:b8:
         7e:fe:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----