Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.mft
File:                     1C7D3973B001C126A2DDD8239CD138E09A85FC78.mft (raw, json)
Hash identifier:          jeoLt3x5+CPb/Vlu1SQ8/w1z4ZAC1Y4F5Z5KMR9B9CE=
Subject key identifier:   EF:14:64:22:04:06:5E:87:EF:AE:F8:D1:29:C4:79:98:88:46:47:80
Authority key identifier: 1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78
Certificate issuer:       /CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
Certificate serial:       6AC023A5213D33EFBA93996E22184A8316369133
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.mft
Manifest number:          02AC
Signing time:             Mon 15 Apr 2024 10:45:35 +0000
Manifest this update:     Mon 15 Apr 2024 10:40:35 +0000
Manifest next update:     Tue 16 Apr 2024 12:32:35 +0000
Files and hashes:         1: 1C7D3973B001C126A2DDD8239CD138E09A85FC78.crl (hash: XXCwCGYtPHNikR4YKavLEya7BEMENQUgHQAcQCBq1g8=)
                          2: 34352e3139312e36302e302f32322d3234203d3e20323639363637.roa (hash: VAl4c/xBPaaCZ9Fq/sZY91jM53qIrJ1VS9uC/bZ3uHs=)
                          3: 323830343a363830633a3a2f33322d3335203d3e20323639363637.roa (hash: oe63Kaw1nKvqa+m2MFUSbYcBGGpB4NSaY7dIc5ofzeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:23:a5:21:3d:33:ef:ba:93:99:6e:22:18:4a:83:16:36:91:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
        Validity
            Not Before: Apr 15 10:40:35 2024 GMT
            Not After : Apr 16 12:32:35 2024 GMT
        Subject: CN=EF14642204065E87EFAEF8D129C4799888464780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:38:6d:35:5f:2d:7b:67:5d:45:80:d5:91:
                    b6:c1:33:4c:5c:6d:75:77:77:66:97:2c:a1:77:9a:
                    64:3c:ad:8b:ce:2b:5a:bb:7b:4f:6e:8f:d8:4b:65:
                    ba:fc:0a:bb:52:b1:e8:69:d9:3d:6d:1b:dd:9f:08:
                    6f:1a:a9:4b:f2:a0:c9:c0:a2:75:54:e1:b6:8f:a5:
                    eb:aa:8c:31:dc:f2:a4:38:15:4a:65:f8:79:af:c2:
                    3f:29:47:ac:9d:49:62:dc:f6:4b:39:9f:7b:4b:98:
                    f0:bf:c6:61:f6:45:32:4a:34:5d:2c:a3:80:c5:be:
                    9d:01:d7:a9:4c:3b:02:b3:69:a1:f8:dd:6c:f7:3f:
                    8f:26:34:3c:fc:24:ad:d5:c2:26:89:38:35:c4:7e:
                    bb:1e:d6:6c:20:71:ef:b4:46:81:8f:6d:03:85:67:
                    ba:8a:6c:5e:88:31:21:8f:2c:77:66:70:ce:26:0a:
                    1b:00:36:f7:61:a9:38:5d:dc:24:67:e4:38:1d:29:
                    0d:61:ad:ee:a0:7d:47:98:d1:ad:61:7a:71:75:fd:
                    27:98:4b:ad:92:71:79:3a:5c:b9:bb:7a:cb:cd:75:
                    9b:be:7d:01:c3:b3:ae:77:27:3d:44:d8:ae:cc:96:
                    2e:68:ed:1e:68:8b:2d:9d:a7:6a:95:e6:b7:19:3e:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:64:22:04:06:5E:87:EF:AE:F8:D1:29:C4:79:98:88:46:47:80
            X509v3 Authority Key Identifier:
                keyid:1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:d9:15:40:44:e6:2f:4b:af:66:b5:01:33:96:7f:94:75:
         38:3e:53:09:2a:71:15:a5:de:dc:f3:7c:54:7f:ae:bf:11:da:
         6d:ca:07:6e:b7:21:e6:19:11:b7:5c:c4:80:f6:37:47:50:aa:
         99:8d:aa:0e:c5:d1:e2:11:7c:03:cc:ca:6f:04:38:9e:07:e3:
         e9:01:8b:dc:4c:39:61:d5:a0:88:58:61:0b:cc:a4:37:a9:78:
         37:52:54:53:ea:c8:86:c4:cd:04:f7:51:ea:9e:55:d6:98:2a:
         f0:a7:44:f6:79:20:66:7b:05:cc:48:d5:ed:9b:3a:56:88:e7:
         d0:23:59:c3:a5:1a:d9:22:1c:7c:2c:a6:06:cd:e8:5a:ac:96:
         bf:7b:8b:ed:04:bf:e7:7e:9c:07:43:fb:48:f5:b9:a0:39:ab:
         1a:c7:d6:d7:00:ad:b2:4e:ca:50:46:9c:c3:13:fe:a2:a7:bc:
         93:39:77:74:e2:0f:b8:5c:40:5b:ab:b3:b7:b4:2c:28:0e:45:
         ec:56:81:1f:c5:b0:3d:0e:21:7e:da:6b:b5:a3:4f:65:11:ae:
         3c:fe:a6:f7:2f:e5:2e:cf:4a:f8:f7:be:4e:39:9d:9e:3e:58:
         01:6a:50:ee:5d:33:9c:23:d1:5c:a6:92:a8:cb:a1:40:fa:82:
         c6:f6:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----