Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.mft
File:                     A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.mft (raw, json)
Hash identifier:          FPoTWXtgdtWi1WnyTYxjDgGWMd3apqk3m69Co6H/tR0=
Subject key identifier:   16:18:C6:F5:D3:DA:2A:2D:A1:6D:63:EB:42:7B:14:A2:B1:2A:26:35
Authority key identifier: A2:6B:DD:F9:0B:78:C9:AC:51:B0:D3:9F:8E:FF:34:51:EE:32:FC:87
Certificate issuer:       /CN=A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87
Certificate serial:       42B063FE69DE5AB4A8113872632FC36D301DBB17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.mft
Manifest number:          01D9
Signing time:             Fri 12 Apr 2024 05:58:38 +0000
Manifest this update:     Fri 12 Apr 2024 05:53:38 +0000
Manifest next update:     Sat 13 Apr 2024 06:30:38 +0000
Files and hashes:         1: A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.crl (hash: cAc4rv3geUiavkRt684j3EDl1zdnRb4PAjN9H78YPCg=)
                          2: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: IH0pUiLrnFZvzK3Q6oUF5VfTKlN9GOUe9SjKPCay8Nw=)
                          3: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: whs5oBZhbGOIkF+EgpXR5blfOkWd8CDszO6CcBAlr6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:63:fe:69:de:5a:b4:a8:11:38:72:63:2f:c3:6d:30:1d:bb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87
        Validity
            Not Before: Apr 12 05:53:38 2024 GMT
            Not After : Apr 13 06:30:38 2024 GMT
        Subject: CN=1618C6F5D3DA2A2DA16D63EB427B14A2B12A2635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:5a:4b:ef:2a:13:3e:37:74:d7:8d:54:61:
                    6f:1c:9d:ce:b1:5a:5c:22:56:a7:f5:70:cf:30:56:
                    b2:2c:fe:34:32:31:29:9b:b4:ed:85:e4:42:b1:cf:
                    4b:30:ff:c1:ca:7c:a2:69:e9:9d:84:63:5b:3e:3b:
                    b1:1a:27:e5:d6:b1:99:c5:e5:55:77:65:0d:db:78:
                    23:1d:45:eb:88:91:49:c7:f2:5f:1c:cd:ae:08:cd:
                    e0:30:b3:7d:47:a8:81:b7:c7:53:36:63:f9:c4:73:
                    eb:24:34:52:c0:3d:53:14:39:cc:ec:7d:72:1d:0e:
                    ba:9b:c1:61:b8:a0:62:b5:3b:d6:66:ea:84:bf:27:
                    55:d8:06:30:74:db:3b:c5:8a:67:57:50:f5:01:27:
                    bb:15:e6:e7:78:a0:f2:63:f2:3b:31:40:c8:a2:41:
                    a0:27:00:70:f1:80:d0:bc:b2:ff:75:f0:04:75:30:
                    c3:08:53:4d:8f:5c:f7:90:8c:0e:4f:a3:92:cc:eb:
                    15:0c:f1:5d:5d:9a:d2:32:3e:10:a2:9f:71:29:01:
                    05:e5:24:2a:ac:49:8c:db:46:d2:12:1b:65:55:87:
                    07:b4:8a:88:df:9c:ed:e7:0f:f0:25:35:19:2d:ee:
                    23:99:c2:16:47:03:5c:65:fd:b9:b9:04:12:71:ce:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:C6:F5:D3:DA:2A:2D:A1:6D:63:EB:42:7B:14:A2:B1:2A:26:35
            X509v3 Authority Key Identifier:
                keyid:A2:6B:DD:F9:0B:78:C9:AC:51:B0:D3:9F:8E:FF:34:51:EE:32:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/A26BDDF90B78C9AC51B0D39F8EFF3451EE32FC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:ea:6e:7a:0e:d7:99:52:c2:51:74:59:db:80:7d:3a:36:
         a7:dc:dd:8b:8c:57:a0:e9:7e:31:dc:e8:4f:18:df:1e:99:d1:
         a2:6e:47:4c:6a:cb:f6:e9:ee:be:a4:bd:c3:78:da:88:db:6b:
         45:2c:6f:d0:74:08:90:b0:b4:6d:fc:3f:0d:52:1a:7f:7a:b0:
         7e:ca:c4:44:39:bc:18:bf:56:45:81:8f:e3:9c:ae:ef:fb:40:
         a3:6e:3d:0a:73:48:13:fc:56:28:23:b7:13:ff:6c:af:87:7d:
         4a:71:19:19:23:5a:75:e1:59:7f:d3:cb:28:97:53:d2:35:df:
         3e:d9:1a:8e:8b:2d:e3:7c:c6:59:7d:db:7d:50:b6:88:43:fe:
         d0:90:06:17:3d:10:1e:f7:d5:2c:1e:dd:d4:8b:67:f6:b7:29:
         8a:87:e2:c9:f4:db:cd:31:e1:9a:d6:8d:78:04:66:54:b3:cc:
         2b:b9:fd:e8:9b:1c:10:f9:49:2a:6e:42:72:2e:73:11:62:2e:
         78:9f:15:91:e0:e4:c2:29:40:65:e9:4b:63:97:35:9a:3f:5f:
         d3:37:46:f3:8f:2f:ca:19:9e:dd:3a:51:aa:ea:6f:08:db:88:
         05:f2:3c:ac:39:8b:1f:bf:23:ed:81:95:7c:2b:31:26:d4:69:
         da:7d:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----