Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.mft
File:                     8B2D0EE8927450C8BD302206E147D31846C72ACC.mft (raw, json)
Hash identifier:          alnbtDzXlEsX2/6uJ+3o9wpJ2gShEYFw+Ehws4xBM+0=
Subject key identifier:   1E:F9:A6:DE:74:24:E3:2A:2E:9E:D7:6E:8B:D3:AD:91:A4:DB:65:19
Authority key identifier: 8B:2D:0E:E8:92:74:50:C8:BD:30:22:06:E1:47:D3:18:46:C7:2A:CC
Certificate issuer:       /CN=8B2D0EE8927450C8BD302206E147D31846C72ACC
Certificate serial:       1FCECFC3F937F34E6D94F2AE84306CAF198BB997
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.mft
Manifest number:          FA
Signing time:             Wed 17 Jan 2024 18:35:04 +0000
Manifest this update:     Wed 17 Jan 2024 18:30:04 +0000
Manifest next update:     Thu 18 Jan 2024 20:04:04 +0000
Files and hashes:         1: 8B2D0EE8927450C8BD302206E147D31846C72ACC.crl (hash: uYYDFfjD8SgRCqFkKy6E12LdTNXH1eeyQP9HFwEhNnw=)
                          2: 3137302e37392e3133322e302f32322d3234203d3e20323636323933.roa (hash: 4SpO/Y7+tjKcWwRU7rKIEbNUVEpKGy7XdGzLaxSiSRE=)
                          3: 323830343a333538633a3a2f33322d3332203d3e20323636323933.roa (hash: Tkku0dJEL2BTj9ImcZIuk5DJu3+xnPBIKgfspaI2EtQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ce:cf:c3:f9:37:f3:4e:6d:94:f2:ae:84:30:6c:af:19:8b:b9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2D0EE8927450C8BD302206E147D31846C72ACC
        Validity
            Not Before: Jan 17 18:30:04 2024 GMT
            Not After : Jan 18 20:04:04 2024 GMT
        Subject: CN=1EF9A6DE7424E32A2E9ED76E8BD3AD91A4DB6519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:51:a4:6d:50:d9:be:a3:1f:2a:9a:96:66:
                    f1:b0:83:71:a8:b3:b6:f0:81:84:e9:e1:3b:11:c7:
                    e9:94:e5:90:0d:52:d6:85:8c:2e:35:68:55:f9:69:
                    ed:17:35:b2:32:55:10:78:d8:b7:b9:28:82:20:44:
                    f6:9c:27:ba:75:32:6b:a6:8c:c6:0e:81:82:b6:72:
                    a2:8a:74:dc:e3:b7:50:14:60:da:6c:85:b0:1c:de:
                    ce:94:17:a3:83:c9:21:5f:76:be:4a:32:56:95:92:
                    0c:7e:66:5c:52:7c:f8:96:26:ff:a1:cb:88:b3:40:
                    93:e1:1d:fc:0d:ad:47:00:4c:d5:03:ac:4a:86:c1:
                    30:7b:6b:07:38:24:15:ca:47:65:a7:5c:3f:bf:b5:
                    a1:8f:71:26:fb:e1:74:9d:76:28:cf:bf:47:56:4d:
                    6e:d9:0e:66:57:0a:9f:03:5b:14:fc:b6:fc:45:ac:
                    7c:d6:b0:a0:ab:d4:1d:be:d6:ed:fa:ae:6a:bc:26:
                    b2:c6:03:e5:54:4a:e9:38:a7:66:a8:18:b0:e8:b0:
                    e8:2c:57:bd:44:c8:99:cc:8c:90:38:ea:2b:6e:7c:
                    39:36:74:a5:cd:e8:f3:9d:a7:a8:f2:0a:81:99:62:
                    c4:3a:8f:b5:41:27:ba:bb:34:b4:50:de:23:5c:b0:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F9:A6:DE:74:24:E3:2A:2E:9E:D7:6E:8B:D3:AD:91:A4:DB:65:19
            X509v3 Authority Key Identifier:
                keyid:8B:2D:0E:E8:92:74:50:C8:BD:30:22:06:E1:47:D3:18:46:C7:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/8B2D0EE8927450C8BD302206E147D31846C72ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:65:9c:25:ee:04:25:12:1a:c5:36:47:d2:1d:dd:94:4d:77:
         52:1d:5f:6e:fe:a5:9e:c9:08:6d:00:26:f5:39:1e:e6:e9:9e:
         34:e9:a5:25:88:72:c9:2c:61:d7:90:24:3f:56:63:00:82:9d:
         51:b3:07:a3:d1:86:67:e6:77:1a:9a:4d:81:47:51:7b:17:05:
         d5:74:fc:0d:02:95:fd:93:4b:75:c8:5d:da:52:94:36:11:50:
         44:61:40:f9:a5:3c:5c:78:cb:fc:ba:1e:08:08:71:f8:5a:33:
         c7:85:a9:a0:75:57:30:3b:29:58:28:40:47:84:9a:01:6a:29:
         1c:89:09:a6:ec:04:10:c4:7e:5f:63:49:65:41:6e:12:21:36:
         ec:cb:e4:dc:4c:4c:bc:b6:ff:bf:3f:2f:e4:78:69:a6:78:10:
         5e:ec:a3:15:00:e4:f0:70:e2:4f:e2:b0:4e:8d:ed:48:75:09:
         91:06:ec:96:45:2c:0e:19:a7:53:70:3f:6c:5d:da:11:7d:12:
         26:22:e7:67:c8:76:9c:98:a5:80:e8:6d:6c:09:39:a2:97:bb:
         e3:7a:87:28:ac:e7:f8:2f:dd:d8:37:40:1a:15:36:e1:98:43:
         55:7f:6e:4f:2e:c5:12:ea:4b:0a:fd:82:7c:87:e6:ac:31:be:
         ef:9b:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----