Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.mft
File:                     C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.mft (raw, json)
Hash identifier:          JPxSdDY92PJiDrzsmECSZobZmn/Z6T0zOk9to/tSn2g=
Subject key identifier:   28:19:F6:37:A0:7A:37:77:49:8D:56:D4:71:70:9E:E5:FB:E6:0E:F3
Authority key identifier: C9:A8:8B:5F:E0:36:D7:70:C1:45:0F:A9:0A:FF:AF:ED:6D:FF:1C:1F
Certificate issuer:       /CN=C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F
Certificate serial:       11574AA4C12B5C5CF24B472D46FF0306692D4847
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.mft
Manifest number:          1B
Signing time:             Tue 23 Apr 2024 11:52:48 +0000
Manifest this update:     Tue 23 Apr 2024 11:47:48 +0000
Manifest next update:     Wed 24 Apr 2024 14:50:48 +0000
Files and hashes:         1: C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.crl (hash: 6gdKrfPX6bcKuZmLyhDc7OmmFHVyQo0wiFIT+CjiWmM=)
                          2: 323830343a366538633a3a2f33322d3438203d3e20323730363034.roa (hash: EFuuDz/HxE6Lp3Wu81aPQBI/OzmsyRdFARF/pQwZnpw=)
                          3: 3138372e302e33322e302f32322d3234203d3e20323730363034.roa (hash: If/2LSKCCWXkZ6QCzDPd/M3agxh0lKQ62CvN/WHxuzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:57:4a:a4:c1:2b:5c:5c:f2:4b:47:2d:46:ff:03:06:69:2d:48:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F
        Validity
            Not Before: Apr 23 11:47:48 2024 GMT
            Not After : Apr 24 14:50:48 2024 GMT
        Subject: CN=2819F637A07A3777498D56D471709EE5FBE60EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:9e:14:52:75:05:90:b3:52:6c:c2:3a:a6:
                    7c:b4:46:ee:b9:16:b3:5a:e1:09:d7:77:fb:63:32:
                    38:37:a7:28:01:6f:c4:87:5a:2f:ff:35:6d:9b:7a:
                    39:c5:aa:33:73:ea:3c:fe:6f:60:af:d2:5f:01:36:
                    92:bd:06:61:6d:7e:56:0d:53:26:bc:23:7f:80:eb:
                    05:4d:6d:93:87:49:b9:19:21:78:2e:dd:97:21:1a:
                    a7:aa:a3:e2:eb:66:47:5c:e0:b1:bd:dc:ff:69:18:
                    ab:4c:ae:7e:47:c6:56:af:85:bc:05:02:a1:3a:90:
                    4c:e3:ee:e5:6a:7d:4c:1d:6e:c0:ac:8c:56:05:d4:
                    6f:00:b6:13:05:bf:b1:15:ba:bd:08:f2:50:e1:c2:
                    ea:6f:fe:f5:ea:73:77:e2:cf:7d:0c:3c:77:13:ad:
                    31:eb:69:c9:64:02:60:3e:fa:81:84:4b:2b:b6:3a:
                    f1:66:f8:77:47:55:00:7e:03:67:1b:03:dd:e8:78:
                    4c:29:72:e5:83:91:a6:8f:76:31:b1:aa:a6:08:0a:
                    4f:64:e8:7e:31:0d:93:58:f8:53:5c:82:eb:e6:e0:
                    51:84:1f:af:61:b7:de:0e:2f:c9:60:51:9a:12:fd:
                    51:65:44:bb:92:84:a8:a2:2e:a5:da:fe:b7:bc:b7:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:F6:37:A0:7A:37:77:49:8D:56:D4:71:70:9E:E5:FB:E6:0E:F3
            X509v3 Authority Key Identifier:
                keyid:C9:A8:8B:5F:E0:36:D7:70:C1:45:0F:A9:0A:FF:AF:ED:6D:FF:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/1/C9A88B5FE036D770C1450FA90AFFAFED6DFF1C1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:15:0d:60:a6:11:0f:a5:53:06:61:5d:b3:c5:bc:2d:62:
         8a:3a:81:b4:6c:69:6a:d8:5c:d9:d0:0b:f2:fb:30:40:a0:80:
         dd:81:a3:7c:46:9f:34:a2:3f:f8:54:20:a0:e0:59:8c:a9:8a:
         a6:46:7e:b1:00:18:cb:e8:ae:f1:c8:04:88:61:ee:40:7b:8a:
         0b:22:e2:8b:8a:b7:67:60:f2:a1:dc:49:12:61:20:20:69:92:
         f3:38:78:51:2d:19:c6:f6:db:b8:cd:30:71:55:5d:95:8a:e5:
         89:7e:60:80:17:c8:e4:f3:6c:7f:a2:32:cd:ee:d6:88:5c:3c:
         f7:c2:7b:d9:e5:fa:0d:96:f2:1e:20:0c:06:1b:aa:8d:8c:20:
         1f:c0:8b:3a:29:b0:05:10:f5:9f:29:7a:a5:13:6f:1d:5b:14:
         56:31:b7:b0:89:8d:8a:e3:32:53:91:e8:44:a1:fb:88:77:e0:
         c2:73:e0:c1:ae:f6:b4:b9:a0:d7:79:08:2d:fa:e7:93:1d:e0:
         23:71:4f:f7:f2:fc:16:36:e6:68:98:67:49:15:4a:2b:05:59:
         7e:5a:0f:db:36:e6:d0:21:51:3a:9f:50:12:12:f2:15:26:98:
         b9:7d:d5:44:9f:3f:18:ab:a4:16:ef:bf:c9:c8:71:95:6b:0d:
         3e:da:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----