Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B5B2E670BF8CD958758B8BD135BB75F90E221A72.mft
File:                     B5B2E670BF8CD958758B8BD135BB75F90E221A72.mft (raw, json)
Hash identifier:          z6WdQWcKo1cKivG2YRcZ5Sv+sIP2H/gbK48Pf+paMtw=
Subject key identifier:   10:E4:22:A2:A9:60:93:30:B8:37:FE:00:84:FB:C4:15:42:83:FD:EB
Authority key identifier: B5:B2:E6:70:BF:8C:D9:58:75:8B:8B:D1:35:BB:75:F9:0E:22:1A:72
Certificate issuer:       /CN=B5B2E670BF8CD958758B8BD135BB75F90E221A72
Certificate serial:       0A015FD5C1BF3752D197B736D5FF870F13454B94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5B2E670BF8CD958758B8BD135BB75F90E221A72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B5B2E670BF8CD958758B8BD135BB75F90E221A72.mft
Manifest number:          45
Signing time:             Wed 25 Sep 2024 14:31:13 +0000
Manifest this update:     Wed 25 Sep 2024 14:26:13 +0000
Manifest next update:     Thu 26 Sep 2024 16:44:13 +0000
Files and hashes:         1: B5B2E670BF8CD958758B8BD135BB75F90E221A72.crl (hash: c7/PyCNTv+7qjVY7Z/4syURMOt1j0XRI7Th8ui5uQEE=)
                          2: 3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (hash: qGySP4nuFfDmiDNMhHEkA0RrDb0uCT9tDKqvY1dx+js=)
                          3: 323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (hash: zaPu983PvEsTmpYlntK6BemiIlXckQE1pTZTCL7THXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:01:5f:d5:c1:bf:37:52:d1:97:b7:36:d5:ff:87:0f:13:45:4b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5B2E670BF8CD958758B8BD135BB75F90E221A72
        Validity
            Not Before: Sep 25 14:26:13 2024 GMT
            Not After : Sep 26 16:44:13 2024 GMT
        Subject: CN=10E422A2A9609330B837FE0084FBC4154283FDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:04:df:67:2e:49:10:9b:83:b6:3e:f2:84:
                    8d:3e:27:e5:38:fb:0e:97:f1:39:c0:29:37:7c:94:
                    99:56:1a:b5:d5:0b:47:56:82:77:92:f6:ef:de:0d:
                    59:8e:88:f5:3a:51:61:50:4f:e2:d5:86:10:3e:80:
                    2a:bb:47:f6:df:f9:a1:43:c1:60:7f:ff:26:72:af:
                    c6:7a:00:14:e5:7b:da:12:9f:42:17:2f:58:6f:53:
                    f6:89:c2:2d:17:8e:24:c0:d8:3b:9a:cd:a2:90:f0:
                    5e:ce:9f:a9:e5:9d:44:f6:65:b8:85:7d:d3:b7:81:
                    81:86:71:b9:93:5a:42:a0:81:8c:81:12:3a:d6:46:
                    51:d8:e8:58:49:94:c8:81:e6:72:a0:fe:2e:9c:fd:
                    52:74:13:c5:6a:36:07:21:2c:29:99:fc:e8:57:5a:
                    a8:b1:f1:d8:88:b9:06:63:5b:d9:37:64:53:c2:61:
                    1c:27:ad:64:02:79:60:68:dd:32:32:94:7c:c5:37:
                    24:cb:78:ac:cd:d6:70:ad:28:4f:7d:7a:f4:de:94:
                    dd:1f:95:d0:a2:07:17:84:18:29:15:a8:c5:92:6f:
                    ca:46:66:7e:66:41:45:be:81:2d:ae:24:b8:59:e9:
                    9f:cd:72:b0:2c:28:70:30:df:4d:d6:f0:85:9b:db:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:22:A2:A9:60:93:30:B8:37:FE:00:84:FB:C4:15:42:83:FD:EB
            X509v3 Authority Key Identifier:
                keyid:B5:B2:E6:70:BF:8C:D9:58:75:8B:8B:D1:35:BB:75:F9:0E:22:1A:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B5B2E670BF8CD958758B8BD135BB75F90E221A72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5B2E670BF8CD958758B8BD135BB75F90E221A72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B5B2E670BF8CD958758B8BD135BB75F90E221A72.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:f3:c8:5a:20:03:71:d9:b4:7a:5b:cd:d1:a7:05:c2:70:
         aa:fb:dd:4e:d1:42:53:71:c1:6e:a4:b3:5d:8f:96:e0:70:2c:
         e4:92:9c:eb:03:9e:84:67:51:c7:b4:18:1a:5e:f9:32:d8:52:
         d3:2a:7d:aa:00:9d:ae:0e:2b:5b:c2:80:fc:9b:9f:27:a7:3f:
         c6:b2:8a:48:65:53:0b:0e:94:6d:99:f2:d9:2c:4d:43:3d:2d:
         dc:d9:6e:15:1f:ee:f2:87:74:bf:27:6b:c8:b4:d2:f7:45:ff:
         45:68:21:8e:60:4b:70:e1:48:15:98:f4:d1:2d:5d:e8:14:93:
         f8:4f:94:ef:33:d6:0d:39:37:83:79:9f:25:b4:66:58:c4:03:
         cd:64:43:da:4d:4d:0c:15:e1:1a:68:11:db:e2:be:ab:ab:3c:
         21:02:02:2c:aa:a1:c0:e2:07:58:f1:53:12:8d:e9:ac:cb:ad:
         ff:28:98:c4:cd:90:ac:1e:4d:02:4b:73:05:c3:5d:a5:35:9d:
         f6:a6:42:86:eb:94:92:cc:d2:30:94:cd:bb:c0:f3:e3:04:98:
         45:52:04:71:32:6e:c3:87:9c:5e:c4:20:85:28:35:8d:7d:ec:
         36:91:17:9a:85:5f:7e:63:77:83:eb:f4:3b:2a:e6:2f:b8:15:
         be:55:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----