Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/884457A3A7780ADD286A32733840881FB72194BB.mft
File:                     884457A3A7780ADD286A32733840881FB72194BB.mft (raw, json)
Hash identifier:          jCXW1w2RpCwIKqCU4OTu0m+FMLnVvKqf5Z+mMo7nyH8=
Subject key identifier:   72:95:A6:BA:50:23:C9:92:3C:89:33:DD:BF:E7:3B:E8:F4:AA:AE:60
Authority key identifier: 88:44:57:A3:A7:78:0A:DD:28:6A:32:73:38:40:88:1F:B7:21:94:BB
Certificate issuer:       /CN=884457A3A7780ADD286A32733840881FB72194BB
Certificate serial:       1BFCF0DA3449CF33B1C7659365B9416B5070E469
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/884457A3A7780ADD286A32733840881FB72194BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/884457A3A7780ADD286A32733840881FB72194BB.mft
Manifest number:          0D
Signing time:             Sat 10 Feb 2024 08:48:28 +0000
Manifest this update:     Sat 10 Feb 2024 08:43:28 +0000
Manifest next update:     Sun 11 Feb 2024 09:44:28 +0000
Files and hashes:         1: 884457A3A7780ADD286A32733840881FB72194BB.crl (hash: DB4FM8EGCC6BuF+Kr7JCvmbsaz4DyRuFQMwUMenb7h8=)
                          2: 323830343a323931383a3a2f33322d3334203d3e20323633393937.roa (hash: uIb4EK/YUhwcTEACzCNVz1XPwL8VagjbrLHI+5VZ4rQ=)
                          3: 3134332e302e35322e302f32322d3234203d3e20323633393937.roa (hash: QRfdKK2TaL5vI75qbFUpu7tQbWwunQJgPjc8zLCpkGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:f0:da:34:49:cf:33:b1:c7:65:93:65:b9:41:6b:50:70:e4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884457A3A7780ADD286A32733840881FB72194BB
        Validity
            Not Before: Feb 10 08:43:28 2024 GMT
            Not After : Feb 11 09:44:28 2024 GMT
        Subject: CN=7295A6BA5023C9923C8933DDBFE73BE8F4AAAE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:d6:06:c2:36:30:50:43:80:79:7f:79:2a:
                    2a:db:57:88:96:6b:dc:61:3b:8c:81:80:8c:09:45:
                    3c:d1:db:36:c7:b6:fb:32:a4:ff:9e:56:36:04:fb:
                    b6:b2:41:75:f7:44:5a:db:18:51:a1:37:89:d1:23:
                    56:6c:4f:cc:11:e0:76:e0:6c:e4:90:f0:3f:e0:80:
                    43:16:46:a3:fa:56:ae:dc:e5:f7:22:f1:2b:f8:7d:
                    67:c1:df:aa:8b:df:99:1e:02:c7:7d:74:16:2f:9b:
                    17:8d:e5:36:a5:d4:e9:64:3f:19:3d:6e:86:9f:8c:
                    47:8b:93:82:5f:ef:eb:e7:07:10:ff:15:34:ee:76:
                    55:5a:c2:49:3d:a1:73:ac:77:48:d2:42:20:08:ca:
                    6a:ad:1a:54:33:8b:a2:b8:f5:65:c0:5e:b6:cd:e3:
                    e6:db:95:c7:38:c8:ae:c6:c9:be:e1:a2:06:aa:89:
                    df:9e:24:8d:40:b7:da:9a:ca:91:ef:b5:8a:da:93:
                    bc:12:19:76:10:60:85:3d:bc:a0:e8:09:a4:71:21:
                    fe:cf:5a:01:78:fc:d6:72:ed:e9:95:c7:72:ec:75:
                    ef:f2:8e:07:02:80:b6:21:63:4b:24:b9:28:37:35:
                    4c:d0:78:3e:6d:11:ef:6a:2d:d5:1b:7d:04:7f:8c:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:95:A6:BA:50:23:C9:92:3C:89:33:DD:BF:E7:3B:E8:F4:AA:AE:60
            X509v3 Authority Key Identifier:
                keyid:88:44:57:A3:A7:78:0A:DD:28:6A:32:73:38:40:88:1F:B7:21:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/884457A3A7780ADD286A32733840881FB72194BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/884457A3A7780ADD286A32733840881FB72194BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/884457A3A7780ADD286A32733840881FB72194BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:16:6f:b8:53:75:1d:cf:0a:44:12:3e:87:89:28:fa:f3:89:
         dc:78:a9:14:27:6c:40:5b:87:f2:67:97:57:e4:42:91:77:09:
         28:f6:26:b1:9b:79:41:57:98:f7:75:fe:59:af:f9:11:ab:ab:
         4f:6c:77:2e:31:91:e6:a8:9f:09:ff:26:b3:b3:55:1e:ee:6c:
         bb:9d:8b:b1:68:33:07:3c:74:ba:71:e5:4d:68:49:ac:68:23:
         5a:70:e0:dd:74:0f:a2:48:6f:72:77:88:11:90:b9:b0:c0:ce:
         5d:33:f3:25:3f:57:81:7c:bb:55:6d:7a:43:76:07:25:e8:92:
         fc:20:63:a9:a1:97:f4:4f:ae:76:d9:bb:03:37:07:68:37:6f:
         bd:cc:0b:b0:68:df:00:8b:1d:13:5b:45:aa:35:cf:1c:32:c9:
         e4:16:30:7b:ba:51:25:4a:8d:85:8d:19:39:97:e9:0c:dc:2a:
         ed:53:ea:ea:a3:8a:e9:4c:97:8c:07:bd:3d:ba:63:ae:11:1e:
         8c:85:60:fb:99:29:8c:d8:d5:68:63:d7:94:4c:31:04:66:01:
         ad:cb:dc:36:40:ac:18:4c:23:c7:30:49:6b:bc:37:fa:90:be:
         6d:ed:ad:23:8c:13:8a:ec:63:42:5b:de:f8:1e:c4:f1:02:1a:
         77:a2:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----