Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.mft
File:                     2DBDD3CD39663868244CF54E63FC0B537E82EA9B.mft (raw, json)
Hash identifier:          jVgEJHxBP4ROgB5YJ1ivchY3xvAuPpXQgQfFNgNL7Cg=
Subject key identifier:   04:C3:65:BD:5D:F1:C5:D8:29:5B:F6:47:BD:C0:93:B1:B1:DB:77:20
Authority key identifier: 2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B
Certificate issuer:       /CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
Certificate serial:       7CA70985A4401BA990E979710B0F65D4C54537AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.mft
Manifest number:          7D
Signing time:             Thu 10 Oct 2024 20:04:18 +0000
Manifest this update:     Thu 10 Oct 2024 19:59:18 +0000
Manifest next update:     Fri 11 Oct 2024 22:22:18 +0000
Files and hashes:         1: 323830343a363661343a3a2f33322d313238203d3e20323639353733.roa (hash: eMuEcTlj2DBBJ3B3t9Yj/B1JUMqT7B/ME7wc6TXmJFI=)
                          2: 2DBDD3CD39663868244CF54E63FC0B537E82EA9B.crl (hash: t0WHNBkVhf2RkXxk0hVDH+FrVhR5Z3SrTwmhJNJaOAo=)
                          3: 34352e3138392e37322e302f32322d3332203d3e20323639353733.roa (hash: h/CFfsUMZSTeO56unCt0o3dJ8mNV5COghJcD4pBErSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:09:85:a4:40:1b:a9:90:e9:79:71:0b:0f:65:d4:c5:45:37:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
        Validity
            Not Before: Oct 10 19:59:18 2024 GMT
            Not After : Oct 11 22:22:18 2024 GMT
        Subject: CN=04C365BD5DF1C5D8295BF647BDC093B1B1DB7720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:7d:38:ae:a3:79:cf:4c:7e:0d:af:25:7b:
                    97:a7:e2:f1:ee:6f:b6:9d:e8:2e:9e:df:97:4a:ec:
                    64:70:53:b1:8a:28:4e:cb:f5:43:09:4e:9c:60:c9:
                    06:b0:d9:ba:19:7f:94:77:09:46:df:11:91:f5:cb:
                    28:c4:4d:ef:06:d7:18:4f:6c:8c:b4:57:f5:75:9b:
                    2c:a3:c0:42:79:34:0d:de:8f:1a:11:90:e4:88:0a:
                    56:d7:4d:a2:98:9a:2a:f2:ef:1b:f4:56:cd:48:30:
                    20:10:36:11:b4:46:2d:4d:0c:88:70:43:be:b7:fa:
                    6a:f4:8c:9f:03:f4:c2:c6:e2:1c:c3:d0:26:15:01:
                    08:40:89:ab:2a:9f:26:e6:bb:5a:c6:4e:13:e5:bd:
                    a1:19:c2:f7:31:44:9a:df:64:33:53:5a:a7:04:1e:
                    59:54:b0:13:41:4d:12:27:b1:cb:c7:e3:ef:1c:70:
                    ee:2d:1f:85:e6:c9:cb:5b:a9:43:89:8b:0e:f6:d0:
                    b7:3c:62:66:bf:4f:fa:d9:fb:60:0a:e4:5c:b9:a8:
                    76:a8:f7:71:3f:7d:84:af:e0:8e:f3:90:02:db:c4:
                    09:e7:59:2c:49:c5:7c:3f:66:07:b4:8e:8e:37:6d:
                    0e:2a:ee:44:3d:83:4d:fd:a1:ef:ab:c3:70:24:90:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:65:BD:5D:F1:C5:D8:29:5B:F6:47:BD:C0:93:B1:B1:DB:77:20
            X509v3 Authority Key Identifier:
                keyid:2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:33:41:10:dd:3a:07:70:05:37:a2:47:0d:cf:b3:1d:20:55:
         7c:8d:fb:10:5d:e4:f3:8c:78:dd:de:76:23:1b:a1:51:1e:78:
         1c:49:8f:ac:64:ab:28:6b:fd:15:eb:92:df:6c:82:64:86:55:
         fb:22:47:de:6d:5b:5f:2e:ad:8a:4d:6e:c3:55:b4:8d:0c:3d:
         75:29:fa:2b:ec:75:bd:3f:1b:14:35:2a:30:aa:ea:1e:ae:e6:
         d5:bb:96:6e:29:23:d5:3c:50:9e:d9:1d:9f:b0:c2:39:bc:e2:
         9d:95:96:3d:7c:56:33:d0:fe:12:2a:9b:95:fd:5a:72:3f:aa:
         87:80:ce:7b:a7:3f:e4:bf:48:e4:a3:6f:38:b1:95:f5:7d:f5:
         34:f0:91:34:4d:2e:e0:7e:48:e3:46:5d:13:1a:40:18:78:9f:
         3f:ed:17:83:1b:65:07:75:c4:b8:50:58:39:a2:3b:f9:5e:b0:
         29:ed:39:2f:8f:e7:06:bc:a4:c3:15:2a:9c:ff:f4:eb:c3:1f:
         f1:44:a1:da:18:76:d6:64:f6:9c:ef:7e:fc:6e:f1:95:d6:1f:
         15:6e:59:62:68:76:cc:82:8e:2e:e7:d3:f2:4e:f5:86:40:82:
         f5:d6:c2:ad:12:46:91:70:17:e5:62:82:f8:fa:a8:62:5e:ef:
         25:a3:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----