Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.mft
File:                     82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.mft (raw, json)
Hash identifier:          qfKM9fOo1YAdVg5JWRY4CajBTqpfoeGWdrb32SoPwNs=
Subject key identifier:   E4:52:0D:6F:BA:03:87:8F:C3:77:22:3E:62:C3:4E:47:AB:3E:E4:61
Authority key identifier: 82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33
Certificate issuer:       /CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
Certificate serial:       20C17CD7142FD8D77F097A7E4BF9E6B180B46496
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.mft
Manifest number:          0658
Signing time:             Mon 15 Apr 2024 02:04:30 +0000
Manifest this update:     Mon 15 Apr 2024 01:59:30 +0000
Manifest next update:     Tue 16 Apr 2024 05:44:30 +0000
Files and hashes:         1: 82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.crl (hash: OdekTZYpCP3/8pk42FofrDFAr9efpNc43IN2pFkFah8=)
                          2: 323830343a363337343a3a2f33322d3334203d3e20323639333632.roa (hash: XRHtjmxs/0vxioL3xW0A1Ahb7wHZCEPAm3cqj+8z6kY=)
                          3: 34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa (hash: oXWzJ6mjaRlBA2kObEj++CFgCPON0D0hKMHqQsuD43k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c1:7c:d7:14:2f:d8:d7:7f:09:7a:7e:4b:f9:e6:b1:80:b4:64:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82DAF5D14F902F8E9F28B1DCF3D990C0F6844033
        Validity
            Not Before: Apr 15 01:59:30 2024 GMT
            Not After : Apr 16 05:44:30 2024 GMT
        Subject: CN=E4520D6FBA03878FC377223E62C34E47AB3EE461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:f5:2d:30:58:14:ff:d1:a0:a9:63:7d:99:
                    97:c8:63:52:06:f9:8e:47:0b:64:14:9c:f9:d6:eb:
                    65:35:50:b8:8b:ba:28:45:58:be:a7:62:31:22:f0:
                    08:02:28:e0:25:eb:d3:00:bb:d3:1b:3e:62:43:c8:
                    0c:62:6e:9e:62:7e:8e:3d:47:47:9a:d7:8c:10:26:
                    8d:60:ac:68:86:5b:2f:87:18:3a:df:3a:c5:50:9e:
                    99:aa:ab:6c:40:a6:20:e3:64:08:e7:b9:27:fa:4a:
                    d0:21:23:82:0b:c8:6d:61:f6:b1:99:fe:6b:6e:3f:
                    79:24:70:94:91:54:1f:50:75:bc:01:2e:53:d1:63:
                    c5:a9:c3:a2:76:47:2b:b9:c9:c7:2f:3a:39:75:7b:
                    72:8a:20:62:fb:a9:d6:f6:be:b1:05:16:84:c3:fa:
                    91:1d:a6:bb:4e:96:44:d2:31:6e:f5:4f:e6:ea:2f:
                    f5:24:6a:90:2d:7c:1f:2d:f4:2c:ad:f0:72:3d:44:
                    9d:17:bd:a5:3d:f7:24:53:08:2a:2d:3a:06:ba:ad:
                    3d:d2:97:d9:47:4c:d5:f3:78:18:bf:42:3a:c6:11:
                    79:ac:b5:87:e5:bd:cd:76:00:b1:53:ce:3c:ed:77:
                    83:42:4c:38:0b:1a:79:ff:ee:1f:65:35:a8:ae:ae:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:0D:6F:BA:03:87:8F:C3:77:22:3E:62:C3:4E:47:AB:3E:E4:61
            X509v3 Authority Key Identifier:
                keyid:82:DA:F5:D1:4F:90:2F:8E:9F:28:B1:DC:F3:D9:90:C0:F6:84:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/0/82DAF5D14F902F8E9F28B1DCF3D990C0F6844033.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:8c:28:57:a6:83:c5:a2:c5:fc:d2:50:92:61:d9:c3:a1:
         c5:11:48:ac:6e:dd:80:1e:2d:72:da:f6:39:89:14:7d:d9:32:
         84:a1:e9:f7:27:f7:dd:51:bd:2f:e0:7e:bf:1b:ea:0f:a5:c1:
         1b:4e:e3:d8:4f:4f:ff:e1:ac:2b:67:26:6d:ca:f4:f6:7f:08:
         64:56:ab:57:8b:42:06:67:a1:e7:6d:1c:fe:b8:dc:91:d8:c6:
         db:f6:c6:e1:a8:19:33:80:59:dd:f7:db:8d:b5:b9:95:3a:e9:
         cc:e4:d3:00:58:df:66:39:4a:c9:62:2c:d2:2c:b3:30:a4:86:
         60:c8:70:2f:93:61:9b:9e:8a:8b:49:f0:64:0b:e1:c9:b0:dd:
         b5:46:ad:13:9f:54:aa:3f:71:26:b2:02:39:cd:94:e7:12:08:
         c4:4b:2e:2b:ad:7e:52:96:33:24:56:6d:fb:e4:ca:e3:1e:22:
         3e:30:ba:fb:b4:4e:02:76:84:dd:a4:ce:4a:3c:71:36:ce:be:
         f1:69:7f:f2:13:3d:d3:f9:cd:c1:2f:d0:25:29:1c:ca:e5:bc:
         1b:29:62:de:d3:f0:87:f6:c8:8c:ee:fc:6e:3d:42:0d:fd:a6:
         b4:3a:c6:2c:2d:b5:4d:fd:57:9c:94:2e:e6:04:d2:e4:d6:7d:
         83:e7:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----