Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.mft
File:                     43A516A504F5064680E71E74458628230159DB80.mft (raw, json)
Hash identifier:          fKlVFvjXbspthznqyP659ZSAEXHiDtbiq97jAkXPrjI=
Subject key identifier:   DD:F1:F8:8D:65:C5:FC:84:50:B2:8B:33:E3:8F:86:BA:DF:F3:06:C7
Authority key identifier: 43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80
Certificate issuer:       /CN=43A516A504F5064680E71E74458628230159DB80
Certificate serial:       6A8D6768444CE1C11ABC9903ADA980212B52106F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.mft
Manifest number:          1D
Signing time:             Sun 14 Apr 2024 21:05:59 +0000
Manifest this update:     Sun 14 Apr 2024 21:00:59 +0000
Manifest next update:     Tue 16 Apr 2024 00:59:59 +0000
Files and hashes:         1: 43A516A504F5064680E71E74458628230159DB80.crl (hash: fxCIOPYd8dtSZXcRcJVD2/Wii9/TNxq5VXju72e+9cw=)
                          2: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: Ti0BjdXIBdfr3BYj/inQeF4tLXw+KvWQ/wLgWo5zW64=)
                          3: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: 21oIcCvYr6LFgR0ULw+qdT2QybP7b/FaqMT+DRPrAA0=)
                          4: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: BdS6S6zLz9NnQ4hYleBhCbJimqx8FcE7q4RmA6t9+I8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8d:67:68:44:4c:e1:c1:1a:bc:99:03:ad:a9:80:21:2b:52:10:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A516A504F5064680E71E74458628230159DB80
        Validity
            Not Before: Apr 14 21:00:59 2024 GMT
            Not After : Apr 16 00:59:59 2024 GMT
        Subject: CN=DDF1F88D65C5FC8450B28B33E38F86BADFF306C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:8a:5b:7a:72:53:df:4d:06:9c:65:67:25:
                    45:8c:bb:2c:37:f8:b3:1e:75:f5:54:c9:ef:41:bb:
                    6e:14:7d:e6:5d:95:16:c5:9e:c4:52:86:e5:93:be:
                    c7:85:58:b8:8d:66:bf:e4:fd:04:85:a4:02:be:0f:
                    33:a8:c2:f8:51:8f:4e:17:8d:87:71:be:3c:f0:df:
                    68:9c:1e:2d:9b:a3:09:41:5c:dd:30:93:46:77:e2:
                    49:35:6b:ae:36:61:5b:32:37:4a:eb:9b:f7:83:ed:
                    0b:97:5b:3e:48:5e:d4:70:1d:f5:7e:a7:dc:03:57:
                    3f:0a:61:a5:f8:78:de:a0:ef:76:50:5e:f2:da:4f:
                    b1:68:c0:d7:79:b3:de:6b:5d:4b:84:5b:0e:34:ed:
                    17:4f:fb:c1:40:a0:6b:72:51:dc:82:5b:27:88:ac:
                    06:cc:32:6c:2f:f3:1e:da:41:3b:68:57:6e:cb:dd:
                    68:7f:53:5b:a6:29:e0:54:70:c2:dd:a0:3f:4e:ee:
                    f2:86:7d:7e:ae:59:01:e0:56:d2:9e:e8:de:7c:93:
                    cc:04:1f:f4:e9:f1:5c:5d:cc:80:1f:6a:fc:8a:1b:
                    44:90:88:2a:b3:e6:14:72:35:95:1e:30:33:7f:6a:
                    ce:1f:c6:c5:d7:f2:0f:6e:0b:2f:86:a4:d0:f3:37:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F1:F8:8D:65:C5:FC:84:50:B2:8B:33:E3:8F:86:BA:DF:F3:06:C7
            X509v3 Authority Key Identifier:
                keyid:43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:1f:3b:69:db:e9:2d:e1:cc:4f:ad:84:81:e0:d4:12:ba:54:
         3b:f3:b4:09:b9:24:94:79:26:90:1f:8a:bd:85:d8:bf:79:90:
         84:45:b3:88:97:7a:8b:cc:7a:41:e8:21:d8:52:a9:25:79:8a:
         0a:b0:4d:47:73:80:b0:d2:d4:1c:ff:fd:cd:eb:7e:80:ec:0a:
         16:ca:7e:fe:ae:ba:b8:b7:60:e3:d8:5b:d3:c9:cb:53:14:b5:
         6d:45:59:40:7c:e3:2c:7d:62:91:93:b4:47:74:6d:17:5a:eb:
         d8:52:20:05:25:ef:a7:1a:78:fd:90:00:83:18:30:44:b1:e7:
         76:ed:0c:75:15:0a:17:30:bb:6b:64:8a:80:e4:b6:f2:96:a5:
         09:10:4c:5d:88:86:c1:b1:f6:b5:3d:c7:2e:dc:f2:e2:24:5b:
         f7:89:24:8c:16:7e:da:f6:19:65:43:a9:e2:50:1f:25:e6:d4:
         68:1d:e2:58:6d:52:e2:95:cd:f9:d5:a9:c0:27:62:a6:fd:23:
         88:ef:6e:c3:b0:7e:d9:f4:98:b9:de:7b:bb:f3:1e:70:05:91:
         f6:c9:f3:50:54:df:aa:e2:c9:2f:bd:50:7c:c3:85:02:a8:91:
         66:1e:6a:3b:a4:c8:6b:53:1a:50:2d:a1:3b:56:66:24:d8:9e:
         0e:08:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----