Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.mft
File:                     AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.mft (raw, json)
Hash identifier:          ENmYXrS+OrOK3FwlqMh70TzjfEZza0sfuJX4e/yYUwU=
Subject key identifier:   55:5F:4B:23:AF:03:30:A5:77:09:9A:29:CA:13:E1:D6:2C:FB:BA:E0
Authority key identifier: AC:88:BA:0A:CE:3A:7A:A9:D9:2C:6B:11:C7:7C:BB:3E:C4:4D:5C:40
Certificate issuer:       /CN=AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40
Certificate serial:       021775DABF4411625031990569D3DB635EF6658F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.mft
Manifest number:          0399
Signing time:             Mon 15 Apr 2024 07:58:06 +0000
Manifest this update:     Mon 15 Apr 2024 07:53:06 +0000
Manifest next update:     Tue 16 Apr 2024 09:48:06 +0000
Files and hashes:         1: 323830343a6430383a3a2f33322d3438203d3e20323632333131.roa (hash: MV+DTY16pMVnpZ4AY5NCNdLQelUvp7EChl+eoOTsUcM=)
                          2: 3137372e3132342e302e302f32312d3234203d3e20323632333131.roa (hash: NXTL3tXt3aHGRwUPA82eM6AQOR8a3ImbqHLunIcNwZA=)
                          3: AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.crl (hash: nxBvCiQg9xrVpYY6FscsCS02LkcyUeMHe7FObfqWOOU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:75:da:bf:44:11:62:50:31:99:05:69:d3:db:63:5e:f6:65:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40
        Validity
            Not Before: Apr 15 07:53:06 2024 GMT
            Not After : Apr 16 09:48:06 2024 GMT
        Subject: CN=555F4B23AF0330A577099A29CA13E1D62CFBBAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:10:e4:6d:a9:cf:5e:19:17:73:63:28:da:
                    1f:33:55:a8:fd:90:87:38:1f:ad:bc:7d:ea:74:74:
                    5a:d4:6e:e7:65:4d:c4:a2:bb:cf:05:e7:28:31:ae:
                    8d:08:10:e2:42:74:10:e9:00:d2:1d:14:3e:ce:4e:
                    07:8b:39:55:d1:f4:b5:25:34:08:0a:4a:55:3b:68:
                    a5:2f:28:20:b7:e7:7a:cd:13:1e:0f:7e:38:45:43:
                    f1:c4:dc:42:6e:78:cc:a9:77:6e:cd:0d:79:bb:0a:
                    9b:58:b5:d8:4b:62:fe:8c:43:84:4b:fd:27:d8:f5:
                    6d:6f:15:50:61:15:e2:72:fc:cb:39:0a:fc:0a:91:
                    90:3a:f2:e3:92:dd:2a:34:60:16:04:70:78:c6:f9:
                    7f:87:11:94:5c:79:5d:7c:0d:fe:64:f6:70:1c:e9:
                    5f:b3:45:68:b0:cf:93:dd:92:bb:a6:22:02:ca:46:
                    43:15:c6:4e:0a:a6:a2:00:d8:92:ba:70:a4:52:f4:
                    13:57:11:fb:50:c2:91:6f:b7:11:f8:42:6b:97:8a:
                    f5:1b:1e:7d:55:1e:ba:ca:b9:33:d0:fa:f6:b4:80:
                    fb:48:7a:d8:c1:ae:08:1c:6f:a4:6e:a1:78:15:84:
                    d9:c2:45:9e:5d:91:23:f3:9b:56:c6:f2:9d:10:56:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5F:4B:23:AF:03:30:A5:77:09:9A:29:CA:13:E1:D6:2C:FB:BA:E0
            X509v3 Authority Key Identifier:
                keyid:AC:88:BA:0A:CE:3A:7A:A9:D9:2C:6B:11:C7:7C:BB:3E:C4:4D:5C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/0/AC88BA0ACE3A7AA9D92C6B11C77CBB3EC44D5C40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:51:3d:69:d2:61:fa:c2:c6:03:09:a7:91:db:7b:0e:f8:85:
         9a:30:c4:7c:2e:8b:3d:f7:32:90:a3:5b:10:22:8f:ba:ac:d5:
         8c:67:f7:e1:57:e3:fd:f3:ac:d6:95:ab:56:b6:e9:77:95:32:
         b5:4b:68:04:59:29:14:da:2f:2f:a1:f2:96:fe:a7:f6:81:63:
         d9:45:78:fc:50:a5:b0:fb:bd:d9:a9:13:11:20:d6:f9:b3:f7:
         e4:ed:4f:53:8c:02:6a:70:45:1a:13:bf:5e:1b:24:89:c3:f5:
         46:96:75:f2:17:07:27:ba:33:d4:b1:6b:da:be:54:38:d4:17:
         f3:1e:4b:e5:23:30:dd:5c:81:3f:0e:13:3a:f0:6e:9b:93:be:
         67:bb:1e:89:15:fc:ab:23:fe:5c:64:dc:64:6c:45:f7:70:95:
         26:51:cd:e0:8d:84:df:e0:2d:37:c0:a0:c6:17:66:c8:22:e8:
         ed:f7:42:16:73:e3:ba:7b:65:49:2d:f5:f6:25:ce:ca:4a:f8:
         54:a9:26:90:23:bf:95:ec:47:ac:9b:d8:5a:a5:5f:02:e4:dd:
         ba:11:d9:5f:64:5a:da:52:8b:52:44:38:5a:e0:ad:bc:7b:0a:
         68:b2:41:01:90:8f:b7:18:25:56:ef:d3:13:c5:ad:76:19:57:
         72:1a:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----