Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.mft
File:                     36443F5CDDD51B3F9CAFEB77478A46B1D280915C.mft (raw, json)
Hash identifier:          P5hN2oBYQw4FUHY9lgXMzdg70rqU4mqxpjSFmqQwHfU=
Subject key identifier:   B1:7D:0E:50:C3:84:EB:86:12:FC:F6:98:BF:97:BC:04:EE:C5:12:9D
Authority key identifier: 36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C
Certificate issuer:       /CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
Certificate serial:       4D1AE112EE539855140C91E84B60B37FBC146A39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.mft
Manifest number:          1C
Signing time:             Wed 24 Apr 2024 03:46:00 +0000
Manifest this update:     Wed 24 Apr 2024 03:41:00 +0000
Manifest next update:     Thu 25 Apr 2024 06:25:00 +0000
Files and hashes:         1: 323830343a373065633a3a2f33322d3334203d3e20323730373536.roa (hash: ERusAWdLBtWjIoVQFLwTt4/OVNnYwXEuN/UmOF4nSv0=)
                          2: 36443F5CDDD51B3F9CAFEB77478A46B1D280915C.crl (hash: L0AFNWIz4XqSRVRD+siJ1RM9JqXnwls+krH1OrHDZpk=)
                          3: 3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa (hash: Iw1BH/T/1+4Al3cDrTUOEqzzIUrIHYPPFjyRYljN3L0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1a:e1:12:ee:53:98:55:14:0c:91:e8:4b:60:b3:7f:bc:14:6a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36443F5CDDD51B3F9CAFEB77478A46B1D280915C
        Validity
            Not Before: Apr 24 03:41:00 2024 GMT
            Not After : Apr 25 06:25:00 2024 GMT
        Subject: CN=B17D0E50C384EB8612FCF698BF97BC04EEC5129D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:68:f9:01:68:c3:3d:cf:4d:d0:6a:ff:60:
                    cf:b1:41:70:c8:bc:e5:c7:5c:44:05:2e:ed:8e:45:
                    95:d5:05:a5:6e:37:70:e9:ff:4c:c2:ec:78:0b:54:
                    05:4e:7b:c5:85:74:db:83:d4:a6:b5:81:2e:73:0f:
                    cb:a6:91:95:ce:9e:0f:e0:b4:36:85:a2:32:a4:91:
                    a0:67:85:78:6e:5b:8a:02:5a:63:50:43:1a:4d:52:
                    f1:71:dd:c1:cd:e9:6e:9a:40:0c:9a:f4:c8:c3:f8:
                    71:13:c4:03:78:b7:1d:1a:71:25:57:59:45:bd:39:
                    1c:48:5e:64:68:c7:b9:15:4b:21:cd:b2:f2:fa:24:
                    c2:09:1c:a0:ca:d7:cd:e2:65:51:75:03:96:96:0b:
                    c0:1f:38:23:c3:30:ab:d1:48:37:c4:fc:86:21:1c:
                    6a:d2:4c:90:fe:b9:1a:c3:d4:9e:b6:e9:d3:9d:7e:
                    a0:ab:b3:04:60:95:cf:1a:77:00:01:ef:12:2f:8a:
                    79:97:78:a0:8e:4b:31:c2:a4:f1:46:01:0b:ec:e7:
                    31:7c:99:75:16:14:3d:f1:04:fe:f1:48:66:a3:47:
                    46:8d:40:66:9b:01:5f:c3:30:6b:db:6f:bb:72:ee:
                    8c:50:f2:37:58:60:56:e1:49:ae:a8:6d:6b:2d:b7:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7D:0E:50:C3:84:EB:86:12:FC:F6:98:BF:97:BC:04:EE:C5:12:9D
            X509v3 Authority Key Identifier:
                keyid:36:44:3F:5C:DD:D5:1B:3F:9C:AF:EB:77:47:8A:46:B1:D2:80:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/1/36443F5CDDD51B3F9CAFEB77478A46B1D280915C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e4:64:cc:4f:50:9b:c8:a5:c2:0e:9b:63:b6:d3:6f:4c:85:
         57:d1:8b:7c:43:c4:38:b8:ed:d7:c8:16:eb:6d:be:d7:38:b1:
         62:56:ce:c0:94:b3:b2:d7:88:67:e3:f0:91:5e:79:ab:21:0f:
         be:8e:65:e4:58:06:fb:f5:8f:bf:b1:47:a1:3c:3f:13:b6:05:
         a4:11:c7:5c:a6:60:fb:05:1f:c9:79:e4:53:54:4c:be:d3:77:
         a8:b8:2b:51:77:24:71:68:15:78:d6:7c:61:7f:30:5a:81:86:
         40:8a:13:f0:6e:7c:16:6e:bc:43:eb:cb:01:87:0a:59:19:db:
         b0:5c:28:f4:90:e0:11:a2:6e:06:86:87:9a:de:f3:75:3c:4e:
         ec:00:77:5c:8c:d6:9f:f6:d7:46:11:c0:1d:ba:92:42:50:ad:
         0d:11:e8:a9:37:69:97:93:61:f8:7e:a3:97:f6:1c:22:9d:60:
         a2:47:35:10:73:54:df:6a:31:a5:e2:d2:a5:c0:72:02:96:ef:
         c5:7a:9a:7a:78:82:c4:ad:99:83:35:8c:86:ea:79:0b:22:81:
         67:04:66:e0:da:45:56:85:b9:23:d0:a4:b5:5a:73:7f:32:5f:
         03:25:19:56:fe:5f:fc:87:30:aa:dc:07:f1:f6:61:77:c5:e6:
         a2:f7:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----