Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.mft
File:                     B143098A1B44489C70A871CE36309BA60CDA855D.mft (raw, json)
Hash identifier:          IfGga/41YsVMNdF6AzDSQrX8EH640sfsWGrRi2bxaL8=
Subject key identifier:   09:18:4F:6E:77:71:34:9F:87:DC:54:7B:16:9D:32:1A:BD:4E:CD:58
Authority key identifier: B1:43:09:8A:1B:44:48:9C:70:A8:71:CE:36:30:9B:A6:0C:DA:85:5D
Certificate issuer:       /CN=B143098A1B44489C70A871CE36309BA60CDA855D
Certificate serial:       410031C58C1E063BB6C7130329B6ED950DDE5C26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B143098A1B44489C70A871CE36309BA60CDA855D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.mft
Manifest number:          0A
Signing time:             Mon 10 Jun 2024 17:54:22 +0000
Manifest this update:     Mon 10 Jun 2024 17:49:22 +0000
Manifest next update:     Tue 11 Jun 2024 19:35:22 +0000
Files and hashes:         1: 323830343a333461343a3a2f33322d313238203d3e20323635343730.roa (hash: rKx9h3mhvwS/NwUog6wvDz7Qs038MdMa3yb8WQfuh+E=)
                          2: B143098A1B44489C70A871CE36309BA60CDA855D.crl (hash: H0+muRoChuCCyXuRX4mbWm9eWFd0AEmgqlCYuTjOcIk=)
                          3: 3136382e3139362e3230342e302f32322d3332203d3e20323635343730.roa (hash: MeVuiUb9EFXXnVDUMfWcVFcUFxMcQOPBxfD0VrJIDPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:00:31:c5:8c:1e:06:3b:b6:c7:13:03:29:b6:ed:95:0d:de:5c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B143098A1B44489C70A871CE36309BA60CDA855D
        Validity
            Not Before: Jun 10 17:49:22 2024 GMT
            Not After : Jun 11 19:35:22 2024 GMT
        Subject: CN=09184F6E7771349F87DC547B169D321ABD4ECD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:a5:14:7c:46:fa:76:fb:69:86:57:af:e1:
                    db:c7:72:85:aa:89:65:a1:42:82:5b:9d:50:53:fe:
                    2f:4d:e5:87:f4:92:c6:c2:2b:a0:a7:8b:a4:71:9c:
                    05:e9:4c:49:f9:fc:9b:4e:df:18:48:5e:1a:32:4f:
                    6b:f9:e1:f8:3b:3c:b4:ae:e4:9e:2e:e4:93:94:c5:
                    30:a0:0b:47:fe:40:1b:b8:ac:02:fe:2f:44:9d:cb:
                    58:2f:0d:d2:71:93:42:3b:9c:05:f5:00:37:8a:84:
                    da:ee:9d:4a:aa:f5:f1:e9:e6:3e:55:c3:41:06:79:
                    86:c5:cf:15:4f:63:93:d5:9a:e7:d4:68:f0:8b:be:
                    bd:f2:c7:17:f3:fa:a4:8a:a6:d0:d9:2e:73:36:bf:
                    24:d8:0b:c4:6b:5a:51:91:06:22:15:3e:a1:7e:f2:
                    f0:cd:23:05:90:a5:58:d3:e3:e8:94:a8:fc:a3:0a:
                    ac:9d:a5:0a:05:b1:76:22:74:b3:d6:33:04:2c:3b:
                    19:fa:92:77:47:45:97:f6:3b:67:20:5f:e0:00:6a:
                    57:94:80:1e:5b:94:40:0e:e9:d2:32:cb:a0:45:38:
                    6d:e8:d2:cd:2f:39:82:61:cc:45:87:a9:34:af:9b:
                    50:a9:42:6c:e8:5b:b9:e9:34:b7:ae:d6:e4:e5:ee:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:4F:6E:77:71:34:9F:87:DC:54:7B:16:9D:32:1A:BD:4E:CD:58
            X509v3 Authority Key Identifier:
                keyid:B1:43:09:8A:1B:44:48:9C:70:A8:71:CE:36:30:9B:A6:0C:DA:85:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B143098A1B44489C70A871CE36309BA60CDA855D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VBgharisGdaE4DiaXtG2cj7vKAvY91LUgu8LqAM7wQF/0/B143098A1B44489C70A871CE36309BA60CDA855D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:ec:65:2b:c2:4a:c3:a9:52:a4:4a:dc:bd:11:52:c0:3b:
         17:fd:99:fb:ea:d7:2d:60:5e:4a:f0:3a:e1:b7:88:80:85:7b:
         a8:bf:f4:12:1b:1d:81:c6:ca:0e:db:c8:a9:d2:9b:19:54:54:
         e2:06:2e:e5:39:31:db:e3:40:81:15:ef:e8:d4:e9:19:74:c6:
         0c:14:d0:0d:6f:c4:5b:c7:60:c4:0f:84:6d:f2:5a:e7:bf:de:
         42:ff:9d:1d:75:40:18:9e:bb:e1:ed:6a:93:e3:68:b4:fc:06:
         87:ab:f2:aa:e5:77:0d:e8:9c:fd:a2:1c:41:a6:cf:b0:60:4a:
         69:0c:57:50:88:7a:19:52:f8:ff:8d:81:33:38:ed:1a:98:35:
         8b:a9:fa:fc:39:97:8d:76:4f:e5:30:98:09:57:a8:d8:da:cb:
         2f:01:14:b2:56:54:f1:9e:ce:ac:b0:e9:ed:d3:de:3a:d6:d8:
         25:b0:61:d9:8f:9a:b5:00:20:d2:95:53:ca:b6:79:91:98:8d:
         5e:31:63:6c:e6:ac:d2:31:11:de:3d:67:c3:94:72:c0:29:a7:
         53:76:ee:eb:31:48:65:1d:db:1d:ed:fa:f4:61:e5:8b:33:b1:
         09:3d:ad:91:45:19:bc:2c:88:c2:6b:4e:f2:c0:58:17:44:4f:
         09:98:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----