Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.mft
File:                     AE4BD7B21208D3203D6C59108B06FAB2772A5E68.mft (raw, json)
Hash identifier:          Qb5VQQcQMu1a1GL8zc/9LSNA5CKD7kOGtX/yq4QxTxg=
Subject key identifier:   B8:E8:30:70:06:B8:59:BE:1A:41:6E:28:59:D4:FD:27:9F:C4:87:42
Authority key identifier: AE:4B:D7:B2:12:08:D3:20:3D:6C:59:10:8B:06:FA:B2:77:2A:5E:68
Certificate issuer:       /CN=AE4BD7B21208D3203D6C59108B06FAB2772A5E68
Certificate serial:       0BE0FC29FC75ABE2D3F667B90BFF70C0FAA68C7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.mft
Manifest number:          01E3
Signing time:             Sun 14 Apr 2024 21:08:51 +0000
Manifest this update:     Sun 14 Apr 2024 21:03:51 +0000
Manifest next update:     Mon 15 Apr 2024 22:40:51 +0000
Files and hashes:         1: 323830343a336461383a3a2f33322d3333203d3e20323636353435.roa (hash: bFeoxe1MY9I07JPDY5dJ68V8+03Dsscz9308loy2QAM=)
                          2: 34352e362e3139322e302f32322d3234203d3e20323636353435.roa (hash: USK7wszBfHSjSQo/TVFYx2OR2v573C7bAjMhw/mtKrQ=)
                          3: AE4BD7B21208D3203D6C59108B06FAB2772A5E68.crl (hash: fLr7eaPMdQbNqggHPoCgKD2xzsHLmxFaB7LDD0wkimg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:fc:29:fc:75:ab:e2:d3:f6:67:b9:0b:ff:70:c0:fa:a6:8c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4BD7B21208D3203D6C59108B06FAB2772A5E68
        Validity
            Not Before: Apr 14 21:03:51 2024 GMT
            Not After : Apr 15 22:40:51 2024 GMT
        Subject: CN=B8E8307006B859BE1A416E2859D4FD279FC48742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:75:0a:c9:d8:b9:1e:4a:87:73:40:32:08:
                    8e:07:d6:54:6e:ae:20:2c:d6:8d:4c:37:56:eb:03:
                    7d:8f:68:76:82:6e:50:42:de:6d:a1:d5:37:5a:7b:
                    95:74:33:8e:a8:5d:bc:b7:96:c9:b2:81:e7:72:8f:
                    b6:9a:0f:91:13:3b:18:7c:1a:a8:3d:bc:0f:82:89:
                    9f:87:15:0f:bc:81:e2:fb:2e:39:d4:ca:8b:6d:5e:
                    d2:c6:20:c4:4b:58:ed:eb:69:34:2f:1c:27:62:3e:
                    54:3b:44:2b:47:00:fe:c8:45:8f:c8:8f:ca:0c:1c:
                    eb:4c:45:c8:e2:1f:42:50:5c:6b:2e:04:92:33:55:
                    fb:f0:bb:4c:b3:64:2f:12:1b:e2:84:5b:b0:e0:d4:
                    a3:a8:a2:49:d4:c9:f4:96:e7:53:dc:7e:31:7d:25:
                    3d:c7:f2:52:a9:37:ad:4e:f6:f1:85:0b:b9:fc:de:
                    2c:23:39:53:a3:9f:1d:21:86:4e:1d:a5:55:da:b4:
                    95:6f:58:0b:68:33:2c:61:b0:f4:9d:62:81:7d:39:
                    e7:7d:10:75:7b:cd:c6:19:6e:7d:33:05:86:3c:69:
                    8b:96:4f:07:39:46:ce:c7:69:61:7b:ec:70:92:fd:
                    6e:04:a7:94:f1:4f:3d:7c:d0:74:09:c3:e9:46:4c:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:30:70:06:B8:59:BE:1A:41:6E:28:59:D4:FD:27:9F:C4:87:42
            X509v3 Authority Key Identifier:
                keyid:AE:4B:D7:B2:12:08:D3:20:3D:6C:59:10:8B:06:FA:B2:77:2A:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/AE4BD7B21208D3203D6C59108B06FAB2772A5E68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:f2:30:b9:59:33:25:b9:d2:24:f0:89:29:99:77:9e:79:
         ab:f1:5d:8f:2d:19:1b:48:55:fd:a7:07:af:9c:02:e7:ee:99:
         8c:2d:0f:b3:34:fe:09:f7:12:07:48:15:c5:b1:25:68:2b:52:
         7c:95:1f:7f:6c:05:87:ad:fa:c8:7b:89:ea:bf:f9:ee:fb:7f:
         3b:93:81:6e:2d:cf:73:fd:28:fc:7f:5a:4a:d2:ce:bd:c9:2c:
         3b:8e:95:6a:fa:f7:37:ac:72:89:c3:46:a0:4c:47:da:76:9c:
         66:e1:f9:13:cb:b3:41:30:42:a9:db:75:7e:fd:77:cd:5f:74:
         b8:2e:c1:e3:90:99:f7:ea:cf:a5:05:da:9b:38:3a:a2:c3:e2:
         a0:9d:90:cd:37:ca:c3:02:43:aa:01:0c:35:9d:b2:e4:e2:71:
         be:33:ab:d6:6f:75:af:f3:cf:1c:35:40:ff:dc:f0:fe:9d:3b:
         f0:ba:22:e3:b6:19:5f:44:d2:a3:1a:ff:3a:0d:f0:fe:a9:db:
         64:69:a8:48:65:f8:f3:8b:60:53:4c:0d:96:37:80:0c:96:79:
         33:f6:69:9b:95:3d:6c:3e:17:42:96:bd:98:fb:36:9a:14:07:
         f6:67:34:d8:24:9b:4d:93:39:c8:8c:88:31:1d:c1:ce:46:83:
         db:ed:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----