Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.mft
File:                     412E8E4AE762185CBFFAC82A35CE1688AEED73DA.mft (raw, json)
Hash identifier:          8+foKShyoOAlcHOZTzTIHnaGRad/tNLFueVKioLhzNY=
Subject key identifier:   8C:3A:0A:B1:3F:0E:1E:82:11:F1:22:54:E0:BC:0C:64:E6:99:3C:71
Authority key identifier: 41:2E:8E:4A:E7:62:18:5C:BF:FA:C8:2A:35:CE:16:88:AE:ED:73:DA
Certificate issuer:       /CN=412E8E4AE762185CBFFAC82A35CE1688AEED73DA
Certificate serial:       36F1DC7EE46EA36AA64BE9240602F6CB0ACCA89B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.mft
Manifest number:          0345
Signing time:             Mon 15 Apr 2024 07:04:00 +0000
Manifest this update:     Mon 15 Apr 2024 06:59:00 +0000
Manifest next update:     Tue 16 Apr 2024 07:04:00 +0000
Files and hashes:         1: 3139312e3234332e36392e302f32342d3234203d3e20323633343937.roa (hash: zkWOcBbQgtWHN6UNCiKtSQHut9OJcZzRJZuzW1RL8u8=)
                          2: 3139312e3234332e36372e302f32342d3234203d3e20323633343937.roa (hash: 5CBUWiRVTlEak5DitjiHhmDlSIfqnALIqNy9cOCqzs8=)
                          3: 3139312e3234332e37312e302f32342d3234203d3e20323633343937.roa (hash: UAUMkfVGjtJQtkEXpKX/p/lQqZWiYcwBxRbUp37gUIs=)
                          4: 412E8E4AE762185CBFFAC82A35CE1688AEED73DA.crl (hash: cBJqexXycFxleKG5HVUY8XqaM+vE9fButxPwAjrs/L4=)
                          5: 3139312e3234332e36342e302f32312d3231203d3e20323633343937.roa (hash: lRupmhOFweuuy93twtVtQiTPX+rm+u6VtLjzU4Q7oJc=)
                          6: 3139312e3234332e36382e302f32342d3234203d3e20323633343937.roa (hash: 8+8eeXdhZesVyBP/ZQqb0v8bjTqSVRCCKjsHZ2HzAiE=)
                          7: 323830343a313263343a3a2f33322d3332203d3e20323633343937.roa (hash: 4rTaLj+gOh9ataKFp2zdsCJs5vvMMptpUeGsZ97sLOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f1:dc:7e:e4:6e:a3:6a:a6:4b:e9:24:06:02:f6:cb:0a:cc:a8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412E8E4AE762185CBFFAC82A35CE1688AEED73DA
        Validity
            Not Before: Apr 15 06:59:00 2024 GMT
            Not After : Apr 22 07:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:a6:ee:ce:0f:cc:55:c3:ac:f0:06:08:06:
                    5f:a8:61:08:f6:40:3f:b7:f1:dd:15:07:89:b2:61:
                    b9:c1:ca:0d:d3:bc:6e:b2:94:8c:8a:f9:12:4d:a3:
                    67:5a:fd:7b:c2:d5:0b:1f:09:14:44:b0:c9:f3:93:
                    d8:fb:da:00:be:40:8c:d6:49:a4:3a:4f:01:40:44:
                    a4:5b:cc:6c:6e:74:d1:b8:9e:92:20:4a:21:63:80:
                    56:56:7b:50:f1:d4:84:3e:bc:16:da:ea:de:ac:f9:
                    0e:ec:cd:c5:4e:ff:e1:1c:1b:19:18:3a:15:65:ed:
                    79:e4:d2:bf:c1:53:eb:7d:ae:24:6c:3a:32:43:71:
                    44:32:15:59:0b:a0:9e:21:49:24:fc:a8:d6:08:96:
                    ab:33:e6:d9:5c:ae:85:7a:71:cf:e1:25:32:a7:4a:
                    76:de:2b:f3:27:1f:22:15:33:88:b1:b8:c1:ee:ac:
                    59:64:70:54:ae:24:ca:34:81:fc:92:47:1b:a5:17:
                    a5:3d:57:2c:f4:cc:5f:41:47:de:36:2f:a3:d4:7b:
                    10:93:da:4a:57:a5:7c:77:4b:c1:40:6e:39:5f:3b:
                    6c:06:3e:bd:2d:75:b3:12:95:6c:6b:ec:e7:43:12:
                    d5:02:63:a0:dd:dc:a3:ea:de:08:c3:c4:63:fd:72:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3A:0A:B1:3F:0E:1E:82:11:F1:22:54:E0:BC:0C:64:E6:99:3C:71
            X509v3 Authority Key Identifier:
                keyid:41:2E:8E:4A:E7:62:18:5C:BF:FA:C8:2A:35:CE:16:88:AE:ED:73:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/412E8E4AE762185CBFFAC82A35CE1688AEED73DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:03:45:5c:ad:60:8b:ff:41:da:83:c8:88:ae:b5:b8:fb:31:
         44:c3:a7:8f:e3:52:69:12:e5:04:c5:b1:cc:ce:18:62:52:a8:
         2a:af:84:7a:4b:08:9e:83:61:9a:e2:eb:ea:63:12:77:f8:d7:
         23:f5:ba:e9:63:28:bf:06:33:d9:f3:a1:41:b4:04:ec:50:13:
         e3:13:63:9f:83:4a:75:43:07:3c:d7:d7:71:15:1c:7f:50:67:
         63:53:d0:ee:a0:64:62:6d:c5:20:34:d7:73:6c:2f:b6:fc:26:
         fb:c3:8a:6b:5d:c9:c3:f3:29:bb:06:39:71:34:81:de:ec:8d:
         fc:69:2a:b1:69:0b:98:95:08:75:98:6c:d7:3a:0b:79:9a:cc:
         5f:e8:62:4c:f9:40:1f:2e:6c:5d:33:86:30:89:ac:1e:98:a5:
         6a:95:cc:25:64:70:50:32:85:4c:72:bf:ec:74:80:b3:bd:50:
         44:5b:1b:d6:c2:cc:ee:f5:45:e0:af:16:f8:d9:3d:75:dd:1e:
         36:0a:38:91:2f:c7:68:9e:c3:b5:21:89:fc:24:30:d9:81:31:
         9a:99:2c:ed:51:d9:b0:e4:1d:d8:16:c0:99:ed:6f:c7:d3:fa:
         1b:9e:c7:6d:15:b7:09:3b:6d:03:26:1c:f6:11:43:ce:90:3c:
         74:ad:bd:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----