Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft
File:                     68CE662D15AAF5135C77B867D79586761F235231.mft (raw, json)
Hash identifier:          XBv4nLtiXJ8jGg21QjYBl08mwS2FH3qlzjR1kPyvI20=
Subject key identifier:   9F:27:09:17:F1:0D:61:20:D2:43:A7:47:99:E5:D5:FA:36:EC:17:A6
Authority key identifier: 68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31
Certificate issuer:       /CN=68CE662D15AAF5135C77B867D79586761F235231
Certificate serial:       1386B7CA858CD53FF025681E0C8DCCDD2F98AFEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft
Manifest number:          03DB
Signing time:             Sun 14 Apr 2024 17:20:00 +0000
Manifest this update:     Sun 14 Apr 2024 17:15:00 +0000
Manifest next update:     Mon 15 Apr 2024 19:57:00 +0000
Files and hashes:         1: 3137372e3139302e37322e302f32312d3234203d3e20323633313335.roa (hash: ZTNnnqiCeZuc3ZpH4yGehotFLWh3/L0DTrOyHy4cAxg=)
                          2: 323830343a313734633a3a2f33322d3430203d3e20323633313335.roa (hash: jVyVVwYwClNVU6iakMw5Nzoeajo/rHKvB4db9ocaKoQ=)
                          3: 68CE662D15AAF5135C77B867D79586761F235231.crl (hash: ulidVuGnSkNnAPcPO+zNp9fvfVMz3n6RChMdOyTGub0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:86:b7:ca:85:8c:d5:3f:f0:25:68:1e:0c:8d:cc:dd:2f:98:af:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CE662D15AAF5135C77B867D79586761F235231
        Validity
            Not Before: Apr 14 17:15:00 2024 GMT
            Not After : Apr 15 19:57:00 2024 GMT
        Subject: CN=9F270917F10D6120D243A74799E5D5FA36EC17A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:d3:9b:d2:f7:f6:96:68:8a:99:47:e3:35:
                    11:27:b2:e1:31:f8:07:7e:59:eb:d1:58:16:ef:88:
                    80:42:14:ed:9d:b6:b7:36:0f:95:4c:62:76:fe:97:
                    26:42:97:6b:dd:53:07:f8:b8:75:37:97:b2:95:c0:
                    aa:c9:ab:93:ea:80:c2:b1:99:f2:d9:dc:3d:14:de:
                    32:4b:4b:c6:e4:71:3e:4d:85:39:8c:7b:20:3f:51:
                    c9:bf:81:a7:1a:24:fa:07:e8:ed:37:50:9c:f1:84:
                    b1:a5:51:32:e4:ff:e6:48:58:b9:10:22:52:c4:40:
                    4e:a2:c0:26:3a:99:00:bd:f2:82:a0:9e:c1:96:f1:
                    51:6d:10:f4:ed:6b:fd:52:be:69:89:a0:9b:8c:c8:
                    3e:1b:80:31:cf:35:78:f5:65:44:f3:6f:b0:94:c1:
                    01:6d:d8:53:80:f1:1d:5e:34:b0:2f:79:b8:6b:72:
                    32:3d:80:7f:64:8e:4f:1d:d3:2a:3d:fd:d7:4e:b7:
                    9f:81:92:d6:d4:78:34:d4:b6:39:68:61:7c:85:0e:
                    14:8e:70:6c:e4:cc:70:5c:ec:05:a9:5a:1c:85:3d:
                    9e:77:8e:1f:58:be:0f:b5:75:73:aa:16:85:85:94:
                    74:e2:57:49:a3:bd:6b:d8:70:7b:56:21:b8:49:b9:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:09:17:F1:0D:61:20:D2:43:A7:47:99:E5:D5:FA:36:EC:17:A6
            X509v3 Authority Key Identifier:
                keyid:68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:60:8f:d2:c8:75:ae:fb:79:10:e7:d2:47:fb:8b:37:bf:
         92:b4:5f:0f:45:e6:12:60:03:ec:4d:54:6f:50:db:da:26:25:
         c9:1e:86:4a:d6:12:44:d1:84:26:18:d5:55:d5:0b:bd:06:3a:
         20:54:c1:4b:a4:97:e3:b9:b3:a0:e2:48:b2:5e:a3:59:3b:e1:
         82:66:bc:ad:80:e8:97:ac:14:ce:af:37:92:d0:a8:7c:4a:8d:
         57:56:3a:91:b6:5b:97:5a:5e:26:d1:97:63:cb:73:08:cd:a2:
         f4:25:3d:5d:c8:ad:96:af:06:f6:45:4a:43:12:ab:13:aa:1f:
         43:6c:9f:e5:6f:82:d6:86:80:df:de:00:99:67:d8:d3:ab:ba:
         06:70:28:d8:8b:f6:1d:ee:e7:43:c9:75:0c:5b:85:56:1c:10:
         e0:33:81:49:46:7b:3c:16:9c:5c:f3:1e:3f:f6:ae:d8:79:20:
         97:28:17:cb:4b:b1:24:2b:c0:af:70:59:14:1a:f8:fd:9f:eb:
         1f:d4:4f:01:32:d7:4e:71:58:ad:2c:90:22:d5:f6:5a:ed:8e:
         ed:9f:35:9b:48:3d:60:da:a2:ed:24:1b:99:6b:c9:01:77:0f:
         28:e1:c7:b1:17:f1:74:84:04:f0:9e:c1:45:a3:a9:24:74:de:
         d4:98:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----