Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.mft
File:                     194101A33D960E2E468EFE8D2E2E701E8A073261.mft (raw, json)
Hash identifier:          m7mNKIRQR1WKW8S6WI+D3Nl1yJZBmmqvahqtTmOrROs=
Subject key identifier:   A2:D3:F7:10:94:0B:53:91:E6:0A:C8:37:CD:36:2D:D9:F7:A7:5B:EF
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       2F9A4135616689E2802F6715FA656A1F141EDE5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.mft
Manifest number:          01F8
Signing time:             Mon 15 Apr 2024 06:11:36 +0000
Manifest this update:     Mon 15 Apr 2024 06:06:36 +0000
Manifest next update:     Tue 16 Apr 2024 07:29:36 +0000
Files and hashes:         1: 3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa (hash: urtnpucaRCXaUXIB6ttk98kw5ymiW+3l7s0Juyrt9JE=)
                          2: 3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa (hash: NkpjYYu1EnMMGV1mVe5Q1tYzhTp7K1Dg1CelJf5E7kY=)
                          3: 3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa (hash: 9ROQ0x8oP/hH1uf/n+U6rDK/GNsL+ovkL89LAqdIF7I=)
                          4: 34352e3233322e32342e302f32322d3234203d3e20323637333031.roa (hash: qpwu4dGX882hdn94X6FJLOK96+JwKMKwyo2wpkMDCMo=)
                          5: 323830343a346235633a3a2f33322d3430203d3e20323637333031.roa (hash: mFb5vChCCauGYYGR3HrTuCrQHOuamy7RIH9gyRC13m8=)
                          6: 194101A33D960E2E468EFE8D2E2E701E8A073261.crl (hash: I55dydbhGOB9PF3RsLypkXcWPhbbQ4HlkPZ3M5taOco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9a:41:35:61:66:89:e2:80:2f:67:15:fa:65:6a:1f:14:1e:de:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: Apr 15 06:06:36 2024 GMT
            Not After : Apr 16 07:29:36 2024 GMT
        Subject: CN=A2D3F710940B5391E60AC837CD362DD9F7A75BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:2b:7b:d0:d2:b6:33:4b:a4:d8:d8:0c:f1:
                    6c:e9:25:8f:f3:54:69:be:3e:65:7b:74:ae:72:42:
                    a0:a6:26:54:20:2d:c2:3e:01:75:26:13:e5:87:dd:
                    e5:12:93:b0:30:5a:40:d3:d6:91:a6:1d:a8:fe:53:
                    fb:0e:f3:61:48:9c:ac:4d:87:58:d2:3e:74:4b:4f:
                    1b:dc:6e:1e:d6:b4:fc:bf:d8:bc:f4:f5:d1:4a:60:
                    a6:cf:5c:96:86:b8:b7:96:83:1f:5b:f5:18:04:ee:
                    65:4b:0d:6f:0e:2c:be:76:2e:c5:18:72:94:e1:71:
                    e5:7d:22:04:ae:81:e5:a6:ac:29:b0:d0:d9:d1:f3:
                    e6:f2:08:09:33:c1:6d:7a:7f:92:ad:30:0b:5a:b7:
                    b2:14:5d:f0:c1:90:fc:51:50:53:f6:cc:dc:d7:43:
                    0c:7e:33:8b:3b:66:01:d4:00:0e:51:c9:f8:b2:a7:
                    be:2b:ec:16:df:30:df:83:6d:90:8a:b8:15:30:f3:
                    71:9c:f4:29:36:1a:8c:a2:8e:4f:9e:5d:a4:65:6c:
                    af:00:03:33:4a:63:39:64:0f:f6:94:05:6f:f9:6e:
                    a1:1a:50:96:ba:df:52:fe:df:58:6f:db:ba:79:b0:
                    c0:29:0d:f1:7f:d0:e8:16:7a:59:b1:ac:1f:18:96:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:F7:10:94:0B:53:91:E6:0A:C8:37:CD:36:2D:D9:F7:A7:5B:EF
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:e1:dc:8d:f8:61:fe:7d:b2:b1:62:ca:9a:bd:2b:80:ff:7a:
         ab:fe:cb:62:fd:1e:65:a2:88:a5:09:0c:59:67:cd:92:40:00:
         b5:28:b9:0f:79:81:e4:60:00:11:91:a2:22:b2:fb:73:16:fa:
         7b:f0:a3:73:fc:b1:c7:b7:44:97:6f:d4:85:6c:9c:92:95:b5:
         19:91:1a:ea:6c:0d:79:6d:5e:cd:4f:43:81:1e:0d:cf:0f:cc:
         69:bd:d3:11:68:fb:64:a4:fc:83:22:cd:a7:1f:4e:e4:2d:32:
         34:e7:bf:d8:e7:fb:07:78:3f:ce:fb:fc:8a:a5:e0:6a:41:23:
         74:21:13:f5:c9:05:45:cf:10:c7:94:42:45:e6:39:86:da:83:
         20:4b:d7:8e:70:74:c2:29:f4:36:8b:d0:5e:7d:f3:c0:46:64:
         eb:71:aa:93:12:4a:bf:ec:03:93:b0:ab:37:4a:8a:7f:4e:b1:
         27:ef:b7:e5:e1:58:30:eb:67:39:ae:73:41:58:71:54:f5:9a:
         82:c7:a6:cf:0a:06:b2:8b:b1:30:dd:ca:02:88:a2:de:e0:e7:
         5f:64:f5:64:95:fa:08:51:9d:f7:08:f0:fb:a4:0a:da:f1:c8:
         b4:9e:f0:42:4d:47:83:1b:57:54:83:97:7c:34:79:64:71:17:
         fe:91:ca:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----