Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.mft
File:                     8559016835EC22243929486F6B477BAEFB162FDC.mft (raw, json)
Hash identifier:          cR/ej5nsMrYa2rXLQy3TwIvQWC5JRbNYjRT1UnuUByA=
Subject key identifier:   AD:5C:72:BF:CC:BA:30:9B:69:60:AC:2A:0B:64:96:37:CB:50:1D:21
Authority key identifier: 85:59:01:68:35:EC:22:24:39:29:48:6F:6B:47:7B:AE:FB:16:2F:DC
Certificate issuer:       /CN=8559016835EC22243929486F6B477BAEFB162FDC
Certificate serial:       15327E659E4925018874BA5B1B68BDD3C0BA0057
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8559016835EC22243929486F6B477BAEFB162FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.mft
Manifest number:          3F
Signing time:             Sun 19 May 2024 02:39:51 +0000
Manifest this update:     Sun 19 May 2024 02:34:51 +0000
Manifest next update:     Mon 20 May 2024 06:31:51 +0000
Files and hashes:         1: 8559016835EC22243929486F6B477BAEFB162FDC.crl (hash: pZqUh98HsrCKHMm/Fh98leZz+1iIdrhnhZTup4k5GqI=)
                          2: 3137392e34382e34382e302f32322d3234203d3e20323731323430.roa (hash: 0sqbIwqFj+PZR4dAGix2u5yVUMN0T0AJG9s2qMlMYm8=)
                          3: 323830343a373836383a3a2f33322d3438203d3e20323731323430.roa (hash: 4BNROBvAmJ3vZMmBhBs5l3Ea9EahYdGJNRI1/RDpxmg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:32:7e:65:9e:49:25:01:88:74:ba:5b:1b:68:bd:d3:c0:ba:00:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559016835EC22243929486F6B477BAEFB162FDC
        Validity
            Not Before: May 19 02:34:51 2024 GMT
            Not After : May 20 06:31:51 2024 GMT
        Subject: CN=AD5C72BFCCBA309B6960AC2A0B649637CB501D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fd:08:6f:1d:c3:42:5e:09:86:26:0a:eb:a8:
                    d8:d3:5f:68:15:e7:0a:b0:e5:44:9e:6d:06:42:32:
                    88:ea:94:4d:3c:06:2c:92:09:2a:1d:1c:cc:24:5e:
                    3d:c0:0a:76:a8:93:aa:2d:09:17:dd:10:47:47:8b:
                    f0:76:00:4a:d2:70:29:a9:5b:42:30:1e:23:88:22:
                    56:fb:71:0b:a0:8c:53:f7:f2:81:84:00:f5:3d:7b:
                    06:d3:b1:5f:6e:e2:ef:f4:87:4d:2f:34:a0:21:15:
                    35:99:9f:ef:09:c4:8a:60:d4:51:88:89:cb:79:d2:
                    d4:ac:e6:4c:f7:23:fd:21:fc:fc:a7:a7:f4:f1:9d:
                    c1:b4:55:22:a9:dc:7d:89:28:18:0a:85:9c:b8:4a:
                    7d:c4:7a:bd:40:ae:25:9c:58:f4:5b:f0:9e:02:2e:
                    df:3d:bf:57:82:c5:4e:1d:a5:5e:62:28:50:6f:3b:
                    c1:54:a9:16:f0:63:c2:e6:3f:ab:47:bf:4e:3c:f8:
                    10:b5:2a:89:0c:1f:14:69:89:a8:b9:15:24:6c:a6:
                    4b:20:64:7f:0a:8b:fc:3b:42:82:06:84:70:28:c3:
                    8a:f7:7e:7a:69:86:51:ac:e8:cb:4f:bc:65:67:0b:
                    71:6c:52:a7:5c:84:9f:60:5f:3f:f5:13:9b:26:0e:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:72:BF:CC:BA:30:9B:69:60:AC:2A:0B:64:96:37:CB:50:1D:21
            X509v3 Authority Key Identifier:
                keyid:85:59:01:68:35:EC:22:24:39:29:48:6F:6B:47:7B:AE:FB:16:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8559016835EC22243929486F6B477BAEFB162FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d1:5d:60:70:2e:4c:96:37:fb:5e:26:65:68:3d:49:f1:cb:
         4b:ac:9f:bf:72:eb:e7:f6:03:f7:14:2c:9e:ad:a8:0e:79:16:
         b3:10:6c:6b:d6:c0:2d:3f:b4:8d:05:6e:9c:39:72:dd:17:39:
         2b:6d:81:16:ad:f5:bd:ab:42:f2:a4:70:9b:8e:9c:c5:55:3e:
         c8:f5:fb:da:90:4d:79:19:8c:dd:b3:95:5d:98:99:eb:cf:0a:
         27:b1:48:dc:7d:f3:b6:d3:1f:a9:1a:70:47:86:9d:8f:1a:8e:
         4e:99:73:7f:27:11:b8:d7:63:40:16:c9:5b:1f:8d:3a:68:84:
         78:43:36:d4:bb:5b:b3:27:c9:9b:f6:73:59:ee:92:a8:38:8b:
         4d:e0:89:22:61:65:7f:63:e7:de:33:ae:22:d7:c7:39:cb:21:
         94:14:c1:4b:c3:03:d6:58:06:fa:39:03:70:df:90:2e:a2:ee:
         2b:1d:bf:fc:68:b4:f1:a8:52:83:79:6b:e1:8b:c5:cf:69:9a:
         ca:13:69:6d:36:4a:63:42:fc:81:ef:9f:7b:29:9f:b0:56:08:
         d7:70:cf:27:d1:b5:a3:80:60:cf:ab:5b:36:51:05:42:56:b4:
         ff:c2:76:2b:25:d2:89:57:ad:80:e3:b4:4b:69:2a:7d:49:6d:
         e4:94:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----