Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.mft
File:                     2DB41A3BC0B44F47245BA46320F4817897477307.mft (raw, json)
Hash identifier:          pDodHnfbvAUSAP1B8mQTSZkS0M2zpBxrubybadd2ahI=
Subject key identifier:   F1:BE:35:3F:22:C1:A2:52:4A:FC:F2:7D:22:E2:1D:6F:DA:F4:AB:DE
Authority key identifier: 2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Certificate issuer:       /CN=2DB41A3BC0B44F47245BA46320F4817897477307
Certificate serial:       7CCEAA8EF1B53D0C9CCFB9F8987F7E41263B5351
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.mft
Manifest number:          0279
Signing time:             Mon 15 Apr 2024 08:36:30 +0000
Manifest this update:     Mon 15 Apr 2024 08:31:30 +0000
Manifest next update:     Tue 16 Apr 2024 10:00:30 +0000
Files and hashes:         1: 2DB41A3BC0B44F47245BA46320F4817897477307.crl (hash: IWOsqEJcW+ZIZ7C7RKc1chlDLM5S3KQEvthAMpgO3wE=)
                          2: 34352e342e3131382e302f32342d3234203d3e20323636303438.roa (hash: 09Q3Q8yYVVCkUN/o6nbYd/cMHSDiAPhyzWyUx0uRtzo=)
                          3: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: SFsTc3xeeEYp8IjExkBxD6X20nBuebF0Li9WUED9Dy0=)
                          4: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ZHVszvFdJCXVGqMjprlkm4uCav1wmztJDdwhIViyFUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:aa:8e:f1:b5:3d:0c:9c:cf:b9:f8:98:7f:7e:41:26:3b:53:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DB41A3BC0B44F47245BA46320F4817897477307
        Validity
            Not Before: Apr 15 08:31:30 2024 GMT
            Not After : Apr 16 10:00:30 2024 GMT
        Subject: CN=F1BE353F22C1A2524AFCF27D22E21D6FDAF4ABDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:d7:04:86:5c:74:4e:3f:34:ef:74:0e:54:
                    e9:7e:90:24:7a:ab:b5:58:c3:3e:3f:b1:a0:2d:ea:
                    14:b0:09:23:4c:e0:66:65:89:8d:69:bb:62:f6:54:
                    21:9b:43:79:71:8a:bf:01:23:4d:fb:a5:87:47:91:
                    68:20:f1:13:7b:4f:6a:27:b7:59:db:a8:f5:7a:d9:
                    7c:64:77:94:94:36:da:5e:3f:0f:e9:1a:72:9e:ed:
                    a0:6f:2a:d2:39:fe:5b:c2:4c:c9:1c:6a:f3:ec:96:
                    47:8c:27:38:08:74:d2:ae:67:ab:7d:82:7e:14:d1:
                    9d:3b:6e:9e:1f:4c:10:f8:df:4e:96:9e:b0:71:24:
                    53:aa:96:24:2e:42:3e:b5:3b:d9:76:42:2e:d4:52:
                    5c:69:96:51:15:91:15:6f:60:65:6a:b4:de:9d:3e:
                    f7:e7:ba:6a:b9:7e:1b:29:08:a0:a0:77:57:58:aa:
                    4b:97:a5:cc:04:52:08:83:a6:82:17:13:7a:d5:f0:
                    91:cb:de:d1:ee:83:05:dc:0e:43:ec:ee:b3:ea:ae:
                    f9:59:3b:c3:4c:8b:4a:65:0c:49:47:71:8e:33:9b:
                    5e:45:9d:85:66:aa:37:dc:d2:99:e5:9d:f0:48:27:
                    d5:76:43:d4:36:d3:b7:55:f1:ac:39:b8:b0:91:c6:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:35:3F:22:C1:A2:52:4A:FC:F2:7D:22:E2:1D:6F:DA:F4:AB:DE
            X509v3 Authority Key Identifier:
                keyid:2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:af:e1:1e:e4:c9:cc:be:ce:1e:15:9f:ba:9d:a4:28:fa:
         fb:e3:27:2c:1d:3d:9c:40:25:d5:db:60:12:90:a6:a5:ba:75:
         10:ba:7b:fc:89:b5:99:35:bb:34:99:a3:5a:fa:c3:13:c1:b6:
         49:1c:1b:ad:75:98:0e:5b:a4:91:1f:c7:3f:c3:bc:51:4e:c9:
         31:7a:f5:f6:a0:8d:d6:86:e2:d5:db:4e:56:ef:87:7c:37:b4:
         c9:10:dc:5d:ea:34:bb:58:f1:fc:ef:82:d9:24:c9:50:28:7f:
         dc:67:08:a0:f1:83:f1:ed:f7:67:ca:5f:35:87:ed:df:16:9e:
         d2:5c:a3:8a:2c:7e:a3:48:c0:f3:cc:55:a0:c4:4f:68:96:98:
         6c:bd:aa:d0:07:a5:15:1e:17:2f:9f:90:90:c9:87:90:7c:65:
         d7:ae:a8:48:22:9a:5d:81:08:a5:68:19:ac:53:1c:9e:59:0e:
         f8:7b:01:46:49:e9:1f:f6:f0:6f:6c:bf:4f:d6:03:2c:ed:97:
         13:b4:61:b3:a1:e7:de:09:e2:e9:2f:61:dd:8e:3d:65:42:02:
         f3:86:9f:57:43:0d:19:ca:4b:12:6b:fc:e8:57:b4:b1:97:0b:
         b5:64:b3:93:ad:0e:c9:5b:bb:89:ca:d0:89:64:98:d8:e9:9a:
         d3:f7:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----