Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.mft
File:                     4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.mft (raw, json)
Hash identifier:          YXnMSQK5NpVeEXWdIEGKxSFOxdLnww8bFqZ5DCfjBC8=
Subject key identifier:   00:C1:4C:5D:4E:62:C9:30:AE:53:D8:E8:00:E7:52:46:DB:98:B9:32
Authority key identifier: 4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9
Certificate issuer:       /CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
Certificate serial:       36511B03F7CB82D97B22EEF684A3275BE41CD615
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.mft
Manifest number:          31
Signing time:             Sun 14 Apr 2024 19:44:57 +0000
Manifest this update:     Sun 14 Apr 2024 19:39:57 +0000
Manifest next update:     Mon 15 Apr 2024 22:16:57 +0000
Files and hashes:         1: 4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.crl (hash: 1OqCOm3GqkBYxP++ZAvP/CgSts68vVh1U2ttKOYbZBs=)
                          2: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: Jp0OfuXm8SL3ca09IojORIzMxmCVgbx2DDY1QBlpB7A=)
                          3: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: 9mdZ8dGEaQW+VRRMjs50lnelLUiXNeC47BblIAR1uT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:51:1b:03:f7:cb:82:d9:7b:22:ee:f6:84:a3:27:5b:e4:1c:d6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
        Validity
            Not Before: Apr 14 19:39:57 2024 GMT
            Not After : Apr 15 22:16:57 2024 GMT
        Subject: CN=00C14C5D4E62C930AE53D8E800E75246DB98B932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:8f:37:75:8b:00:f0:b8:fb:08:f0:5a:a6:83:
                    08:54:07:06:9a:e3:c1:a0:6e:de:3e:95:0a:5f:6c:
                    f7:c9:2b:c1:57:2c:7a:10:37:0f:9a:3b:ba:ce:61:
                    8c:1d:7b:b9:e6:6f:d3:83:b6:93:60:0e:2d:0d:b3:
                    fb:4f:6f:58:ba:02:34:ff:e6:f0:9a:c0:fd:2a:07:
                    53:d5:a8:19:85:1f:26:d0:50:82:9a:66:ae:b6:5e:
                    d6:3a:c9:2e:fc:b6:0b:28:52:38:89:17:ae:21:91:
                    d5:26:f7:70:ed:78:1c:f0:54:83:0a:50:0d:74:e7:
                    71:d1:1f:9f:fd:6e:51:73:fd:62:e5:82:31:49:60:
                    96:ac:20:42:7f:65:9a:76:e3:54:c0:3f:cc:ce:f7:
                    fd:2e:fe:24:01:47:04:2b:ee:43:95:78:3f:34:14:
                    50:c7:4c:8f:5f:6d:dc:4a:e5:a7:fe:77:b3:a5:05:
                    1e:c5:0f:c3:88:5f:73:b6:94:81:7d:87:18:6b:4b:
                    82:f3:be:4c:a6:b2:c9:4e:ca:3d:90:41:f9:25:00:
                    4e:e9:06:e8:5c:13:16:5e:c8:59:b7:fb:54:7f:3c:
                    4b:ea:1e:a1:f1:19:91:ad:34:87:9b:bd:75:2c:ba:
                    07:5f:a8:44:ff:c1:b9:c8:fa:74:23:85:9d:5b:a0:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:4C:5D:4E:62:C9:30:AE:53:D8:E8:00:E7:52:46:DB:98:B9:32
            X509v3 Authority Key Identifier:
                keyid:4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f0:da:a5:7a:b7:91:62:e5:19:6d:f4:ba:f8:dc:84:df:d9:
         10:bf:71:70:2d:40:2b:4b:c3:a4:41:d2:73:6c:5b:3a:97:e1:
         24:5e:87:27:a0:8f:d0:7f:c0:ad:9e:b0:87:26:fb:7e:05:1b:
         d6:45:6d:c1:02:4f:ae:76:83:20:82:d7:e4:96:db:44:7c:a1:
         46:d9:1e:52:eb:eb:27:9b:b3:c2:b7:44:c4:6e:f0:09:41:aa:
         4d:29:08:67:bc:ef:f7:d8:e1:6f:7e:e0:76:87:e0:34:47:2a:
         91:e0:a3:f0:dd:dc:f5:4e:94:49:ff:3b:2f:27:55:70:2e:48:
         e2:57:d6:de:6b:18:90:40:cb:30:2e:47:fe:db:23:c7:c7:98:
         81:ea:08:01:0c:6c:4b:38:fd:f5:9a:05:0c:cd:1c:e6:ed:dc:
         60:4f:8e:3b:90:60:71:b8:f0:9d:92:69:12:dc:36:be:d9:30:
         40:fa:fc:b4:7d:16:b7:e0:16:32:8f:44:86:be:82:e6:9d:29:
         71:56:85:f8:d2:3f:f6:6e:a8:19:98:a0:06:b5:d7:32:9e:68:
         53:82:92:ca:ee:28:80:f3:11:9e:d0:db:9b:75:04:0d:4c:9c:
         a8:19:71:d8:d3:15:be:72:7d:4f:48:ba:4e:7d:0b:41:0e:be:
         7f:56:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----