Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/529CC32F447A65BFF154360E02CBE21F27DA3B65.mft
File:                     529CC32F447A65BFF154360E02CBE21F27DA3B65.mft (raw, json)
Hash identifier:          UWTa2dmXNQ1tlOia2NKMr7MLa9vC9kXnlqu3eFB7FqU=
Subject key identifier:   47:9C:CA:4C:54:A3:F1:24:11:A2:3C:5C:CB:00:81:AA:22:1E:FF:B3
Authority key identifier: 52:9C:C3:2F:44:7A:65:BF:F1:54:36:0E:02:CB:E2:1F:27:DA:3B:65
Certificate issuer:       /CN=529CC32F447A65BFF154360E02CBE21F27DA3B65
Certificate serial:       3AFE7BBB917AF2F0AAED93E20A4FF1C6DC952C72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/529CC32F447A65BFF154360E02CBE21F27DA3B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/529CC32F447A65BFF154360E02CBE21F27DA3B65.mft
Manifest number:          57
Signing time:             Tue 25 Jun 2024 14:01:41 +0000
Manifest this update:     Tue 25 Jun 2024 13:56:41 +0000
Manifest next update:     Wed 26 Jun 2024 16:34:41 +0000
Files and hashes:         1: 529CC32F447A65BFF154360E02CBE21F27DA3B65.crl (hash: nxC8JcajUa88AfmvDTCvdhgIHBMsOqSfPzHbu0samhk=)
                          2: 3137372e35332e32382e302f32322d3332203d3e20323730383635.roa (hash: K+ifJvfHMZoZ0NDXkbscnqBcc734dG7DRKE2cDT/rxk=)
                          3: 323830343a373261303a3a2f33322d313238203d3e20323730383635.roa (hash: kbQ+OTXE9mTB0pfK/ZosAXczdsAHJEqeSES1Orj8H4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fe:7b:bb:91:7a:f2:f0:aa:ed:93:e2:0a:4f:f1:c6:dc:95:2c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529CC32F447A65BFF154360E02CBE21F27DA3B65
        Validity
            Not Before: Jun 25 13:56:41 2024 GMT
            Not After : Jun 26 16:34:41 2024 GMT
        Subject: CN=479CCA4C54A3F12411A23C5CCB0081AA221EFFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:85:31:c5:52:cf:82:88:f5:ac:43:92:5b:
                    96:68:36:25:08:6a:33:23:74:1d:b2:91:5a:97:a8:
                    1e:9e:28:00:5a:f0:28:27:be:e7:2d:13:ee:cd:26:
                    81:ca:98:55:7d:70:1a:66:7d:8d:62:c8:81:fb:c0:
                    2e:13:88:59:a6:33:78:11:58:cc:ab:2f:7f:fe:13:
                    6b:6d:dc:2e:77:b0:11:5b:b8:06:11:f2:1f:31:bb:
                    3e:74:59:84:05:fb:9b:ad:7e:e7:b1:92:23:d7:2a:
                    1e:a4:c6:a2:b7:b8:3e:71:53:ce:47:e6:16:99:83:
                    c2:8d:12:c9:c8:fe:08:bc:a0:46:1b:4a:14:3a:c6:
                    b0:32:35:0b:07:53:f9:e8:c8:d9:b6:fe:0b:80:af:
                    8b:df:bd:e6:1b:74:47:62:00:9e:72:d1:ff:a6:18:
                    1e:16:83:cc:57:89:02:ad:77:02:0b:fb:db:96:0c:
                    b5:27:e4:0f:94:9f:51:d0:54:e6:c5:3d:fd:fa:12:
                    90:8a:f7:e0:8b:34:cb:36:78:17:ae:69:46:dc:eb:
                    ce:a8:42:74:3c:6b:70:69:0f:3a:88:14:62:98:05:
                    20:36:d7:70:86:a4:94:d9:1d:20:71:0b:23:45:26:
                    ab:01:da:dd:c5:c7:df:16:9e:b0:a3:da:3d:12:f1:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:CA:4C:54:A3:F1:24:11:A2:3C:5C:CB:00:81:AA:22:1E:FF:B3
            X509v3 Authority Key Identifier:
                keyid:52:9C:C3:2F:44:7A:65:BF:F1:54:36:0E:02:CB:E2:1F:27:DA:3B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/529CC32F447A65BFF154360E02CBE21F27DA3B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/529CC32F447A65BFF154360E02CBE21F27DA3B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/529CC32F447A65BFF154360E02CBE21F27DA3B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:0c:d6:3c:71:b0:fb:30:a3:e3:7c:eb:c4:47:4c:10:a0:b9:
         b3:9e:f1:7a:56:03:ad:c8:d3:e5:39:e5:3d:7f:c7:4f:b3:d2:
         54:ed:33:ab:14:7a:f2:a7:57:d2:ed:57:88:15:e3:30:3a:74:
         c2:7d:2d:22:60:52:9d:83:2b:68:c9:3d:3c:6d:e5:de:91:d4:
         17:00:58:fc:fd:cc:15:76:b4:3f:40:3c:9e:04:5c:2e:fb:0d:
         96:07:9c:33:e2:19:2e:b0:28:47:44:0a:be:6c:5b:52:90:aa:
         1e:52:ef:63:cf:09:2e:b3:88:a9:1e:fd:75:b4:80:6c:35:72:
         79:e1:a1:ac:1d:cc:58:73:24:bb:82:c8:83:ae:f3:56:a7:e1:
         93:b9:a6:c3:5c:17:fa:52:2f:76:cf:1e:15:a8:0c:57:bc:3d:
         1b:3e:df:00:0a:92:18:c5:ef:28:53:50:34:84:fb:12:0e:16:
         9e:26:ea:5c:89:6b:2b:3b:4a:38:2f:2e:44:9c:6b:a8:ce:6c:
         6b:a7:c2:7c:c5:41:66:45:ef:cc:81:31:b1:6c:34:ff:34:59:
         0a:c4:b5:b3:e8:2d:d4:32:7c:12:6b:fe:aa:e2:d7:f4:0b:d8:
         62:64:9d:24:3d:e6:2c:70:52:cb:a3:50:47:7d:22:e2:fe:4a:
         86:50:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----