Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.mft
File:                     CE6673E4E2D92D342F7617B1A3604FBF01849C9D.mft (raw, json)
Hash identifier:          ycIL6YbZogH3UK38mqNjyTjA5lZg+Aw2UX4+MWPFzE0=
Subject key identifier:   9C:F5:B0:0B:18:6B:D5:94:6F:D2:A6:D0:8C:53:6F:42:F4:03:54:9D
Authority key identifier: CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D
Certificate issuer:       /CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
Certificate serial:       1A6A5E48487114126B6EB026FB5BCFB8871F4357
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.mft
Manifest number:          15
Signing time:             Mon 15 Apr 2024 09:20:20 +0000
Manifest this update:     Mon 15 Apr 2024 09:15:20 +0000
Manifest next update:     Tue 16 Apr 2024 12:16:20 +0000
Files and hashes:         1: 323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (hash: SEukqQ5ldYEDMvTnW9OPy8oLNO1X4sEhf2UdmJyYbbQ=)
                          2: CE6673E4E2D92D342F7617B1A3604FBF01849C9D.crl (hash: zCncNy2E3inFhScnTq5MTvZvDMbImxvemayRYPGKH4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6a:5e:48:48:71:14:12:6b:6e:b0:26:fb:5b:cf:b8:87:1f:43:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
        Validity
            Not Before: Apr 15 09:15:20 2024 GMT
            Not After : Apr 16 12:16:20 2024 GMT
        Subject: CN=9CF5B00B186BD5946FD2A6D08C536F42F403549D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:46:ed:58:7a:8e:c1:80:be:60:7b:38:a1:
                    b8:f4:bc:54:c8:4e:7f:4a:a1:be:3f:04:c3:6d:b8:
                    21:a7:27:44:35:2c:fb:3e:b4:c5:61:80:d7:66:21:
                    8f:cc:f3:be:90:c2:67:12:46:ae:81:bf:00:fe:ab:
                    7f:69:d6:34:61:e5:1c:8d:9f:ea:39:8e:45:19:0a:
                    d3:d4:84:88:62:c3:25:95:90:01:82:f1:44:b2:36:
                    5c:72:0b:47:e7:32:77:13:7b:ca:20:b9:47:50:8e:
                    8e:e6:e3:a8:7a:b8:d5:e3:09:de:3c:26:48:85:18:
                    01:75:dc:a2:cb:29:14:42:7f:84:a9:73:14:ea:fe:
                    44:26:c7:79:e3:22:f8:6e:ff:42:50:48:54:57:fd:
                    73:9b:bd:db:83:d9:b7:fa:fd:28:a8:18:b0:ab:45:
                    87:2f:20:92:0f:73:ba:b1:e6:d5:06:1d:d8:9f:d3:
                    bc:9d:a9:fc:9e:1a:b6:ee:2c:09:99:16:ef:25:3f:
                    cf:0b:55:7b:b9:85:73:ed:bf:0d:20:b1:f3:90:c9:
                    77:22:9d:d2:91:7d:4f:ec:d6:ea:c1:d2:8a:fe:aa:
                    f8:a0:89:d6:34:04:66:e1:e6:96:66:0e:ae:89:63:
                    37:b8:d2:4d:49:ae:d8:7c:be:c1:a4:4b:de:e5:26:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F5:B0:0B:18:6B:D5:94:6F:D2:A6:D0:8C:53:6F:42:F4:03:54:9D
            X509v3 Authority Key Identifier:
                keyid:CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2b:c2:64:25:a9:cf:0e:a7:60:6e:1d:54:f4:e4:30:a0:d0:
         b1:be:c0:ab:02:12:e7:b7:33:3e:e2:82:98:b0:fb:37:13:7f:
         0b:e5:bb:52:4c:bf:1c:34:f4:6e:58:69:e2:cf:8c:71:ef:f8:
         dc:d2:58:7c:5b:c6:ba:1d:5a:d2:b4:35:86:da:cf:f8:20:13:
         d6:40:00:17:86:39:fb:aa:6b:27:3c:82:d4:76:ba:3d:64:6a:
         9e:6f:7d:c5:4b:61:4e:58:a5:2c:4a:44:db:b7:db:05:d1:c7:
         86:da:93:92:07:52:ea:87:b9:3b:43:5e:85:25:d1:ec:f9:82:
         df:b4:14:02:29:5f:93:94:2e:bb:8c:9b:7b:41:e6:05:10:01:
         ae:97:68:dd:02:53:25:2b:5f:c2:75:88:48:7a:f1:9c:3c:fc:
         12:7c:28:3c:80:d1:8a:ce:fa:d0:23:9d:73:8d:7c:60:ae:61:
         fd:88:f8:2b:52:25:0f:2f:30:42:aa:95:20:df:46:12:ba:13:
         13:e3:ea:c4:05:cc:c6:6a:0e:61:16:70:82:66:31:f1:21:5b:
         26:a5:12:6c:2d:0b:9f:e2:f5:da:85:16:62:90:a2:2a:4d:93:
         72:27:d6:fc:f9:19:59:e5:21:22:32:67:41:1c:7c:1d:51:87:
         b3:37:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----