Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/49F994834C75CE03A545CED4889AD66B26C112CB.mft
File:                     49F994834C75CE03A545CED4889AD66B26C112CB.mft (raw, json)
Hash identifier:          5To2g/pLh1+/i1rk+nnIuRBUHQVYuYsMMiOsciXC8G0=
Subject key identifier:   4D:99:83:4C:04:B9:99:61:0B:1E:5B:9D:C0:82:85:75:94:84:3F:65
Authority key identifier: 49:F9:94:83:4C:75:CE:03:A5:45:CE:D4:88:9A:D6:6B:26:C1:12:CB
Certificate issuer:       /CN=49F994834C75CE03A545CED4889AD66B26C112CB
Certificate serial:       4174CD8F818A97D8C53F225A7A07B9B128CA6810
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49F994834C75CE03A545CED4889AD66B26C112CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/49F994834C75CE03A545CED4889AD66B26C112CB.mft
Manifest number:          0105
Signing time:             Mon 15 Apr 2024 00:02:32 +0000
Manifest this update:     Sun 14 Apr 2024 23:57:32 +0000
Manifest next update:     Tue 16 Apr 2024 00:31:32 +0000
Files and hashes:         1: 49F994834C75CE03A545CED4889AD66B26C112CB.crl (hash: StIJXrFBsLvOTLjA3hF1empZRKi01hUP01raz1DS9r4=)
                          2: 34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa (hash: rz8ynRMRQNjWIywn241yenslRzjhFWEpBzbu2uaz+Wk=)
                          3: 323830343a356537343a3a2f33322d3438203d3e20323639303334.roa (hash: Sdgb4FK+KMnMJGSYGRBfOUkyvx5n+/nfZtnaeS0Pcig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:cd:8f:81:8a:97:d8:c5:3f:22:5a:7a:07:b9:b1:28:ca:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F994834C75CE03A545CED4889AD66B26C112CB
        Validity
            Not Before: Apr 14 23:57:32 2024 GMT
            Not After : Apr 16 00:31:32 2024 GMT
        Subject: CN=4D99834C04B999610B1E5B9DC082857594843F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:a1:2d:9f:c9:ca:ad:9d:11:09:b6:d0:7f:
                    62:31:2d:9e:1d:5a:b6:c1:98:d3:bb:96:9c:f8:58:
                    29:60:b6:cc:ef:83:16:42:e6:41:23:7b:eb:96:63:
                    17:1a:fd:65:c3:f6:0e:4c:ff:30:5c:1e:e2:6d:c1:
                    e5:c6:0f:5c:af:fb:be:0c:03:05:68:f7:3b:a9:a8:
                    47:cd:5a:be:15:d4:ed:91:03:65:b3:09:6a:d9:c0:
                    98:50:2f:e4:7d:35:3f:79:f3:79:e6:79:50:e7:22:
                    9d:e3:5b:bf:01:58:88:d1:56:88:00:8d:f4:f3:2e:
                    c7:92:10:08:58:57:c5:88:33:d0:1b:83:08:18:86:
                    72:18:e3:33:b4:c9:95:b2:14:e5:fb:de:e9:44:3c:
                    af:1d:1e:ae:3a:c2:83:c2:8a:65:44:62:b7:79:aa:
                    ce:c8:98:d5:fb:18:db:01:ac:2e:f6:a5:56:8f:67:
                    c5:5f:15:34:b6:3e:f3:aa:09:ea:13:47:75:a3:d4:
                    a4:6b:0c:0d:a4:d8:9e:0d:5f:bd:b0:a9:1f:f9:b4:
                    8f:a3:b0:95:c2:f2:cf:ad:81:28:85:69:15:6b:d2:
                    fe:56:f9:84:d5:78:7f:50:0a:cc:10:e1:2d:e0:5e:
                    ce:2c:e2:06:be:40:9b:9b:3d:dc:45:cc:af:f2:18:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:99:83:4C:04:B9:99:61:0B:1E:5B:9D:C0:82:85:75:94:84:3F:65
            X509v3 Authority Key Identifier:
                keyid:49:F9:94:83:4C:75:CE:03:A5:45:CE:D4:88:9A:D6:6B:26:C1:12:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/49F994834C75CE03A545CED4889AD66B26C112CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49F994834C75CE03A545CED4889AD66B26C112CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/49F994834C75CE03A545CED4889AD66B26C112CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:f4:d1:0b:f7:dd:a3:f2:bc:9a:43:1a:b3:c2:0f:66:30:
         02:9d:6c:37:33:1b:3f:78:b5:5d:8a:fb:4f:64:6d:dd:b0:ca:
         fd:b9:0f:fd:c8:a8:0d:fd:dc:f4:27:39:3e:16:a4:b2:42:44:
         2c:83:03:25:2d:c4:e9:b2:33:12:47:c1:ed:ad:a8:68:ab:c7:
         79:5c:84:70:8f:ae:c6:7f:80:0e:88:c0:18:49:c9:c6:af:36:
         be:cb:90:2a:6f:e9:8f:a2:a9:d8:89:b8:3e:57:1b:a4:1e:01:
         49:b7:0c:a9:58:c5:c1:61:f8:33:9e:9d:02:a1:13:b9:10:08:
         45:f4:90:35:b7:91:c1:2a:fe:47:a9:31:0c:86:d8:f8:eb:88:
         f3:2a:31:36:fe:93:c8:de:0f:51:50:3a:9c:f0:ab:59:8c:4c:
         f9:ab:74:72:e9:2e:95:67:5c:9d:96:ca:57:af:52:62:38:a5:
         75:0b:0b:44:b1:0a:09:c3:fb:96:2a:11:7a:0f:70:dc:3b:6b:
         e2:8c:90:1a:76:5f:a3:34:e0:31:66:51:5a:ef:46:8e:00:c2:
         b8:72:a1:99:9b:46:9c:27:62:f6:e3:66:62:ef:e6:42:f9:b4:
         94:44:ea:bf:ed:48:fe:c2:ca:84:c5:6a:ef:bf:bf:43:1b:1e:
         bb:ec:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----