Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.mft
File:                     5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.mft (raw, json)
Hash identifier:          mmjY2Da8V9FILDqdt8iU7vx7sNrx66GSw1qu5lFBxi0=
Subject key identifier:   C6:1B:F2:3E:94:0A:39:68:49:84:B1:27:E7:40:48:7B:D7:2C:1A:3D
Authority key identifier: 5C:3C:E0:5C:8F:3B:57:14:D5:7B:95:6D:17:6C:AC:2B:DA:EA:BD:02
Certificate issuer:       /CN=5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02
Certificate serial:       1C3CFEC04053F8B1AB7F4FBE50755BC455872B40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.mft
Manifest number:          29
Signing time:             Tue 17 Sep 2024 23:47:19 +0000
Manifest this update:     Tue 17 Sep 2024 23:42:19 +0000
Manifest next update:     Thu 19 Sep 2024 00:04:19 +0000
Files and hashes:         1: 323830343a323862303a3a2f33322d3336203d3e203532393332.roa (hash: d7ob17QsUDG9c6pfh+PC2WfHjZTKtoSQzl4+xQ5JpDg=)
                          2: 3137372e3138352e3131322e302f32312d3234203d3e203532393332.roa (hash: J2rq3iD4wUQctMAI3iDXds2nXl1856vb3384ctcsjZo=)
                          3: 5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.crl (hash: 3Omqph3JAxv435eHPfahGTcHY9/n6Q14P1QmQU9QAvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3c:fe:c0:40:53:f8:b1:ab:7f:4f:be:50:75:5b:c4:55:87:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02
        Validity
            Not Before: Sep 17 23:42:19 2024 GMT
            Not After : Sep 19 00:04:19 2024 GMT
        Subject: CN=C61BF23E940A39684984B127E740487BD72C1A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:6f:ee:7c:35:21:8b:21:3d:71:fb:2d:2e:
                    8f:fb:71:10:fb:8b:7b:c8:9c:9d:e6:7c:5d:8b:de:
                    61:25:cf:34:13:e4:01:9a:51:4b:3d:7d:bb:6a:e2:
                    e0:c8:a2:a0:fc:ce:d2:17:3d:8e:43:fb:7d:c6:97:
                    97:6d:49:8a:43:37:03:bc:e4:44:24:63:fa:42:fb:
                    ab:ec:eb:c6:19:b0:9b:76:43:36:52:92:9c:fb:19:
                    1c:e8:62:30:c1:97:3a:2b:16:79:44:c7:df:6d:18:
                    87:2b:bb:70:1e:83:c1:b3:ea:9f:7c:c2:34:72:8e:
                    86:51:b9:7e:61:d6:62:14:f4:cd:f2:59:ca:d5:7e:
                    cb:5a:c4:40:77:16:5b:b6:12:01:66:66:97:14:da:
                    e4:e2:cd:f6:18:90:84:e2:c7:67:b7:7a:5c:e1:f6:
                    0e:5c:0a:f0:dd:d2:96:af:d7:d1:41:28:83:34:85:
                    5a:ad:ce:84:08:dc:1a:96:f8:5a:f7:a0:95:17:1b:
                    d3:6b:25:97:e0:9f:bc:5b:f0:0a:56:af:df:51:cf:
                    bc:55:1b:f6:fb:46:9e:1b:a3:48:e0:f2:d6:73:93:
                    14:a8:e8:5a:60:e8:da:0d:07:be:e4:6d:13:07:3c:
                    90:34:c6:7b:84:65:aa:17:47:67:35:40:85:ee:b1:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:F2:3E:94:0A:39:68:49:84:B1:27:E7:40:48:7B:D7:2C:1A:3D
            X509v3 Authority Key Identifier:
                keyid:5C:3C:E0:5C:8F:3B:57:14:D5:7B:95:6D:17:6C:AC:2B:DA:EA:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:74:46:6b:8d:3b:e6:8c:14:b5:c1:28:39:38:59:ed:12:33:
         0e:43:d7:d1:cb:28:a7:e3:6e:3d:d3:21:a7:76:bc:24:85:5d:
         50:17:24:ec:6b:8a:f0:0a:9f:3b:1b:9c:9e:98:83:e1:a6:61:
         5f:a3:66:3f:95:28:aa:e4:85:eb:62:3f:22:f8:2d:00:b1:48:
         5f:68:b4:d8:d4:8d:6b:3e:93:12:16:6b:d3:08:f9:67:8a:74:
         6d:d4:20:d6:21:cc:39:0a:d1:f2:78:8e:9a:7b:13:9c:8a:ca:
         ab:01:e1:68:25:45:27:71:be:be:29:8a:b2:49:a4:8b:52:30:
         ea:57:0f:5b:9c:da:e8:41:a4:18:6b:b2:61:58:54:1a:34:59:
         61:75:60:9b:ab:20:ea:f1:74:cc:fe:e3:0a:e8:35:cb:2a:74:
         b4:6b:23:cf:5a:d3:81:3d:ed:a1:e6:10:14:42:c3:e1:bc:d3:
         b9:ad:7e:c6:cf:c1:76:09:ba:ec:7f:d8:0c:2f:11:98:28:4e:
         c2:91:9e:7c:e0:75:e9:ff:8f:c3:66:f6:bd:73:49:c6:96:1c:
         9c:49:1a:35:49:59:fd:dc:eb:d9:cc:ca:d2:1a:1c:e4:ff:f3:
         0d:86:42:2c:00:7b:75:7f:ac:cf:b6:4d:65:a7:de:81:d3:c5:
         23:b2:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----