Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.mft
File:                     D251493312F283AB5462B511E5D7075BFB1B2317.mft (raw, json)
Hash identifier:          QOEgDI51nHRqv8Y8R0SX6jaA8dLmrhnew9RWKxXTaJE=
Subject key identifier:   37:C9:C6:29:72:AE:CC:FD:7C:7F:B6:BC:9D:F1:B6:7C:10:78:35:B5
Authority key identifier: D2:51:49:33:12:F2:83:AB:54:62:B5:11:E5:D7:07:5B:FB:1B:23:17
Certificate issuer:       /CN=D251493312F283AB5462B511E5D7075BFB1B2317
Certificate serial:       0812F7EF2233C5FF57134DCF385B0D91998A4636
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D251493312F283AB5462B511E5D7075BFB1B2317.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.mft
Manifest number:          14
Signing time:             Thu 14 Dec 2023 19:33:36 +0000
Manifest this update:     Thu 14 Dec 2023 19:28:36 +0000
Manifest next update:     Fri 15 Dec 2023 22:13:36 +0000
Files and hashes:         1: 34352e3232352e3235302e302f32332d3332203d3e20323731363738.roa (hash: 40EazGvQt3ulXZWC9T7QRKrspf5hs+LdADbBGZfneZ4=)
                          2: 34352e3232352e3135322e302f32332d3332203d3e20323731363738.roa (hash: znFGZBdnIZJMU/iSWgqnQLmDEx4lc8y4EYgfaIyBoKI=)
                          3: D251493312F283AB5462B511E5D7075BFB1B2317.crl (hash: nGPiM1exY1KTRmLRbwSzcJfomgigSBAHi7QRNcf60HU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:12:f7:ef:22:33:c5:ff:57:13:4d:cf:38:5b:0d:91:99:8a:46:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D251493312F283AB5462B511E5D7075BFB1B2317
        Validity
            Not Before: Dec 14 19:28:36 2023 GMT
            Not After : Dec 15 22:13:36 2023 GMT
        Subject: CN=37C9C62972AECCFD7C7FB6BC9DF1B67C107835B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:7a:a9:f7:f6:d9:eb:40:9d:c7:92:5e:b5:
                    aa:08:80:d7:d4:2b:3b:3c:b3:d8:d8:6b:e9:e6:65:
                    a4:e3:62:ba:08:4e:d9:5f:e2:2e:31:fa:d1:42:02:
                    b5:3f:46:f7:0e:ec:33:d4:b0:0a:76:05:7f:06:1f:
                    35:fe:4f:0b:0b:25:3d:fd:b1:29:bb:08:d7:5b:a6:
                    2d:7c:8e:45:56:e3:5e:9b:a5:2e:b8:1a:11:b0:46:
                    b9:ce:4b:9e:20:9b:ad:17:2e:96:0f:d7:46:6f:f9:
                    7a:ac:6a:7e:a9:0e:af:67:b2:f3:1e:6a:f2:48:3f:
                    19:23:cb:2e:c7:24:be:9d:5a:d6:ce:90:2b:e8:0e:
                    ee:44:86:60:db:82:12:58:36:e1:e0:e3:39:39:0b:
                    e8:b5:e0:26:ef:4b:f6:6b:0a:c2:6f:c8:1b:91:53:
                    e1:da:d1:b6:be:82:96:0b:6e:a7:e0:2e:d6:b6:2c:
                    3a:bb:1d:53:1a:b6:53:eb:63:56:99:02:86:55:8d:
                    bc:ac:0f:07:9b:f2:2e:1f:38:70:6a:f3:98:1c:26:
                    e6:35:68:20:9e:d5:d4:95:d8:f2:53:18:df:95:3d:
                    35:35:c5:d9:ef:c1:54:34:d9:72:69:0d:0d:ec:78:
                    38:3c:60:38:66:27:e2:bf:19:83:cb:c1:ca:8b:0d:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:C6:29:72:AE:CC:FD:7C:7F:B6:BC:9D:F1:B6:7C:10:78:35:B5
            X509v3 Authority Key Identifier:
                keyid:D2:51:49:33:12:F2:83:AB:54:62:B5:11:E5:D7:07:5B:FB:1B:23:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D251493312F283AB5462B511E5D7075BFB1B2317.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:83:2b:57:94:4d:88:6d:4b:f0:4b:de:c2:70:08:96:95:
         46:b4:c7:1c:ae:e3:bf:4a:b2:69:b8:3e:8a:16:8e:6f:36:12:
         4c:cb:e2:21:dc:d8:7d:11:ad:f9:d0:d6:4b:66:bf:b6:31:d7:
         90:7a:d4:4c:1c:2f:a8:aa:63:d1:cc:99:d1:06:1b:fd:d5:ba:
         44:ed:45:9a:63:9b:81:2a:46:c2:20:60:18:21:fb:43:c2:c2:
         39:71:09:47:40:ec:00:98:4b:c7:68:15:56:a1:05:16:69:54:
         59:6e:96:d1:aa:c4:cf:53:7d:41:3c:35:c0:0c:b6:97:4e:68:
         f0:b3:4f:2c:7b:9c:ed:62:3f:6d:c8:00:d6:a5:dd:d1:6a:a3:
         dd:9e:a0:09:f6:56:1c:08:fa:9c:6f:f3:ce:e7:80:c2:c6:e6:
         69:8d:3c:4e:7a:83:44:71:ca:1e:8a:d0:33:0c:67:14:5a:8f:
         3e:1e:ca:0e:fd:30:7a:18:35:f0:ce:d7:e1:25:c2:64:7b:5a:
         65:61:0a:2e:12:27:e3:42:59:c1:80:d6:d6:81:71:38:89:f3:
         17:e6:28:20:5b:ed:2c:ff:57:ea:9b:4a:e9:2a:50:ea:2e:37:
         ee:6d:50:cd:85:12:ce:2b:3e:5a:d7:c8:90:ec:92:6c:e9:2d:
         10:fb:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----