Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.mft
File:                     D8F49F3218C4D5667C4F19919B730D15A529FFDA.mft (raw, json)
Hash identifier:          EETxybzZC5XdmMcpLWjrhLrhGQIdwoAf01pdptPOr1o=
Subject key identifier:   C2:4F:77:A3:87:B1:97:AE:6C:4C:13:CF:40:22:5D:F9:36:28:BC:D1
Authority key identifier: D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA
Certificate issuer:       /CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
Certificate serial:       5042A7C8880A4C95B21C9DFCC06CB8A0084D2F24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.mft
Manifest number:          0130
Signing time:             Sun 18 Feb 2024 09:35:13 +0000
Manifest this update:     Sun 18 Feb 2024 09:30:13 +0000
Manifest next update:     Mon 19 Feb 2024 11:31:13 +0000
Files and hashes:         1: 323830343a373233633a3a2f33322d313238203d3e20323730383431.roa (hash: QPg2MQIz6qMClCBUVKhgJOL8OTRxUIdf/TWu+IaZL00=)
                          2: D8F49F3218C4D5667C4F19919B730D15A529FFDA.crl (hash: hE3Jo801oAM8tEoavg8q+lNjSNShbta2rasDgOAUAP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:42:a7:c8:88:0a:4c:95:b2:1c:9d:fc:c0:6c:b8:a0:08:4d:2f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
        Validity
            Not Before: Feb 18 09:30:13 2024 GMT
            Not After : Feb 19 11:31:13 2024 GMT
        Subject: CN=C24F77A387B197AE6C4C13CF40225DF93628BCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:6f:cb:9c:29:0f:da:0d:41:a3:28:0b:7b:
                    15:80:b3:e5:0a:4f:f8:c9:33:2c:22:a3:ce:86:2d:
                    31:b2:fe:c1:a8:e7:e3:1d:91:10:69:67:d5:ca:dd:
                    f9:ef:1b:af:69:ad:e7:61:5f:03:0e:b9:aa:6e:ce:
                    de:18:20:fc:bf:e4:07:ec:a5:94:4e:98:3d:f2:b9:
                    d1:76:05:3e:45:ea:20:ab:0a:fd:cc:1b:94:d8:a2:
                    37:40:6d:ff:54:0b:17:17:80:9f:58:e1:d8:09:b0:
                    9a:3d:c6:35:7f:7c:b9:00:de:d0:62:e7:76:46:f8:
                    46:79:2f:11:7c:fd:87:05:bf:40:6d:4a:7e:a2:0a:
                    93:18:6b:85:7b:dc:37:c2:00:4e:c0:f4:c1:36:27:
                    ca:fa:97:18:b6:06:32:32:eb:45:bb:7f:e9:1b:52:
                    6b:b2:ac:f9:eb:c1:21:21:b8:27:5b:fe:26:e1:92:
                    18:4c:ec:1f:81:2b:2a:ef:56:39:2b:53:f5:0f:3a:
                    bf:51:7f:25:7a:5a:3e:77:73:6f:d5:b3:24:cd:c6:
                    a1:49:4d:63:33:06:de:eb:02:3e:1e:35:87:cf:0d:
                    83:3d:b3:9a:34:01:2d:d4:c7:27:9e:88:bb:53:28:
                    2e:99:6f:13:44:8b:4c:4e:87:52:18:45:26:eb:b2:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:77:A3:87:B1:97:AE:6C:4C:13:CF:40:22:5D:F9:36:28:BC:D1
            X509v3 Authority Key Identifier:
                keyid:D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:fa:b2:cc:ce:74:23:ae:c5:d3:51:8b:e6:9a:82:4c:c0:
         08:e0:6c:21:4b:5b:8f:7c:dd:b1:a5:a1:b0:61:df:65:d1:81:
         4a:7f:cc:c9:ec:e9:ec:47:93:57:c1:3b:8f:ce:c3:f0:35:a0:
         70:85:f8:92:f5:15:50:76:a1:46:95:91:67:18:29:3e:77:80:
         11:94:cd:cb:4c:df:d4:aa:3b:64:75:0f:20:25:31:53:55:44:
         09:9b:34:1e:7b:5e:82:2e:8e:72:8d:42:0b:4b:c9:c3:8c:84:
         1b:93:24:d8:6a:eb:8a:2c:74:94:c7:ef:10:a7:cd:94:97:27:
         08:eb:5f:e0:bf:c5:52:eb:1a:0d:a0:77:72:ab:a5:a1:25:07:
         c6:19:a5:3a:46:b9:df:d1:05:fc:4b:b9:4e:74:6e:18:26:f4:
         91:9a:71:a1:dc:85:60:73:b0:97:78:cf:df:de:72:a7:b1:0b:
         d0:9a:8e:97:e8:d9:b4:77:51:b5:dd:a6:33:fc:d9:6e:f0:fb:
         62:77:a0:28:8e:12:7f:ac:8f:ba:2f:18:ba:a5:5f:2b:d8:05:
         64:af:7a:8a:e1:d7:f6:4a:f8:32:dd:d6:f3:52:9c:da:76:ed:
         9c:08:71:33:58:a9:15:91:bc:09:43:75:48:c9:1a:96:3e:0e:
         a5:2e:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----