Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.mft
File:                     03CB08C60808A4C85337447A986A83078CD3CC42.mft (raw, json)
Hash identifier:          w6w0/pL4BqkeN2/ma5mPDuU/XcURbpuZDD+Qr1RnQFI=
Subject key identifier:   81:99:1F:4F:2F:84:35:F3:3C:D1:DE:E8:02:EE:1F:C3:4E:84:AC:B2
Authority key identifier: 03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
Certificate issuer:       /CN=03CB08C60808A4C85337447A986A83078CD3CC42
Certificate serial:       296EE0669EF6BE455B9269E9931EB468A1FFFD35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.mft
Manifest number:          49
Signing time:             Mon 15 Apr 2024 08:20:46 +0000
Manifest this update:     Mon 15 Apr 2024 08:15:46 +0000
Manifest next update:     Tue 16 Apr 2024 11:42:46 +0000
Files and hashes:         1: 3133382e39372e38382e302f32332d3234203d3e20323634313436.roa (hash: vX8UDMPs6MLD4JkWNFemvMggZu9+MQantXzVK8OsgB4=)
                          2: 03CB08C60808A4C85337447A986A83078CD3CC42.crl (hash: nqcizuFKaMATd1zfb+I9kqvIjuYToKcKqPvGTRUNWkQ=)
                          3: 323830343a323332633a3a2f33322d3438203d3e20323634313436.roa (hash: GiK3Dt3pjnusVD2Q4jOLcQ3XHxsUjRbNa5qt5fk7p7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6e:e0:66:9e:f6:be:45:5b:92:69:e9:93:1e:b4:68:a1:ff:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CB08C60808A4C85337447A986A83078CD3CC42
        Validity
            Not Before: Apr 15 08:15:46 2024 GMT
            Not After : Apr 16 11:42:46 2024 GMT
        Subject: CN=81991F4F2F8435F33CD1DEE802EE1FC34E84ACB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:43:8b:90:90:a1:82:48:03:be:8a:82:bd:58:
                    30:78:73:3f:fa:45:99:0c:de:d4:bc:4f:fc:d3:27:
                    48:70:18:d5:5b:2c:52:cc:dc:73:36:3a:8d:2d:b6:
                    2c:85:e1:27:74:97:8c:08:a1:66:13:7b:f1:17:43:
                    71:1b:8e:d6:fc:68:54:67:62:14:2b:12:a8:e7:db:
                    a3:c9:24:1e:f9:b5:73:32:7f:66:5c:c6:dc:04:e2:
                    72:9d:9f:5f:d9:ba:c1:21:cc:41:b4:ad:ba:54:30:
                    ed:36:6b:57:01:79:2a:df:16:66:da:72:5b:22:2e:
                    74:72:7f:aa:fe:0f:1a:dd:f7:52:64:1e:cc:44:64:
                    50:74:23:09:b8:c1:a6:95:7f:a6:c9:ab:ce:c1:32:
                    2a:f6:76:7c:dd:7d:e1:ab:7f:39:f8:57:5e:52:42:
                    18:54:96:63:0f:ed:6a:1e:cf:68:60:01:7d:56:0a:
                    e0:17:4d:68:f3:60:75:61:36:73:69:6e:ab:49:ed:
                    ef:93:ca:3e:63:a0:84:7c:5d:a4:7c:b1:24:54:c9:
                    a4:7a:0d:24:78:22:15:f1:20:40:d2:85:6b:e6:a5:
                    14:30:79:c4:0f:f9:13:31:11:21:77:16:34:01:6c:
                    4a:5c:3d:12:ee:a2:db:0c:4d:e0:d5:90:f6:aa:61:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:99:1F:4F:2F:84:35:F3:3C:D1:DE:E8:02:EE:1F:C3:4E:84:AC:B2
            X509v3 Authority Key Identifier:
                keyid:03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:e8:bc:bd:8d:58:b9:87:7a:b6:be:92:b7:1a:08:1d:78:
         95:47:b7:69:f4:3c:05:78:63:7d:4a:0a:7e:49:9b:d4:b9:37:
         e3:be:24:b1:47:cf:2d:99:37:62:d5:a8:35:32:b5:3c:f1:d7:
         72:4c:51:86:bf:a8:19:d0:02:8b:f0:5f:c9:79:c7:92:3d:bc:
         0a:75:3d:d2:d8:33:79:56:77:86:2c:eb:4e:c7:17:e8:18:25:
         6b:bb:92:df:c4:1c:02:d7:e7:8a:c4:f5:3f:1f:db:d6:70:43:
         8e:25:db:8f:21:9c:2c:3e:8a:13:6a:0a:f1:4d:3f:f3:da:c3:
         31:7e:d2:6c:06:1c:0d:53:e6:2a:c2:b3:5d:76:6f:64:12:11:
         0a:b3:13:f2:3d:f6:4a:99:34:d0:ec:16:ff:df:1e:c6:52:2a:
         c6:6d:23:09:3a:a0:cb:d0:4c:5f:89:9e:f0:b0:2f:ad:89:8e:
         79:9f:0c:7d:a7:c2:47:ec:31:ab:e2:29:1b:2a:67:85:83:23:
         8c:0b:81:9e:5a:70:c8:86:1a:a2:47:00:34:6d:a3:81:2a:a0:
         09:9d:1c:f4:22:d1:6c:c0:c5:8a:e4:eb:fc:a5:a8:39:d8:73:
         29:f8:67:56:9b:f0:2d:8b:10:d4:e8:d6:ae:38:59:d3:d7:77:
         11:09:23:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----