Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.mft
File:                     47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.mft (raw, json)
Hash identifier:          ZIN+kTBI+EcyuzgxJitA5GRrCHuAkhhR9iAmpvbhcmw=
Subject key identifier:   83:87:00:81:D9:0A:20:AE:EC:F9:30:BB:F0:0A:07:85:4A:A1:4A:89
Authority key identifier: 47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2
Certificate issuer:       /CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
Certificate serial:       5995D626A150735F498E68C820DFE65C6E3508F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.mft
Manifest number:          0272
Signing time:             Mon 15 Apr 2024 11:08:09 +0000
Manifest this update:     Mon 15 Apr 2024 11:03:09 +0000
Manifest next update:     Tue 16 Apr 2024 11:15:09 +0000
Files and hashes:         1: 34352e3137342e3233362e302f32322d3234203d3e20323638383733.roa (hash: /ASAtrK/DzBz25bFqpYBgWi3R95e6yFHdXcRpkIRX78=)
                          2: 323830343a356264633a3a2f33322d3438203d3e20323638383733.roa (hash: mDRpNqCZpR/f9SJRKG1bD5MGwcnHIthLvffXOiAMenQ=)
                          3: 47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl (hash: n4VYF8bqmezzsy9T/sPhXObCi9ykDMyqA+4hRTFUINs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:95:d6:26:a1:50:73:5f:49:8e:68:c8:20:df:e6:5c:6e:35:08:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
        Validity
            Not Before: Apr 15 11:03:09 2024 GMT
            Not After : Apr 16 11:15:09 2024 GMT
        Subject: CN=83870081D90A20AEECF930BBF00A07854AA14A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:77:f3:b0:d4:2e:70:87:a2:96:61:8e:ca:
                    fa:d9:98:61:dd:03:36:00:b0:e1:83:c0:d1:ad:4f:
                    29:ee:4f:7e:a1:e5:7b:7d:f2:3e:86:28:4b:b8:8f:
                    4b:44:c1:45:5f:1b:aa:f1:4c:9a:11:04:b9:95:a0:
                    02:0e:da:e7:d3:80:65:a7:6a:f1:34:d3:18:60:a6:
                    56:92:d6:aa:c4:8d:7a:97:17:5c:73:8c:7a:df:a4:
                    56:6e:ae:ba:d8:34:41:6f:af:f3:34:10:41:16:e5:
                    f5:a0:c4:0e:dc:75:68:c5:20:61:40:75:64:a8:ab:
                    15:8f:74:d5:19:78:c1:bf:4b:ea:39:be:fd:95:8f:
                    23:3c:14:95:9d:d0:99:d0:dd:68:61:37:f0:60:9e:
                    6b:66:51:d2:0e:7c:34:2b:0a:29:12:1e:bf:36:73:
                    dd:71:53:2d:e5:14:fe:74:b3:69:ad:22:4f:2a:df:
                    e1:42:0b:eb:03:21:4d:4b:f5:bd:00:ad:9a:73:65:
                    e9:35:80:cc:30:cd:b6:3b:af:7d:33:a9:c2:d2:2f:
                    c9:9e:fa:0c:3e:34:ce:cd:1b:19:02:aa:83:5d:ea:
                    a2:61:7a:82:04:c6:36:e1:2d:2f:f3:69:7b:fa:95:
                    12:93:be:a0:d2:9c:f1:71:8e:dd:be:53:f4:bf:26:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:00:81:D9:0A:20:AE:EC:F9:30:BB:F0:0A:07:85:4A:A1:4A:89
            X509v3 Authority Key Identifier:
                keyid:47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:17:c4:11:ba:3d:d9:d8:62:4e:3b:95:fd:20:43:66:b3:f4:
         08:1f:51:ea:7d:99:fa:da:49:7b:de:d7:60:86:03:c3:a2:8e:
         d6:58:68:d6:18:07:85:c9:1e:8d:2f:d6:59:f7:1b:3e:ad:44:
         0a:87:84:62:44:7e:28:db:e1:cc:3f:76:92:11:10:2a:b6:04:
         4a:f8:f0:65:b9:93:93:d9:95:7c:b8:7f:95:57:94:06:8c:77:
         34:62:e3:99:c7:52:1f:c1:78:b7:6d:0f:d9:3c:eb:3f:9d:46:
         72:46:4b:6b:f7:a8:1f:a4:c4:02:b6:31:6f:27:83:55:7e:96:
         09:6c:ca:b1:47:25:ae:ea:2a:64:a4:30:c6:f2:31:71:b6:70:
         36:48:a0:a9:9e:5a:cf:c2:ce:4a:e4:dc:d9:81:e4:96:e7:27:
         f7:8b:1d:fc:86:92:37:a2:32:66:77:37:a4:e9:f5:63:f4:aa:
         8d:25:47:e6:08:b9:54:04:63:e7:2f:46:bf:e3:2f:88:5f:e4:
         bf:d0:66:d5:3e:65:41:28:21:1b:0e:d9:7d:61:ec:30:95:3d:
         70:e3:23:60:7d:37:7c:15:4c:8a:31:7a:40:8b:cf:c6:16:20:
         5c:b2:06:b0:b2:a5:9a:74:0f:4e:2d:6c:a3:24:f8:65:ab:88:
         0f:8b:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----