Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.mft
File:                     A56E8A92F7DB96FA288D623B1F7EDE10694759CE.mft (raw, json)
Hash identifier:          Q7js7l28QicBudBAyCz2me0cDY9balq5BTo2sB+jPig=
Subject key identifier:   9D:30:18:DB:E2:44:13:B3:F2:7D:E3:4C:AE:48:10:44:29:9D:02:DB
Authority key identifier: A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE
Certificate issuer:       /CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
Certificate serial:       2D6F4E745D90287EBB46777CEE610E7D7E783B53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.mft
Manifest number:          01F2
Signing time:             Mon 15 Apr 2024 01:58:49 +0000
Manifest this update:     Mon 15 Apr 2024 01:53:49 +0000
Manifest next update:     Tue 16 Apr 2024 05:20:49 +0000
Files and hashes:         1: 323830343a346130383a3a2f33322d3334203d3e20323637323134.roa (hash: RdZElfuqDKRnLbtJHjwspHraSkEyYZEbAmsdUtgN9bY=)
                          2: A56E8A92F7DB96FA288D623B1F7EDE10694759CE.crl (hash: WC5OR3f3Uefaz5dN8cXN4GEXd0MVpPfhU6bO6ytCtm4=)
                          3: 34352e3233302e3136302e302f32322d3234203d3e20323637323134.roa (hash: ptoPANsTx8owl0W433ZvfiGRVP2uuzQ2DLMAuBWfBgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6f:4e:74:5d:90:28:7e:bb:46:77:7c:ee:61:0e:7d:7e:78:3b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
        Validity
            Not Before: Apr 15 01:53:49 2024 GMT
            Not After : Apr 16 05:20:49 2024 GMT
        Subject: CN=9D3018DBE24413B3F27DE34CAE481044299D02DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:b5:3d:4c:1f:44:84:81:1a:2d:00:3d:52:
                    e6:29:9c:14:fb:17:fa:c4:92:3c:5f:65:2f:b1:05:
                    3a:a7:c6:f2:0a:cf:49:a5:8e:f1:d0:11:7a:74:ff:
                    77:96:71:e3:e9:2f:ea:a8:96:41:46:a6:ec:5e:03:
                    f8:92:3c:0d:b5:6f:92:68:d9:f4:ba:92:6c:c8:91:
                    96:d1:5f:6a:59:b4:ee:a2:d7:1e:04:31:f7:38:8c:
                    f4:6b:db:14:c1:56:fd:5b:3a:1d:06:c7:ee:b6:2a:
                    88:cb:74:d0:34:95:21:cd:c2:ed:4f:55:3a:e6:b9:
                    f5:07:27:0a:6f:3e:ca:8e:4d:c3:2d:72:49:de:9d:
                    1f:76:94:20:ad:cc:b9:f8:dd:cf:f4:5d:6f:6c:b3:
                    65:51:66:b4:a8:cc:5f:64:c4:b2:5f:9f:b6:54:01:
                    e3:74:e2:9a:f5:d7:9d:80:bb:60:5f:70:7e:07:4f:
                    ad:84:c5:7e:11:51:ff:b5:83:0a:80:2a:88:44:93:
                    9a:d3:95:4e:05:e6:14:1f:7e:67:aa:fb:c0:dd:bf:
                    ba:1b:5a:89:5c:e2:74:c6:b7:d1:44:89:4a:e7:cf:
                    d2:fb:06:8e:36:00:87:06:83:36:8d:63:3f:ab:5c:
                    86:1b:0c:00:16:03:eb:92:7a:19:a1:c7:36:9c:fa:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:18:DB:E2:44:13:B3:F2:7D:E3:4C:AE:48:10:44:29:9D:02:DB
            X509v3 Authority Key Identifier:
                keyid:A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:e9:93:9f:41:75:84:ac:94:73:76:88:70:12:d2:5b:4e:
         19:e4:35:9e:d3:d9:a9:c8:d8:19:f5:09:43:72:fa:7b:c2:46:
         29:58:4c:17:ff:bc:9c:8a:0c:35:23:82:60:9a:de:35:90:1f:
         73:91:6a:09:fa:5e:cb:51:da:c6:a1:5b:31:14:f5:ea:29:05:
         e6:b9:cf:66:ae:f7:06:e2:4e:74:0b:0a:97:8c:fd:66:c1:88:
         97:7a:60:3b:da:70:93:d3:b4:e6:9e:98:64:6d:67:9f:12:d8:
         90:8c:b3:8f:e4:d5:8c:f3:b5:19:60:22:c2:f8:35:c5:d2:7a:
         02:69:de:14:49:a0:fd:f9:7d:af:3d:15:6f:12:58:2f:5e:82:
         9f:e9:80:9b:ab:b0:a4:22:10:da:f3:d6:bd:3d:5b:7c:73:49:
         64:16:90:d8:9b:ec:ac:02:7a:cb:0b:20:06:9d:8a:0a:7b:ec:
         84:7d:aa:84:b3:33:a8:89:96:68:b2:63:2e:28:d9:29:63:20:
         92:b8:0e:5b:f0:94:0d:06:d3:2b:60:b1:17:61:9a:66:12:07:
         48:09:48:2b:aa:d4:94:db:e1:b0:46:2c:19:24:1a:2a:12:f6:
         f9:30:50:72:69:26:5c:f0:3e:64:0c:40:58:5f:a4:a3:2f:2c:
         42:33:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----