Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.mft
File:                     D8309A5B887DBFE90303B22DAF909AD5866706D8.mft (raw, json)
Hash identifier:          knn29B5rHIK4s/lvhm35qaeK91YzWanxtNJdEVc9F3A=
Subject key identifier:   76:A3:8C:45:08:0E:56:77:82:63:E7:39:6B:78:B9:1A:B7:9B:E7:B9
Authority key identifier: D8:30:9A:5B:88:7D:BF:E9:03:03:B2:2D:AF:90:9A:D5:86:67:06:D8
Certificate issuer:       /CN=D8309A5B887DBFE90303B22DAF909AD5866706D8
Certificate serial:       2BCD6F8FFA55063894684B46344142FFA35F4865
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.mft
Manifest number:          40
Signing time:             Tue 21 May 2024 19:13:50 +0000
Manifest this update:     Tue 21 May 2024 19:08:50 +0000
Manifest next update:     Wed 22 May 2024 21:04:50 +0000
Files and hashes:         1: 323830343a333062633a3a2f33322d3438203d3e203532363039.roa (hash: 7NDwSEZi8OUnZ/KjvshgI8x4bk0F0wAZwzsH2an5xhY=)
                          2: 3137392e3138392e34382e302f32302d3234203d3e203532363039.roa (hash: Py8yTYBEgdU38xq8SLwKsb0UQM9VxCHQ40uV0svJTw0=)
                          3: D8309A5B887DBFE90303B22DAF909AD5866706D8.crl (hash: FiDkJRFPfD+prumzQSiTMOo1HmdntuEQItkJorfzlGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cd:6f:8f:fa:55:06:38:94:68:4b:46:34:41:42:ff:a3:5f:48:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8309A5B887DBFE90303B22DAF909AD5866706D8
        Validity
            Not Before: May 21 19:08:50 2024 GMT
            Not After : May 22 21:04:50 2024 GMT
        Subject: CN=76A38C45080E56778263E7396B78B91AB79BE7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:21:b5:54:e7:dd:c1:e0:68:97:12:42:17:
                    ba:a8:f9:c3:22:5a:8e:c8:e5:68:fe:7a:40:7b:85:
                    a0:f0:61:1b:63:93:4d:fe:ac:a0:22:1d:c7:9b:cb:
                    29:b8:6b:04:e9:0a:ec:77:d9:3d:f2:30:62:01:93:
                    5c:ed:b7:ab:52:7c:d0:2c:30:c8:64:6e:2a:4d:0a:
                    da:b2:e6:7f:56:cc:79:71:87:a9:c3:fd:87:f3:e4:
                    37:61:f8:f3:25:e7:eb:45:24:c8:9c:74:8d:d5:9d:
                    e7:fb:08:7a:80:77:88:30:20:81:44:74:6a:a9:02:
                    08:aa:0d:bb:58:06:b0:5d:00:85:b4:51:0f:8d:23:
                    54:ec:94:8f:71:7d:ff:98:bb:d9:4a:b8:11:4b:2e:
                    25:7a:c9:54:e5:70:31:f1:7a:82:60:41:b8:fc:43:
                    fc:a2:21:af:df:b5:05:20:78:68:63:65:55:b5:98:
                    2a:30:91:ff:0e:85:ff:dd:e5:cb:2c:41:b2:8e:82:
                    08:4d:86:3a:7a:0a:16:af:f2:35:7a:7e:8c:03:2c:
                    5b:08:6b:2d:1e:0d:54:00:21:58:dd:56:c6:a5:1d:
                    e1:b7:2e:3c:f3:ba:cb:9a:b5:ae:87:40:73:0b:7d:
                    0d:f6:1e:c7:81:ec:d2:b1:42:9c:a7:80:6c:9e:44:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:8C:45:08:0E:56:77:82:63:E7:39:6B:78:B9:1A:B7:9B:E7:B9
            X509v3 Authority Key Identifier:
                keyid:D8:30:9A:5B:88:7D:BF:E9:03:03:B2:2D:AF:90:9A:D5:86:67:06:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:56:a7:bb:82:13:ab:ad:a3:dd:ad:64:c3:ef:98:68:c6:cd:
         6c:1b:9e:4d:da:dd:18:a5:19:6e:d4:34:5a:eb:b0:5b:ac:31:
         0e:9e:58:ed:b3:c9:fb:5b:66:80:ff:4e:c5:69:22:12:d8:a0:
         ba:ba:21:88:19:67:6a:e6:6e:20:ef:91:76:33:bc:ac:19:d2:
         33:c4:d5:9a:f8:67:98:fb:bd:92:e1:45:0b:1d:f0:bd:cb:df:
         e2:4b:a4:63:74:8f:50:40:2a:f9:3d:ec:d0:a3:41:93:08:95:
         35:8a:fb:e4:52:96:c2:14:69:bc:f0:ad:35:6c:7d:01:9b:2f:
         7e:83:56:73:29:19:65:86:e8:0e:93:e6:8c:36:9d:5c:a3:0e:
         87:aa:2b:f2:7f:75:5d:5e:6a:cb:d5:1d:bc:31:d2:10:ea:09:
         b2:9e:9c:b4:a8:e1:95:e6:04:cf:8b:30:4e:6e:bc:fd:94:60:
         75:d4:67:2f:4d:d6:fd:76:7e:b6:5a:7a:97:a1:ef:44:9d:a9:
         2e:79:51:8d:04:8c:31:ff:d0:fc:c3:44:96:19:b9:45:dc:2b:
         cd:f0:a5:7f:ba:74:ea:c1:1e:a3:b7:16:35:38:27:4b:c5:a3:
         12:6e:1a:3d:e8:30:5d:f2:98:d4:43:7e:8c:dc:a6:0a:5b:10:
         78:c9:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----