Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.mft
File:                     3DDCE25111940B746EFDCBF0F3DC3E23EF917239.mft (raw, json)
Hash identifier:          /Huy64cQYBxBHSGBUGRYCA1B2W3SJ0wQGfNh3UzrfK4=
Subject key identifier:   53:8A:83:83:5F:C2:B8:4A:94:C8:8A:6B:C8:1A:A0:23:6F:B4:00:60
Authority key identifier: 3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39
Certificate issuer:       /CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
Certificate serial:       1BAEF124C784F36906A391084208AAB270BA0041
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.mft
Manifest number:          13
Signing time:             Sun 14 Apr 2024 18:32:12 +0000
Manifest this update:     Sun 14 Apr 2024 18:27:12 +0000
Manifest next update:     Mon 15 Apr 2024 20:47:12 +0000
Files and hashes:         1: 34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (hash: gqPlmwgVE9Azpn724W5X72lqGpUP3CvsXY3Yep1fz4E=)
                          2: 3DDCE25111940B746EFDCBF0F3DC3E23EF917239.crl (hash: HfIcxam7wcZWVWArsSmfNV/p2739kmATXbMYJBMqLRo=)
                          3: 323830343a363131633a3a2f33322d313238203d3e20323639323133.roa (hash: 9PA5ZrqbglyXlmTNi34532Y0uK0CUopDeUAsokplhn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ae:f1:24:c7:84:f3:69:06:a3:91:08:42:08:aa:b2:70:ba:00:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
        Validity
            Not Before: Apr 14 18:27:12 2024 GMT
            Not After : Apr 15 20:47:12 2024 GMT
        Subject: CN=538A83835FC2B84A94C88A6BC81AA0236FB40060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:22:d1:f7:ab:d9:ee:ac:57:c5:b1:b2:0b:
                    00:2a:23:56:64:9c:9f:02:09:e2:0c:65:2c:23:42:
                    b6:d4:fa:54:af:aa:4d:ed:69:88:d9:67:b4:ca:ef:
                    8b:8f:3d:d4:06:ca:35:e2:84:92:6c:05:32:a6:78:
                    fc:dc:88:98:4d:28:a4:cf:a7:73:5e:96:08:5c:30:
                    2a:b8:70:0c:6a:9c:ec:aa:b5:6d:59:a5:2f:a6:68:
                    50:6a:19:b9:87:cb:27:79:11:30:4f:7f:06:65:a3:
                    6b:65:5e:88:06:51:39:dd:f5:d1:81:ac:b3:64:36:
                    35:6a:69:43:f3:dc:7d:29:91:37:ce:7d:c3:b7:1b:
                    d2:b2:06:b3:26:fe:2a:28:aa:42:a8:db:84:9d:73:
                    43:03:62:78:a0:0b:41:50:88:2f:df:c3:d5:d7:dc:
                    c5:69:db:73:d2:e5:65:68:01:d9:3c:de:ee:7e:24:
                    f1:5d:3d:8f:d2:80:b1:ac:b5:7f:08:b6:72:d9:9e:
                    45:cc:6d:f3:3f:a1:b6:65:0a:f6:b8:63:10:b1:aa:
                    aa:92:9f:6d:18:32:6d:b2:19:b7:5c:0e:ef:f9:18:
                    0c:dc:54:04:ac:d7:2d:5d:7c:e4:fb:2e:a5:99:f9:
                    d7:76:e1:9f:3e:13:8e:27:d8:12:5b:a2:27:0f:0c:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:83:83:5F:C2:B8:4A:94:C8:8A:6B:C8:1A:A0:23:6F:B4:00:60
            X509v3 Authority Key Identifier:
                keyid:3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:ae:63:b3:dc:c0:04:7e:b3:e0:6e:3b:08:95:61:9d:6a:
         54:79:93:e2:8e:e6:38:e8:13:f4:56:a2:9e:e8:d8:47:d0:2c:
         c8:12:bf:55:e7:e0:b8:ff:aa:d0:58:e1:35:45:47:0b:18:1d:
         59:09:64:b9:6a:c2:37:61:5f:0d:a9:94:f0:f3:29:f5:3b:cc:
         8e:90:4a:6d:f1:31:c9:95:fb:27:4e:c3:6a:f0:10:0f:44:53:
         b7:28:b4:c0:d9:ac:6c:7c:02:9c:7c:38:eb:c2:b2:36:93:23:
         df:c0:c3:1b:1c:da:59:9a:03:24:80:95:ad:47:50:8b:85:59:
         e3:9c:d1:3a:f5:bc:e4:4e:bd:3b:bf:05:c4:1e:1e:ac:2e:05:
         6c:d1:66:37:b0:f8:16:4a:4e:68:27:f4:24:9d:c3:34:a0:fc:
         d5:fa:30:1b:b2:7c:00:43:2a:2e:e7:1c:07:d2:7e:44:e5:3b:
         f7:99:49:b5:11:95:1d:86:0f:c1:f1:34:e6:37:27:d1:da:00:
         d0:7b:b1:9d:c4:89:61:76:89:93:80:36:ac:2f:5a:3d:09:d2:
         7c:45:32:0f:5e:7b:46:3a:8b:79:ab:13:f0:40:dc:83:d4:25:
         88:a8:63:29:df:a2:e6:c3:3f:2f:fe:89:d7:4b:1b:73:16:46:
         60:71:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----