Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.mft
File:                     2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.mft (raw, json)
Hash identifier:          XOU8oEG78dHTZOQHBnwG8tGJNV6pBc1y/cE3RrJGdF8=
Subject key identifier:   5B:04:BD:29:1D:24:E7:45:76:C8:0D:EB:1E:9E:F7:32:0A:E7:1B:0E
Authority key identifier: 2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Certificate issuer:       /CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
Certificate serial:       46509FA4AB82AC12E5A0F5274403D23F903E973B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.mft
Manifest number:          3D
Signing time:             Mon 15 Apr 2024 01:09:26 +0000
Manifest this update:     Mon 15 Apr 2024 01:04:26 +0000
Manifest next update:     Tue 16 Apr 2024 05:02:26 +0000
Files and hashes:         1: 3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa (hash: XQLiqe6ykMn3Er+tyYfc+XI1n0izbZMW28dqd91/m3k=)
                          2: 3137392e3130382e36342e302f32312d3234203d3e203532393638.roa (hash: HEKPbzuZoJHWvm8SaY6snAV4i0oq+Ms/yAsJgCw0eSM=)
                          3: 3137372e33382e3132302e302f32312d3234203d3e203532393638.roa (hash: KDuVluNRb0RD1G/sYD3nTbC4ICaPeEAIpHkHqV38+xo=)
                          4: 323830343a6561303a3a2f33322d3438203d3e203532393638.roa (hash: a18sc6NPblCXZgFcsGrZuo2dxGu9RUzBeuFsjAQ/vys=)
                          5: 2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl (hash: LZckBJ503ZwrjJhItRkrx4FDSBJ4HGO6bnZ4y+I1urQ=)
                          6: 3137372e33382e3131322e302f32312d3234203d3e203532393638.roa (hash: moW3Uj29T6pxLuFPaMp11YN761uS0lXUiYMG/KME3ak=)
                          7: 3133382e33362e3138342e302f32322d3234203d3e203532393638.roa (hash: V7H1o9NSb2J+6Glr4Aqgbza/4n1rOzkEqA405PrESDY=)
                          8: 3136382e3139342e3131362e302f32322d3234203d3e203532393638.roa (hash: ObOfenY7PuecIj9VVjA0wihZEqQeiXY9HluDyKkBjlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:50:9f:a4:ab:82:ac:12:e5:a0:f5:27:44:03:d2:3f:90:3e:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Validity
            Not Before: Apr 15 01:04:26 2024 GMT
            Not After : Apr 16 05:02:26 2024 GMT
        Subject: CN=5B04BD291D24E74576C80DEB1E9EF7320AE71B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:cf:26:da:b1:67:10:69:9a:cc:c2:d4:d6:
                    53:c4:9d:73:45:e2:f7:f2:f9:7c:45:8e:62:e1:ea:
                    ff:db:f8:3c:65:44:b9:50:7f:4d:32:67:c8:06:82:
                    35:a9:45:94:3d:02:71:e5:4d:da:76:cc:da:02:fb:
                    eb:20:28:7d:ed:29:db:a6:c8:3b:fd:dd:59:6a:d1:
                    d8:14:d3:dd:17:b0:4e:da:e9:00:17:25:11:1f:60:
                    fe:f2:32:f1:23:2c:ee:df:f3:da:69:3a:c0:bb:61:
                    05:54:0b:f5:ec:73:74:b9:44:61:b6:cd:51:fa:21:
                    8f:17:06:19:0e:16:35:81:ee:4c:77:1c:f6:35:23:
                    4a:7f:65:59:f6:c1:bc:ae:34:a2:d4:f9:e3:73:7b:
                    d1:e6:17:9f:d3:4b:ec:50:e4:46:5c:18:c0:92:d2:
                    70:69:5c:5f:81:42:e3:44:3f:95:11:22:1e:4f:08:
                    33:b1:7b:e6:cd:ee:2a:e9:24:63:88:8c:cf:b8:94:
                    80:27:11:1e:fc:47:6e:c3:40:5e:e2:26:d7:21:e5:
                    d8:80:df:0d:cb:76:20:10:30:bf:d9:52:d5:32:ff:
                    5f:de:7e:c5:8a:5d:e5:a7:ae:a0:10:08:08:51:2c:
                    d6:7f:d1:47:96:d0:30:f6:82:fe:f1:07:7c:cb:f9:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:04:BD:29:1D:24:E7:45:76:C8:0D:EB:1E:9E:F7:32:0A:E7:1B:0E
            X509v3 Authority Key Identifier:
                keyid:2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:34:c6:d1:56:58:71:06:4a:5b:0e:43:55:fa:06:cb:f4:51:
         89:66:1f:81:95:8e:70:53:35:c6:fc:cc:4d:f1:c9:05:fe:39:
         97:76:48:65:e1:c8:7c:b2:4e:3a:42:0b:b7:42:ec:a9:2f:cb:
         7f:01:9b:b8:54:f1:2f:07:d8:2f:50:98:87:01:c1:89:67:ab:
         cc:3e:ad:ad:ff:d9:a1:0b:6d:d8:7f:8d:c1:da:3f:65:26:23:
         83:9f:56:1f:88:0c:4f:01:4c:15:e2:51:d8:db:18:32:f2:6c:
         7e:d8:7c:51:3c:4c:5d:7c:39:80:3b:80:97:e2:02:6a:35:70:
         ea:2c:fa:70:e5:5d:3b:8f:dc:0d:12:bf:56:99:7e:69:79:d9:
         45:35:ff:63:8f:97:d3:34:b1:fc:77:0f:e5:79:99:c5:37:e4:
         e7:94:46:7a:48:81:cf:d9:58:1d:47:8e:eb:74:ae:77:58:48:
         d4:28:09:34:f5:95:63:75:29:21:36:50:95:c8:83:1f:c6:64:
         bd:50:be:44:22:1c:16:d1:d9:46:83:93:fc:93:93:76:bd:d6:
         32:c5:3d:7d:40:f9:fb:d1:f0:ef:04:df:4f:15:aa:0c:4e:5b:
         6e:31:63:3a:3e:f6:51:6e:1c:f0:a6:34:ee:13:ab:aa:ea:d3:
         76:eb:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----