Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.mft
File:                     E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.mft (raw, json)
Hash identifier:          16tfThqib8Gp9SJWrQS+VYige/2N6JBqxTczKYpDmm4=
Subject key identifier:   FC:81:92:2D:BA:6D:37:99:61:85:EC:8F:7D:89:BC:91:6C:EF:8E:53
Authority key identifier: E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31
Certificate issuer:       /CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
Certificate serial:       0C5D7BF6F1A17865BC3F4AE8C051E4C63FE8F8FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.mft
Manifest number:          0308
Signing time:             Sun 14 Apr 2024 23:05:35 +0000
Manifest this update:     Sun 14 Apr 2024 23:00:35 +0000
Manifest next update:     Tue 16 Apr 2024 00:28:35 +0000
Files and hashes:         1: 323830343a383833633a313430303a3a2f34302d3430203d3e20323732373538.roa (hash: 4CV2/n7LpVN1s3n5hjS2lmo59JgjvVQXmLl85xZxpqI=)
                          2: 323830343a383833633a6130303a3a2f34302d3430203d3e20323732373538.roa (hash: NoL/lVT5q4bXSsMTmq2GoHYxbihO6KOjI+Rl4R3az1k=)
                          3: E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.crl (hash: ZP9sAimrTvJRK18qlKClAga8E3CCfqW9GyJldwaV1hs=)
                          4: 323830343a383833633a3a2f34302d3430203d3e20323732373538.roa (hash: zYnzUyv0P4RZW7RgmwobVJuNDNUBqPwAdQSwuyR3Ixo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5d:7b:f6:f1:a1:78:65:bc:3f:4a:e8:c0:51:e4:c6:3f:e8:f8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631
        Validity
            Not Before: Apr 14 23:00:35 2024 GMT
            Not After : Apr 16 00:28:35 2024 GMT
        Subject: CN=FC81922DBA6D37996185EC8F7D89BC916CEF8E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:2b:c4:27:be:39:f2:13:54:22:92:e5:8a:
                    c1:1f:de:c2:43:e2:79:d8:b1:24:72:58:60:3d:b9:
                    9b:0f:bc:0e:14:af:27:51:69:21:15:a5:53:62:c6:
                    8b:ba:0c:a6:5d:82:93:c4:e3:ab:e5:7b:77:e7:2a:
                    87:56:cf:cc:7e:21:0b:b6:28:32:31:24:4c:cb:13:
                    f1:2f:65:7b:70:8c:9c:84:09:bb:b8:a8:96:cf:27:
                    2c:7f:b8:19:d5:27:68:7e:1d:42:ad:1e:73:d9:f3:
                    ef:80:d9:d2:ed:de:18:95:d5:9c:86:4d:6c:75:ed:
                    6a:a3:83:df:5e:78:4f:d7:0b:67:80:57:02:de:fa:
                    92:95:5c:9e:fc:94:da:02:18:4e:20:2f:5f:f4:04:
                    cc:e8:a2:b7:3d:d0:f4:3c:19:54:a0:d8:29:1f:08:
                    b0:2f:be:08:88:5b:93:81:73:40:93:36:55:dd:f0:
                    d5:83:83:92:a2:34:a5:33:ea:d0:2f:52:8c:a0:29:
                    ee:db:90:de:90:3a:34:54:29:7e:6b:e4:0f:6e:3a:
                    9d:9c:84:d6:bd:0a:8b:dd:9d:4f:ac:58:fc:39:d2:
                    71:a3:eb:a2:51:9b:2b:23:23:f8:36:14:be:01:03:
                    8f:0f:8c:63:65:e7:7f:3e:ae:3c:a0:3f:02:25:bf:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:81:92:2D:BA:6D:37:99:61:85:EC:8F:7D:89:BC:91:6C:EF:8E:53
            X509v3 Authority Key Identifier:
                keyid:E9:CF:EC:E0:D0:D2:F4:78:E7:4F:51:A1:BA:EA:88:E2:F2:4B:36:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tz3XhhUaYpPgVHWeJwq1kYqXLj1SQFRFbesNH5DHmPU/0/E9CFECE0D0D2F478E74F51A1BAEA88E2F24B3631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:04:06:1b:eb:24:32:45:91:18:eb:0e:0c:65:7b:8d:f6:
         a6:21:ff:30:f6:99:b4:73:14:af:d5:d3:6f:fb:61:76:53:be:
         17:34:df:b2:6f:74:e1:3a:24:31:cb:c0:bc:a9:d8:0e:6a:57:
         79:e0:ea:bb:bb:78:14:81:5e:2d:77:25:1e:a0:53:e2:2e:0f:
         61:e4:c6:61:86:87:15:af:8b:1b:34:00:24:95:e4:67:d0:c4:
         44:69:c1:f4:da:88:5a:9c:19:9d:02:d8:00:87:27:d3:f5:44:
         f4:59:64:8f:eb:32:07:8f:5b:75:34:35:07:fe:e0:90:d4:8b:
         dc:9f:7c:c8:93:03:8d:19:c0:db:e1:81:f9:82:37:88:aa:11:
         3a:db:e4:72:ff:5d:e4:c1:44:ed:2e:45:e0:cb:9d:f1:2d:8f:
         89:8e:ac:1b:9f:44:b3:72:c0:a8:14:99:e1:f7:1a:20:b9:1e:
         35:3d:d8:23:97:83:5e:22:3c:24:ca:99:f2:07:57:53:78:7e:
         28:5d:34:73:ee:2e:6a:d2:8b:46:78:e3:e6:96:f5:c7:6f:80:
         7e:b8:f3:1f:3c:d7:1e:8d:47:0c:4b:04:be:a8:3d:c6:f2:b8:
         4d:71:e2:e1:a5:b8:c9:ea:d0:9c:3c:f4:cf:1f:2c:61:d9:eb:
         77:ae:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----