Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.mft
File:                     C1B003996E3E8D38EAE8A4E943863B4777429D8C.mft (raw, json)
Hash identifier:          Um/XgM3ZlMcZLWOIEPBcoTvMHb9vDKUO3b2SJwExdPM=
Subject key identifier:   60:B0:36:80:CE:BB:1E:75:D2:C1:F4:2E:AB:FE:E1:45:82:ED:34:FB
Authority key identifier: C1:B0:03:99:6E:3E:8D:38:EA:E8:A4:E9:43:86:3B:47:77:42:9D:8C
Certificate issuer:       /CN=C1B003996E3E8D38EAE8A4E943863B4777429D8C
Certificate serial:       74A229E5BFA42B5F4141D53CC3FF2695D7F4F3E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.mft
Manifest number:          028B
Signing time:             Sun 14 Apr 2024 18:32:42 +0000
Manifest this update:     Sun 14 Apr 2024 18:27:42 +0000
Manifest next update:     Mon 15 Apr 2024 20:10:42 +0000
Files and hashes:         1: C1B003996E3E8D38EAE8A4E943863B4777429D8C.crl (hash: Wot9CFUEaKlqrhB0iMGJr9KX/kB3L/7MjqRhkVr8Cf4=)
                          2: 3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (hash: iU3mo1KtCizfWagk6Z50Tkt0RMsNSbNwgpmep1nlFX0=)
                          3: 323830343a373463343a3a2f33322d3334203d3e20323731303032.roa (hash: ygmIuuMt9RTaZv3pjamwu9OreUDu6iAXXX5lpCFrrto=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:29:e5:bf:a4:2b:5f:41:41:d5:3c:c3:ff:26:95:d7:f4:f3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B003996E3E8D38EAE8A4E943863B4777429D8C
        Validity
            Not Before: Apr 14 18:27:42 2024 GMT
            Not After : Apr 15 20:10:42 2024 GMT
        Subject: CN=60B03680CEBB1E75D2C1F42EABFEE14582ED34FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:1c:f1:67:b9:c8:a2:bc:c1:61:61:ce:39:
                    f0:ab:2f:1e:c2:c7:2b:61:3c:a5:43:95:9f:be:65:
                    f6:71:62:2f:15:0f:ec:7e:19:45:61:1c:57:74:b8:
                    82:ab:3e:a6:09:37:e5:b8:36:a9:1f:de:99:9f:ec:
                    42:68:cd:2d:12:ed:38:7c:67:bc:d4:95:9c:89:7c:
                    33:48:ca:16:ac:f9:a2:e1:39:3c:52:38:3f:f5:e3:
                    fa:1b:2f:d3:f2:22:92:d1:44:b7:7d:10:ab:0b:6b:
                    aa:f9:1c:a1:e7:7c:93:dd:74:3a:73:eb:f9:d6:53:
                    6e:f4:72:2a:a1:d8:66:90:ce:1e:9a:ed:00:51:d2:
                    3b:41:03:5b:86:55:ae:da:3d:45:ef:a3:1f:ca:38:
                    73:37:b4:c5:6c:c9:3f:5d:26:de:96:58:b6:a0:90:
                    4c:0b:31:c1:4d:55:cd:1c:2d:18:68:46:5d:fa:5b:
                    3f:68:71:19:f9:6f:7e:d4:20:a2:51:c7:97:ff:97:
                    80:c5:14:55:1c:44:81:fa:65:94:d5:12:84:07:86:
                    b2:60:ab:29:c1:96:73:60:89:7a:5b:8e:27:c3:5e:
                    bd:93:19:eb:8f:48:cd:53:22:33:3c:a1:c0:a6:fe:
                    b2:55:4f:be:3c:a1:4a:61:e4:9e:6c:f1:66:00:cf:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B0:36:80:CE:BB:1E:75:D2:C1:F4:2E:AB:FE:E1:45:82:ED:34:FB
            X509v3 Authority Key Identifier:
                keyid:C1:B0:03:99:6E:3E:8D:38:EA:E8:A4:E9:43:86:3B:47:77:42:9D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:87:15:26:ca:15:83:12:b0:be:8b:c9:42:3f:15:af:1e:20:
         80:95:ef:6d:76:03:fb:c0:b4:12:03:61:42:ce:b2:36:38:6e:
         7c:d7:a0:13:b1:4b:96:fa:4b:0e:45:b9:a7:c6:83:9c:a9:80:
         c0:54:69:72:52:fb:04:86:4d:9a:8a:4a:23:fb:fc:39:ed:b9:
         37:99:a8:41:18:ed:b4:92:dd:43:c1:44:76:84:dc:5c:34:cf:
         49:d8:c9:ac:16:62:1f:29:f5:55:b7:dd:87:8b:6e:99:b0:e9:
         22:39:be:d3:ac:cb:f7:df:e8:83:02:30:6e:a7:37:4a:5c:13:
         c5:f4:4c:b4:16:7e:e6:4f:8b:cb:d0:96:f8:20:91:d3:76:65:
         7b:8f:da:87:e7:9c:d6:34:c2:01:58:87:1b:e2:9b:89:e5:b9:
         96:17:ea:91:0f:3e:31:bf:9c:0f:59:f2:e5:fb:17:dd:c5:a9:
         4b:3d:27:c3:9a:1b:8d:fd:cf:d5:6e:da:8c:80:7e:f2:99:9a:
         02:50:ee:9e:d2:bf:bd:16:12:e9:67:84:00:a6:84:d4:00:55:
         d3:ea:d3:7b:88:ed:51:c1:04:8b:0f:a1:1d:ef:ce:6a:8c:80:
         fd:5d:df:9c:20:65:6d:88:fb:97:cf:15:c2:b6:e1:7e:23:d6:
         a0:5e:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----