Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.mft
File:                     41708E304CF7ABF013B9D61D9AC203815B961D44.mft (raw, json)
Hash identifier:          VxUlwFjX2rMURmWOSXBM1mdw+i3f3o+042I/YD3LBjo=
Subject key identifier:   F0:18:21:A5:8A:54:F1:B1:AB:1C:E5:94:04:CB:DB:18:79:91:29:D7
Authority key identifier: 41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44
Certificate issuer:       /CN=41708E304CF7ABF013B9D61D9AC203815B961D44
Certificate serial:       6197510D163650649E2C811D199F1706A2386C61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.mft
Manifest number:          0337
Signing time:             Mon 15 Apr 2024 10:51:20 +0000
Manifest this update:     Mon 15 Apr 2024 10:46:20 +0000
Manifest next update:     Tue 16 Apr 2024 12:49:20 +0000
Files and hashes:         1: 3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa (hash: 2CTguE5jmThuefO0FboXcdJwcn/fAPnt0sN1hMakGvg=)
                          2: 41708E304CF7ABF013B9D61D9AC203815B961D44.crl (hash: 5toaIpSgvoYEb0F5PrRYqZR2sS8XQRZJbzPyU+6emW8=)
                          3: 323830343a366461633a3a2f33322d3438203d3e20323730353438.roa (hash: McYNPfm/WYU0jEG/6ZmtReVxSqgqo2eIUOvYax/gvv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:97:51:0d:16:36:50:64:9e:2c:81:1d:19:9f:17:06:a2:38:6c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41708E304CF7ABF013B9D61D9AC203815B961D44
        Validity
            Not Before: Apr 15 10:46:20 2024 GMT
            Not After : Apr 16 12:49:20 2024 GMT
        Subject: CN=F01821A58A54F1B1AB1CE59404CBDB18799129D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:92:df:26:8b:c5:c8:d3:50:ac:61:4f:ef:
                    df:ec:4b:6f:98:6c:fa:fb:da:f0:bb:f9:dd:a7:4e:
                    04:e4:c5:ba:de:94:71:c3:40:b6:2c:e8:2c:b7:0b:
                    f4:6d:3b:ec:80:71:76:30:79:64:70:2e:4f:43:e7:
                    30:02:d6:35:1f:00:39:93:03:51:bc:56:6d:12:1d:
                    4b:93:51:0b:31:ce:c5:b6:2e:6a:44:9d:11:cf:26:
                    0a:e9:81:5e:ee:3a:18:ec:3d:9a:01:be:35:d6:32:
                    1c:13:96:37:fb:fb:50:27:c4:c2:b5:2d:9d:a9:62:
                    6d:a0:aa:ae:ed:3a:04:91:a4:08:02:42:0b:06:50:
                    40:42:cb:4d:5b:b1:52:1d:2e:1d:11:d5:36:3f:ed:
                    56:47:ee:49:81:f6:da:6b:d9:39:64:2a:d2:e6:f8:
                    4d:8d:af:7b:7e:f7:24:4d:ac:a3:83:d0:5c:84:38:
                    74:90:82:e6:7a:e6:ab:0d:90:e5:d0:5c:ed:88:6e:
                    1b:57:92:48:ad:0e:a4:3e:0c:df:c8:c5:1a:56:e8:
                    32:f1:db:29:e5:4a:10:8c:41:60:0f:d3:45:e8:0f:
                    8c:e1:a3:d9:31:8c:f8:78:e6:46:57:14:a0:21:89:
                    1e:46:8a:b7:73:53:e4:7a:a7:38:f1:2b:a3:e3:79:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:18:21:A5:8A:54:F1:B1:AB:1C:E5:94:04:CB:DB:18:79:91:29:D7
            X509v3 Authority Key Identifier:
                keyid:41:70:8E:30:4C:F7:AB:F0:13:B9:D6:1D:9A:C2:03:81:5B:96:1D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41708E304CF7ABF013B9D61D9AC203815B961D44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/0/41708E304CF7ABF013B9D61D9AC203815B961D44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d2:8a:a0:63:5d:86:06:be:3d:50:67:0b:4e:66:af:a6:7e:
         c2:9a:ce:50:10:13:58:63:98:ce:04:de:d5:f6:a8:36:76:bc:
         4b:9f:b6:eb:51:fe:25:3c:9e:04:25:9a:24:ec:c4:b3:f7:8c:
         12:6f:60:22:51:a5:8b:13:8b:7c:92:d0:9e:35:ea:05:bb:59:
         d1:fc:59:ef:d3:b1:d1:f6:7f:b2:36:af:1a:b5:25:68:08:d2:
         56:a8:82:53:94:82:97:9f:6a:ab:d6:ed:7c:82:18:00:23:50:
         4e:1b:74:b9:ac:e1:14:52:e6:64:09:cd:59:57:88:5d:e8:e3:
         08:7c:33:97:d7:ea:6a:a0:1d:49:23:ff:1c:9e:d6:77:a6:de:
         63:5e:ad:9f:4d:a8:85:62:fe:f6:d5:84:aa:82:63:7b:cc:5f:
         3e:13:bb:97:25:17:6b:f6:1f:09:ad:7d:5f:ea:87:63:e8:88:
         33:df:f4:b9:12:17:72:ee:ae:08:2b:05:cf:6d:0c:a7:eb:bb:
         4c:82:24:70:70:ae:e8:19:7e:fd:7f:e3:0c:c5:ff:aa:9a:a3:
         00:a3:b6:13:bd:c5:54:a9:f4:bc:75:fb:ab:38:a0:21:de:6c:
         66:a4:51:d1:69:5f:a8:64:60:66:c1:5f:dd:06:b5:db:55:e8:
         76:8a:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----