Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.mft
File:                     C48605CA0055701EE4F243531AAD2AC6C3350B55.mft (raw, json)
Hash identifier:          xa4AGaLrTTOs1ZdNBXON38UnV5y1XJUKVuNRpBVtn4c=
Subject key identifier:   FB:EA:84:74:59:8D:32:71:8B:E4:DE:93:CA:03:56:A8:51:77:F0:0F
Authority key identifier: C4:86:05:CA:00:55:70:1E:E4:F2:43:53:1A:AD:2A:C6:C3:35:0B:55
Certificate issuer:       /CN=C48605CA0055701EE4F243531AAD2AC6C3350B55
Certificate serial:       25B8FE91415BEBAA9FAB5A67E9709B9778306A2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.mft
Manifest number:          D5
Signing time:             Mon 18 Mar 2024 02:44:54 +0000
Manifest this update:     Mon 18 Mar 2024 02:39:54 +0000
Manifest next update:     Tue 19 Mar 2024 04:50:54 +0000
Files and hashes:         1: 323830343a313430383a3a2f33322d3438203d3e203238363335.roa (hash: SdzMkMcBufIYmx3DlIF+9iXMHew0YK/KVxd+4jx4iqo=)
                          2: C48605CA0055701EE4F243531AAD2AC6C3350B55.crl (hash: ImfSgedaSt+rnNBt4+Va4u/x/sJw5nNkCLBQ37EPV6Q=)
                          3: 3230312e37312e3132382e302f31382d3234203d3e203238363335.roa (hash: p2lpjNqbVoAkysHUcxVkHdNmT4T6fK7bL20+qXLd/OI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:fe:91:41:5b:eb:aa:9f:ab:5a:67:e9:70:9b:97:78:30:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48605CA0055701EE4F243531AAD2AC6C3350B55
        Validity
            Not Before: Mar 18 02:39:54 2024 GMT
            Not After : Mar 19 04:50:54 2024 GMT
        Subject: CN=FBEA8474598D32718BE4DE93CA0356A85177F00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:3f:ac:bc:99:50:5a:8e:ff:9e:e6:ba:47:
                    2b:27:9e:5e:7c:81:6a:3b:63:fb:53:1f:17:1c:c4:
                    0d:dd:6b:82:07:60:ea:4f:82:cb:eb:97:61:07:e9:
                    4b:7e:2c:42:7d:4a:5f:bf:45:c5:30:65:c8:3c:04:
                    49:30:a4:21:16:bb:ee:e1:41:53:cd:22:b4:2c:7b:
                    09:9a:d3:d5:a5:1d:b7:3e:d9:84:51:74:cd:e2:96:
                    2b:fc:c0:7b:66:81:e0:27:ff:c6:77:35:1a:e0:36:
                    28:06:49:d7:96:2d:92:b0:c9:1c:4d:a6:8c:8d:fc:
                    d3:ff:7f:c5:b4:0e:d8:8c:23:a9:3c:27:da:10:28:
                    e9:27:c0:e6:c7:10:af:20:f3:1f:97:fa:86:f4:a6:
                    bf:67:f1:5c:6e:5e:45:6a:fb:f2:b8:bf:94:d7:db:
                    aa:c5:de:03:82:2d:f6:d6:35:4b:7d:c7:db:7c:30:
                    e6:9d:5f:77:27:0f:82:dd:be:05:26:97:25:40:31:
                    05:06:2f:57:c7:d9:89:30:bd:97:18:25:57:99:9f:
                    7c:65:cd:19:a6:15:b6:f5:65:36:9c:76:76:d6:d9:
                    a8:a6:4e:d4:82:bc:19:38:3a:ce:88:a8:f5:0d:09:
                    d8:3c:19:2b:23:58:d5:aa:c3:72:85:20:34:7e:4a:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EA:84:74:59:8D:32:71:8B:E4:DE:93:CA:03:56:A8:51:77:F0:0F
            X509v3 Authority Key Identifier:
                keyid:C4:86:05:CA:00:55:70:1E:E4:F2:43:53:1A:AD:2A:C6:C3:35:0B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:55:e2:4d:05:ba:75:e8:12:56:45:39:61:6d:ec:1f:d8:
         01:3d:37:83:db:16:0b:a8:e6:e5:69:58:80:1e:4e:57:82:8f:
         e6:30:b4:76:d2:dc:c0:4b:3f:ee:05:d0:18:09:4b:30:e6:23:
         bd:c7:4f:46:04:be:53:9a:3e:b1:0b:13:3e:35:42:da:86:16:
         ea:a6:b3:28:6e:7f:0d:cb:dd:a0:55:e1:a8:f2:e9:58:1e:4c:
         17:d7:e3:fe:21:e1:5b:14:b7:ed:07:16:b7:17:fa:3a:ef:48:
         18:50:e0:70:a5:79:71:02:33:ae:51:52:e5:42:b9:85:6f:2c:
         2e:67:8f:eb:6c:fc:fd:4e:04:21:9c:45:d1:c3:12:03:18:d3:
         22:7d:44:e5:fe:b7:40:bd:2b:ee:5d:ea:f3:36:78:6f:5b:c9:
         f4:b5:12:11:2c:da:7c:ae:e3:e5:b3:46:6b:4b:d9:cb:32:f4:
         a8:9c:c0:a8:a5:27:6e:74:06:b7:d5:e9:55:80:93:07:ad:64:
         0a:dd:8a:cd:51:69:03:38:45:27:5b:53:9d:68:34:8e:13:bf:
         8e:01:32:88:ec:0b:40:d9:34:f7:13:09:26:7c:bb:28:67:65:
         a1:3a:74:3a:d6:c3:6c:cf:14:87:6a:f4:d9:8d:8c:6c:7d:cb:
         1b:2f:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----