Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/318F23317C44E13FC9786607497FD114EB54C6A0.mft
File:                     318F23317C44E13FC9786607497FD114EB54C6A0.mft (raw, json)
Hash identifier:          dalm7/6u0UwEjhXjfTxWm/z7BdadSeaidt4I8HVEea0=
Subject key identifier:   23:BD:A5:46:B1:AA:DB:47:07:F6:F8:1E:67:5F:3E:8A:E4:E6:0A:F6
Authority key identifier: 31:8F:23:31:7C:44:E1:3F:C9:78:66:07:49:7F:D1:14:EB:54:C6:A0
Certificate issuer:       /CN=318F23317C44E13FC9786607497FD114EB54C6A0
Certificate serial:       17823AA61ADBC5283E3FD64D81D7C9C6A3C77234
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318F23317C44E13FC9786607497FD114EB54C6A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/318F23317C44E13FC9786607497FD114EB54C6A0.mft
Manifest number:          67
Signing time:             Mon 15 Apr 2024 09:23:25 +0000
Manifest this update:     Mon 15 Apr 2024 09:18:25 +0000
Manifest next update:     Tue 16 Apr 2024 09:23:25 +0000
Files and hashes:         1: 318F23317C44E13FC9786607497FD114EB54C6A0.crl (hash: oRVI1CneFoCGlsrzyJ5C3k+VmSpl56a9ScR0XvyIUvY=)
                          2: 323830343a343663383a3a2f33322d3334203d3e20323637303131.roa (hash: P940xMc3i/A5FKcBpkihlfJ61UM3+76K1OinNwHLdhI=)
                          3: 34352e3232372e3131362e302f32322d3234203d3e20323637303131.roa (hash: AORNVunCZlnwfnKI9g2J3ZHS5SzFExR2xs2QGOd3iFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:82:3a:a6:1a:db:c5:28:3e:3f:d6:4d:81:d7:c9:c6:a3:c7:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318F23317C44E13FC9786607497FD114EB54C6A0
        Validity
            Not Before: Apr 15 09:18:25 2024 GMT
            Not After : Apr 16 09:23:25 2024 GMT
        Subject: CN=23BDA546B1AADB4707F6F81E675F3E8AE4E60AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:6d:d1:c5:34:ea:eb:ba:ee:fd:76:c1:66:
                    22:8c:3a:a5:cd:14:97:b4:8c:9e:98:f2:34:1b:35:
                    79:aa:55:a0:14:e7:d4:db:f9:4d:4c:96:61:05:b9:
                    c9:8d:82:0f:02:b1:ee:9c:3d:84:81:c8:3f:2c:55:
                    22:df:24:44:c4:00:9a:a3:b6:30:74:26:fc:9e:7a:
                    53:26:62:49:75:c2:7c:b3:dd:21:43:ba:d5:41:a6:
                    28:c0:77:8e:63:11:5f:84:2d:b5:f5:9b:51:aa:a5:
                    1a:44:5f:c7:fe:01:d0:f9:20:73:c3:bb:ee:8a:de:
                    35:e0:60:35:0f:78:dd:1e:e4:d6:2b:13:34:87:e7:
                    04:62:dc:77:15:17:e7:90:44:73:d7:59:28:e4:5f:
                    39:52:84:4f:f6:a7:23:61:cb:54:35:98:b8:22:df:
                    0f:b6:26:aa:98:d3:ca:50:28:41:16:15:47:df:c4:
                    a9:f6:e6:04:42:f6:1a:14:5e:2e:af:b6:dc:c4:50:
                    65:c1:15:a4:2f:20:59:bd:ee:11:48:f5:a0:f7:1c:
                    2d:e8:e0:81:ed:9e:bc:a9:f1:04:d0:e3:ca:73:01:
                    22:a3:57:3b:a9:03:29:c2:cf:9d:bc:4f:ec:24:08:
                    7c:12:04:f3:5d:3d:85:9b:84:a0:29:a9:b7:b6:86:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:A5:46:B1:AA:DB:47:07:F6:F8:1E:67:5F:3E:8A:E4:E6:0A:F6
            X509v3 Authority Key Identifier:
                keyid:31:8F:23:31:7C:44:E1:3F:C9:78:66:07:49:7F:D1:14:EB:54:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/318F23317C44E13FC9786607497FD114EB54C6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/318F23317C44E13FC9786607497FD114EB54C6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73SFySv6nE3FtMK5ojVKAXH7oM88E2QcTR3Kq49EWXW8/0/318F23317C44E13FC9786607497FD114EB54C6A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:db:29:ce:47:e9:5e:ee:e7:c3:8f:60:bc:4c:8d:93:a3:92:
         10:35:1a:09:56:21:54:d6:2a:e2:dd:8a:41:20:04:a3:d0:19:
         6b:27:3b:e8:97:31:da:30:51:c5:ba:3a:7e:d2:ca:15:dc:17:
         ff:7d:b7:42:9d:fe:fc:30:63:12:89:9f:35:1c:f7:a9:22:c6:
         71:52:3f:0c:8f:96:f9:7b:af:8d:ee:82:11:f5:33:40:09:8d:
         92:e6:dc:40:0d:c9:7e:96:37:7b:0e:71:39:f2:f0:7c:21:19:
         5a:ad:a7:0f:14:9e:d4:ea:b6:9f:11:59:7a:9f:32:d3:f3:93:
         33:36:17:fc:9e:fa:13:31:bf:17:56:06:78:89:a8:cb:b1:a4:
         95:dc:6a:df:81:a3:cf:8e:e2:bd:96:1e:71:d0:3d:f8:15:f5:
         f0:87:d9:60:00:5f:9b:4f:c2:53:90:6d:15:a0:53:b1:be:d0:
         08:be:24:71:98:34:37:d9:8e:59:cd:75:29:4e:50:86:01:f2:
         76:d1:6b:d2:fe:96:48:d1:e0:28:07:16:1a:a9:ab:1b:f6:ec:
         9e:7e:ba:71:cf:59:46:bb:7e:33:19:d2:3d:32:70:8e:85:26:
         ec:ef:e1:32:28:4f:57:57:25:4e:26:0d:a0:4e:f6:7c:0c:35:
         0e:c9:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----