Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/E8F604C1235EEB68AB470B1DE625543638D88002.mft
File:                     E8F604C1235EEB68AB470B1DE625543638D88002.mft (raw, json)
Hash identifier:          D7WBetgt322E40KVplJEF7ZIF3FAeoseuz45GO/PRDs=
Subject key identifier:   1B:00:01:31:2F:5E:10:8B:71:A3:86:9C:A4:F3:A4:28:1B:3B:B2:C2
Authority key identifier: E8:F6:04:C1:23:5E:EB:68:AB:47:0B:1D:E6:25:54:36:38:D8:80:02
Certificate issuer:       /CN=E8F604C1235EEB68AB470B1DE625543638D88002
Certificate serial:       35ED35D1559AE9C761C4A65FD697113203C9F7E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8F604C1235EEB68AB470B1DE625543638D88002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/E8F604C1235EEB68AB470B1DE625543638D88002.mft
Manifest number:          62
Signing time:             Mon 17 Jun 2024 10:33:48 +0000
Manifest this update:     Mon 17 Jun 2024 10:28:47 +0000
Manifest next update:     Tue 18 Jun 2024 13:03:47 +0000
Files and hashes:         1: 323830343a346261343a3a2f33322d3336203d3e20323637333230.roa (hash: 9uzGFJgUqQoIFSE0YYj8zH/f/mR9K2QbkGOFtvFBmys=)
                          2: E8F604C1235EEB68AB470B1DE625543638D88002.crl (hash: 11c2VQBrLavxm1BmSidmYEOsj2BdEvbhTfAcVaJtOnY=)
                          3: 34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa (hash: pr3LFMeigDMgKUggamB1fXR0U4F/PG3SkVDZAZ09TRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ed:35:d1:55:9a:e9:c7:61:c4:a6:5f:d6:97:11:32:03:c9:f7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8F604C1235EEB68AB470B1DE625543638D88002
        Validity
            Not Before: Jun 17 10:28:47 2024 GMT
            Not After : Jun 18 13:03:47 2024 GMT
        Subject: CN=1B0001312F5E108B71A3869CA4F3A4281B3BB2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:8e:85:cb:a1:73:ab:82:0e:1d:70:84:ab:
                    8b:64:c8:3e:5c:64:0a:0d:69:32:07:14:d8:20:36:
                    1f:2e:9e:ac:1b:c7:34:f5:3b:df:fd:1f:ac:9c:86:
                    1f:1c:75:e5:ff:b5:ef:a2:12:ae:9b:4c:5f:3d:0a:
                    d7:15:bc:b8:ff:ae:35:9c:88:db:62:ec:73:a5:a4:
                    6a:5a:77:b0:37:e1:fa:20:44:69:97:6d:32:39:54:
                    22:43:9e:7a:a2:2b:ea:c2:9a:88:af:55:92:c9:42:
                    74:7d:bc:e7:43:fd:01:0f:99:01:85:63:c9:55:fe:
                    43:b0:4c:d6:a3:00:81:3b:a2:32:76:e7:0e:c2:11:
                    fa:27:97:ac:72:ae:60:7a:78:42:47:42:42:f9:d5:
                    7c:b0:3f:8e:80:2f:82:13:7d:9f:39:23:e4:73:b6:
                    da:23:98:46:0c:c0:63:4b:8d:5f:cc:cc:e6:bb:77:
                    7b:64:bd:34:06:45:ee:7d:13:79:1f:01:fd:77:30:
                    28:52:d7:0d:b2:e5:82:76:73:83:78:50:75:24:ae:
                    ce:2b:f8:63:bd:3b:78:2f:b4:22:6d:29:69:df:47:
                    d2:47:66:aa:5c:d0:fb:e4:11:8b:5e:22:c6:e8:cf:
                    6e:a6:ca:50:12:63:19:a8:d9:88:7d:39:1b:18:b8:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:01:31:2F:5E:10:8B:71:A3:86:9C:A4:F3:A4:28:1B:3B:B2:C2
            X509v3 Authority Key Identifier:
                keyid:E8:F6:04:C1:23:5E:EB:68:AB:47:0B:1D:E6:25:54:36:38:D8:80:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/E8F604C1235EEB68AB470B1DE625543638D88002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8F604C1235EEB68AB470B1DE625543638D88002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/E8F604C1235EEB68AB470B1DE625543638D88002.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e0:40:ae:dd:d8:2c:fc:8c:c2:1a:37:09:f1:b3:de:5f:93:
         c2:cb:ba:6a:1e:08:57:1c:ce:3b:90:51:87:54:2e:0a:e3:91:
         aa:e4:f2:5b:d7:07:4e:43:08:8b:98:af:50:25:a1:47:65:d5:
         87:bf:1a:d3:49:6a:ff:51:cd:bd:6f:cb:7f:7b:00:b7:7d:81:
         37:16:af:7e:ca:3b:5b:7f:49:40:f1:d8:b4:00:fb:8b:76:ed:
         55:41:13:96:78:f9:90:a7:77:59:aa:e8:c8:f3:c8:b5:b6:29:
         b0:85:95:2e:53:fc:1f:ad:73:c5:36:a6:c0:17:e2:d5:61:02:
         57:13:ba:a8:e6:db:79:02:35:51:e0:30:3e:92:85:62:2b:67:
         c5:d9:d2:1c:7f:30:6c:1e:2e:8a:97:2f:7e:fc:b7:cf:26:ae:
         6b:7c:6b:e5:1f:12:6b:be:b4:1a:ea:09:1e:60:fb:d9:b7:a3:
         19:c3:5f:ed:d5:1e:54:b3:b0:16:45:06:8d:81:82:b3:ea:99:
         bc:72:f0:ad:e8:9b:fa:da:f8:0e:04:2a:82:df:9b:ea:66:10:
         b7:f8:45:f6:c0:0f:9c:ad:53:15:7e:70:5b:45:85:91:8e:46:
         52:d9:96:43:b9:34:09:0f:5d:da:ff:ab:94:03:0c:39:3d:95:
         56:7b:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----