Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.mft
File:                     F4B92CDD483414287F7FF9F069BE4AF247E4F138.mft (raw, json)
Hash identifier:          ozfiFD/EzDsDM0Y4yPXZnWklzsA1pPnamTBUGqwVgkE=
Subject key identifier:   D6:A0:E0:46:7E:2D:84:FE:52:28:8D:7E:A9:8D:DC:E1:A1:44:06:CC
Authority key identifier: F4:B9:2C:DD:48:34:14:28:7F:7F:F9:F0:69:BE:4A:F2:47:E4:F1:38
Certificate issuer:       /CN=F4B92CDD483414287F7FF9F069BE4AF247E4F138
Certificate serial:       35DF72D3045CB556B0F9366461CB75DAD836EFD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.mft
Manifest number:          029B
Signing time:             Fri 15 Mar 2024 15:55:03 +0000
Manifest this update:     Fri 15 Mar 2024 15:50:03 +0000
Manifest next update:     Sat 16 Mar 2024 17:25:03 +0000
Files and hashes:         1: 323830343a323630383a3a2f33322d3634203d3e20323634333139.roa (hash: iVRHirtN9hQkVhRz3oHUbWV7GnYh2aY/XM8/hLPlGOY=)
                          2: 3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (hash: BdAX+GofxYTyBetRmPueQ1tGRd9a3c5EhYPGd6L+Op4=)
                          3: F4B92CDD483414287F7FF9F069BE4AF247E4F138.crl (hash: XFV7uU6voal3zLA1bfJaLieea4O92kQ7Z674DvkTmY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:72:d3:04:5c:b5:56:b0:f9:36:64:61:cb:75:da:d8:36:ef:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4B92CDD483414287F7FF9F069BE4AF247E4F138
        Validity
            Not Before: Mar 15 15:50:03 2024 GMT
            Not After : Mar 16 17:25:03 2024 GMT
        Subject: CN=D6A0E0467E2D84FE52288D7EA98DDCE1A14406CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:b5:cd:11:b3:c4:29:20:0d:49:16:5c:16:
                    cd:52:91:83:f7:4a:6d:a9:a7:9f:a6:f8:da:f7:4c:
                    f3:78:9d:ad:9b:01:ca:d4:5f:20:b0:a1:d8:b6:9e:
                    93:be:f9:4d:6c:f2:bd:41:f6:65:b9:8f:f1:93:45:
                    d9:6c:de:aa:8a:b5:8b:65:42:92:77:dd:cc:42:cd:
                    38:95:5f:56:e0:97:cf:9d:a5:54:77:ef:9f:e4:06:
                    d6:bc:f9:f7:04:f9:7b:8e:9e:13:4b:74:0a:51:cc:
                    e9:40:49:f8:ae:09:f0:af:bd:f9:98:ad:22:6b:09:
                    40:11:6f:46:3b:cf:14:90:38:35:2c:95:b4:ad:33:
                    33:a2:13:21:a2:90:52:54:29:de:b5:ce:ff:fa:cc:
                    48:54:59:19:31:82:3c:8f:17:60:b3:77:ab:9b:56:
                    8d:d9:d2:20:f9:a6:f4:e8:a9:3c:8c:82:cc:48:b6:
                    d6:b1:9d:cb:5b:04:4b:fb:0e:99:22:5c:28:66:36:
                    58:38:5a:fb:32:cf:c1:b6:cd:ec:b8:ae:4f:67:ce:
                    ac:91:19:b0:01:16:2d:46:fc:fe:c1:4f:26:62:2b:
                    cb:76:49:7e:11:b8:d4:34:35:33:3b:c7:b2:ca:20:
                    ab:7b:66:44:3f:bf:04:ae:7e:05:0a:0c:7c:27:6d:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:E0:46:7E:2D:84:FE:52:28:8D:7E:A9:8D:DC:E1:A1:44:06:CC
            X509v3 Authority Key Identifier:
                keyid:F4:B9:2C:DD:48:34:14:28:7F:7F:F9:F0:69:BE:4A:F2:47:E4:F1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/F4B92CDD483414287F7FF9F069BE4AF247E4F138.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:52:1a:2b:b1:00:c7:8f:0e:66:10:d3:11:46:b9:a2:04:
         4c:2e:3d:6a:ef:f1:0a:56:52:28:b4:cd:67:30:f9:0c:82:93:
         b8:9c:5d:16:7f:6a:0c:a0:1e:c2:31:8e:f7:83:77:a5:8c:77:
         6d:5b:ea:da:07:ca:5b:7e:07:6c:0b:1b:d5:5e:bf:30:e1:53:
         8e:4a:82:61:9b:f4:2d:e7:6d:7c:4e:27:04:83:a0:01:d7:b7:
         21:63:03:0f:1b:5d:85:cf:da:10:af:89:85:31:2e:09:0b:b0:
         c4:a1:13:f6:d0:2a:27:18:89:18:70:56:9b:54:46:51:41:b4:
         e7:ae:ac:2b:6c:25:3d:e7:f7:56:73:4f:40:15:e8:e2:cb:0d:
         d6:cd:f8:98:23:b6:fe:c9:bb:46:f3:58:fe:de:db:28:dd:21:
         5b:11:02:e0:de:6d:eb:39:20:1e:ff:24:2e:86:02:a5:18:02:
         6f:3e:c7:db:58:e3:40:73:61:fa:4e:ca:82:5a:85:c0:28:96:
         68:0e:7d:36:a3:35:2d:9c:d9:52:94:4e:4d:7b:c8:ec:de:a4:
         5e:2d:2d:a1:15:b6:2a:c0:7d:59:a7:b1:1e:fc:65:0f:a6:f8:
         65:a2:3d:1c:2a:19:db:7b:f5:46:cb:a5:75:4e:90:d0:dd:32:
         22:13:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----