Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/236553FB41CEC86D861A029FBF29B4CFD8C8C595.mft
File:                     236553FB41CEC86D861A029FBF29B4CFD8C8C595.mft (raw, json)
Hash identifier:          XITqyzRs9wMxWw9/42QPen6F3kxmz9ATjb4HAvaLAlo=
Subject key identifier:   BE:C7:37:06:06:AE:66:34:BB:A6:89:B1:A6:F3:FA:D5:54:2F:8D:06
Authority key identifier: 23:65:53:FB:41:CE:C8:6D:86:1A:02:9F:BF:29:B4:CF:D8:C8:C5:95
Certificate issuer:       /CN=236553FB41CEC86D861A029FBF29B4CFD8C8C595
Certificate serial:       503DD332D797DED635520A4A5F6B32AA22590BEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/236553FB41CEC86D861A029FBF29B4CFD8C8C595.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/236553FB41CEC86D861A029FBF29B4CFD8C8C595.mft
Manifest number:          0263
Signing time:             Tue 20 Feb 2024 09:47:53 +0000
Manifest this update:     Tue 20 Feb 2024 09:42:53 +0000
Manifest next update:     Wed 21 Feb 2024 13:02:53 +0000
Files and hashes:         1: 3134332e3235352e32302e302f32322d3234203d3e20323635313335.roa (hash: /0muP4et76+vZVtZxcckofX9kA0noFA/QaiTpxd4XmE=)
                          2: 236553FB41CEC86D861A029FBF29B4CFD8C8C595.crl (hash: ujQDAHTG0prHQLMvGsBiTD4y/ElyQBTiM4vPS+n+mFk=)
                          3: 323830343a326231633a3a2f33322d3438203d3e20323635313335.roa (hash: L7kkg7DQsp0Yi9SIfNDVB5UXQdq2HRhdwD0TZlTM0vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:d3:32:d7:97:de:d6:35:52:0a:4a:5f:6b:32:aa:22:59:0b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236553FB41CEC86D861A029FBF29B4CFD8C8C595
        Validity
            Not Before: Feb 20 09:42:53 2024 GMT
            Not After : Feb 21 13:02:53 2024 GMT
        Subject: CN=BEC7370606AE6634BBA689B1A6F3FAD5542F8D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:3e:27:d9:7e:fe:ad:0e:aa:8f:53:4e:e8:
                    c2:1d:e9:80:38:f7:f4:5f:3c:2b:9b:de:85:ed:60:
                    56:0c:0e:64:e2:67:ad:f4:cf:b7:06:eb:d7:54:61:
                    d2:94:ea:4d:66:34:73:5d:1b:bb:8c:6c:f6:30:5d:
                    bb:2e:04:05:f8:c4:92:5a:63:09:3b:d3:af:5f:c8:
                    4a:87:30:ac:e3:af:bf:79:9f:6e:20:b1:dc:9a:29:
                    f9:ca:51:cb:9c:bc:c9:fe:2c:5d:c9:2e:d9:e0:0d:
                    a4:ca:c2:4d:0b:11:69:69:78:7b:47:4a:b6:ac:ca:
                    88:3a:fe:9d:ae:3f:83:4b:bc:fc:45:00:64:b7:dd:
                    9f:bd:38:1c:85:80:9b:29:3f:57:f2:57:f6:e6:aa:
                    05:96:c1:50:c4:33:d0:69:ed:47:e7:a9:d7:bf:a8:
                    3f:89:ce:14:3c:d9:5e:16:14:8a:d9:3b:82:9e:ed:
                    f2:8e:de:f6:05:9c:e2:a1:ec:88:fd:3c:fc:ca:45:
                    2d:92:0c:c5:47:93:74:2a:e9:8b:ab:4c:1f:49:39:
                    b6:be:53:a3:86:47:ea:66:c8:d7:b1:46:b7:e9:9b:
                    c2:d9:ba:fa:03:d1:ac:6c:81:30:73:21:41:ab:92:
                    d8:f8:89:27:5a:62:4a:e4:63:2f:cd:67:ce:c7:ae:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:37:06:06:AE:66:34:BB:A6:89:B1:A6:F3:FA:D5:54:2F:8D:06
            X509v3 Authority Key Identifier:
                keyid:23:65:53:FB:41:CE:C8:6D:86:1A:02:9F:BF:29:B4:CF:D8:C8:C5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/236553FB41CEC86D861A029FBF29B4CFD8C8C595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/236553FB41CEC86D861A029FBF29B4CFD8C8C595.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/236553FB41CEC86D861A029FBF29B4CFD8C8C595.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:3b:b8:48:ef:57:e6:b3:be:42:82:cd:79:69:d3:54:1b:
         63:2a:9e:78:a9:64:5e:09:da:a9:8a:c4:5b:cb:25:7a:9a:66:
         3b:2a:19:02:c3:a1:92:6c:cb:3b:b0:93:ab:fe:91:34:4f:ec:
         fb:ec:9b:ba:86:7b:0a:1c:43:6d:32:46:3c:8c:d4:70:e7:85:
         bd:04:e5:a0:43:94:52:83:5e:8f:d6:05:73:33:1b:b3:45:e4:
         5d:dc:80:e5:7c:af:d5:c7:a6:da:1d:dc:4c:37:63:d3:0e:ac:
         73:d7:3e:0a:57:aa:e1:f7:7f:d7:50:0e:0a:b9:62:28:67:5c:
         0d:99:d9:b8:01:75:82:53:aa:ca:1e:46:7e:9e:82:da:0d:f9:
         55:2e:ca:40:94:40:7d:b0:8d:c8:71:fe:19:e9:14:11:ca:a9:
         f7:36:d7:d8:46:ed:8e:a6:3a:b3:8e:f4:e1:20:bb:17:99:79:
         1d:54:a2:b1:68:fb:1c:fc:ad:b3:8a:80:83:08:3e:d3:0b:28:
         da:09:ab:49:c1:f5:aa:b6:52:aa:94:60:41:c6:f7:13:ee:93:
         4e:b6:4e:51:12:90:a9:70:80:75:3a:92:4c:ab:59:45:c1:d6:
         d1:dd:ec:81:bc:c4:f5:32:8a:92:e2:ac:34:2c:53:a2:c9:62:
         83:d3:6c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----