Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.mft
File:                     BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.mft (raw, json)
Hash identifier:          qoCxzN7VakJIMyHDuoPdd1cBu3O2J9e0eTrRuLgApOg=
Subject key identifier:   53:7C:A2:FE:8B:CD:E2:B7:98:D3:51:DA:3C:A3:E5:FA:B3:7F:7B:BD
Authority key identifier: BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
Certificate issuer:       /CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Certificate serial:       3E88AC1ED25C4AAEC86AFE6B439753D54DAF3ACB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.mft
Manifest number:          9A
Signing time:             Mon 15 Apr 2024 08:27:19 +0000
Manifest this update:     Mon 15 Apr 2024 08:22:19 +0000
Manifest next update:     Tue 16 Apr 2024 11:16:19 +0000
Files and hashes:         1: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: Mx2VruVIAVzYZcs/ryAzscQJg3Y2GOPdjLL5qH4c0mk=)
                          2: BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl (hash: virOKnWA1DupVOMN7iGCzH+A1HG5NfSDLgtmRxNFLcU=)
                          3: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: dC1nbuN323biYJ7Z5QGPtwUUFA1MGO3cgDwKWseORgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:88:ac:1e:d2:5c:4a:ae:c8:6a:fe:6b:43:97:53:d5:4d:af:3a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
        Validity
            Not Before: Apr 15 08:22:19 2024 GMT
            Not After : Apr 16 11:16:19 2024 GMT
        Subject: CN=537CA2FE8BCDE2B798D351DA3CA3E5FAB37F7BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:ba:df:0e:82:bf:5a:91:44:d6:7a:13:51:
                    28:d1:ea:5a:35:47:f5:61:c0:ff:4a:ab:80:03:d7:
                    65:3f:eb:d3:dc:28:38:4c:c7:c4:15:30:ba:dc:e1:
                    66:16:b3:8f:e7:96:93:40:f7:29:a6:75:36:51:18:
                    48:50:75:5e:3e:a3:ed:88:76:25:cc:f1:13:ad:9d:
                    20:32:63:93:d4:59:38:02:49:37:1f:bd:60:00:e8:
                    60:50:76:38:4f:a0:05:0a:3d:4f:93:e0:98:52:46:
                    be:8e:11:76:20:61:38:4d:fe:41:65:ef:28:ad:5c:
                    f8:8e:f2:61:16:e8:e5:d9:ac:82:79:9d:93:a3:8e:
                    be:5f:25:71:35:58:fd:90:1c:7e:fd:21:db:4a:fe:
                    61:e8:c4:de:d7:62:67:81:36:55:22:cf:6b:af:39:
                    fe:4d:89:93:5b:de:02:ec:4c:46:fc:07:5d:b3:a4:
                    63:d4:b3:71:88:7f:b0:35:cf:0f:ab:0c:03:fc:97:
                    a9:c7:b1:76:56:9e:cc:41:c8:2e:13:07:15:00:5c:
                    86:15:ad:ee:af:f8:ad:04:c7:9c:1c:af:02:5f:2f:
                    1a:d0:86:56:80:8b:74:3c:8b:cd:18:76:31:95:db:
                    8a:58:da:ba:f0:cd:3d:fd:35:1a:84:b0:cd:f3:11:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:A2:FE:8B:CD:E2:B7:98:D3:51:DA:3C:A3:E5:FA:B3:7F:7B:BD
            X509v3 Authority Key Identifier:
                keyid:BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:62:46:9c:a5:9e:7b:b8:65:fc:9c:42:ea:f2:0a:7c:00:
         15:ba:40:0d:37:7d:63:10:61:e3:2e:ed:59:d9:67:7f:8b:07:
         a3:57:5a:b5:2f:56:f4:78:68:df:11:b0:d2:4b:cc:73:b3:71:
         9b:33:b3:59:0c:58:4b:1c:fd:9c:72:cd:87:7b:f4:f9:68:42:
         22:db:a3:ad:1f:22:ca:0d:30:3c:66:32:56:c7:8d:14:b5:70:
         d9:1e:6e:f9:1b:4b:99:46:0b:76:2b:8b:d6:44:25:82:95:df:
         5b:76:6f:ae:2e:eb:8a:ce:15:58:93:be:aa:40:72:f8:aa:2a:
         23:1f:57:ce:ae:0b:e6:7c:87:7c:b9:78:5f:ea:0a:95:16:8e:
         44:5f:59:ad:12:66:11:f1:73:c1:dc:da:9a:bf:b2:6f:25:48:
         5a:74:46:dc:19:a3:68:e7:74:9a:3f:ec:c2:94:46:8b:62:68:
         17:b9:00:a2:46:a6:45:86:fe:8c:cd:03:f5:24:e4:e6:6a:9b:
         ab:ea:56:b1:70:e7:fc:cd:db:da:a7:d3:27:90:09:5a:c0:0e:
         34:40:5e:78:74:f4:86:8b:b9:5a:43:ca:91:33:74:10:56:c8:
         e2:cf:7f:98:22:dd:96:01:4e:8f:8f:ed:6c:2a:64:fd:83:6d:
         65:23:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----