Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/EC8E825704DC36D758198B053349A86E154114C9.mft
File:                     EC8E825704DC36D758198B053349A86E154114C9.mft (raw, json)
Hash identifier:          7baqGXkqqHHFxCF+ZlEeRkiCKmUxrG7StlJNRgATzxk=
Subject key identifier:   99:03:02:83:D1:DA:7E:24:A2:94:C1:A9:3F:34:3D:B3:D3:78:69:58
Authority key identifier: EC:8E:82:57:04:DC:36:D7:58:19:8B:05:33:49:A8:6E:15:41:14:C9
Certificate issuer:       /CN=EC8E825704DC36D758198B053349A86E154114C9
Certificate serial:       34F03491A7C8276BF90AE13E2EAB5B0023019F9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC8E825704DC36D758198B053349A86E154114C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/EC8E825704DC36D758198B053349A86E154114C9.mft
Manifest number:          031C
Signing time:             Mon 11 Mar 2024 12:17:19 +0000
Manifest this update:     Mon 11 Mar 2024 12:12:19 +0000
Manifest next update:     Tue 12 Mar 2024 13:34:19 +0000
Files and hashes:         1: 34352e3137302e32342e302f32322d3234203d3e20323638373133.roa (hash: gAYAh+sYVMHV8TMLtrQ5PCuH14J1Hohqj9ZJIOtSluI=)
                          2: 323830343a353939633a3a2f33322d3336203d3e20323638373133.roa (hash: MlgISWlIv5FSsi7PHHp6xn3uCAkE3Uj4v/W9iRIwgKE=)
                          3: EC8E825704DC36D758198B053349A86E154114C9.crl (hash: WXsGVO34Q9M+dlCV6FwiWKARSit+Z5YitBY3UHfP/1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:34:91:a7:c8:27:6b:f9:0a:e1:3e:2e:ab:5b:00:23:01:9f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC8E825704DC36D758198B053349A86E154114C9
        Validity
            Not Before: Mar 11 12:12:19 2024 GMT
            Not After : Mar 12 13:34:19 2024 GMT
        Subject: CN=99030283D1DA7E24A294C1A93F343DB3D3786958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:0f:f6:0f:b0:f7:80:a9:90:52:23:49:87:
                    2a:5e:c5:7a:cc:f6:14:b5:e3:ff:7e:44:a4:20:a2:
                    dc:2d:4d:65:e3:61:dd:eb:11:de:f4:f0:3e:70:46:
                    5d:a0:48:e3:14:99:00:97:f3:04:4c:ed:36:97:d5:
                    8d:81:88:ef:51:ab:e0:5e:09:98:1b:fe:25:7e:e7:
                    ec:45:97:d9:bf:1c:12:4c:b7:3d:4a:d2:b8:64:8c:
                    8c:7d:a1:ec:ee:d4:de:b3:01:ef:05:87:7d:d9:d4:
                    4a:19:d1:e0:df:8b:30:26:2d:42:01:95:d8:03:39:
                    d1:d8:a3:ba:ad:5b:65:e7:34:33:38:f6:1e:89:f1:
                    5e:2e:5f:6c:ce:0a:57:b5:94:7d:8e:fa:fc:98:8b:
                    bc:9c:6d:13:0a:cd:ed:b8:37:b0:9d:ca:c3:0a:60:
                    d8:f7:ec:70:ef:6e:9f:5f:04:31:06:9f:07:6d:69:
                    89:15:cb:40:8d:71:85:97:dd:aa:d9:4b:76:1f:8e:
                    68:a7:ac:a8:ed:1a:39:40:49:5f:4a:70:9b:bd:94:
                    f5:5e:f5:44:27:c1:4a:0d:2e:6b:ea:f0:cc:e2:87:
                    31:fe:4c:77:cb:c9:c6:5b:e4:39:dd:ea:b2:72:ad:
                    4c:4d:2c:2a:34:60:dc:f0:06:85:eb:e3:0b:86:b5:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:03:02:83:D1:DA:7E:24:A2:94:C1:A9:3F:34:3D:B3:D3:78:69:58
            X509v3 Authority Key Identifier:
                keyid:EC:8E:82:57:04:DC:36:D7:58:19:8B:05:33:49:A8:6E:15:41:14:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/EC8E825704DC36D758198B053349A86E154114C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC8E825704DC36D758198B053349A86E154114C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/EC8E825704DC36D758198B053349A86E154114C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:34:0f:97:1d:8f:ad:d3:ba:4b:b5:8e:c1:ff:ea:93:27:1f:
         39:ba:ca:b3:b8:2c:32:da:86:86:b0:4d:3c:27:04:92:e7:16:
         ea:5b:46:f8:09:be:85:ee:51:c8:21:e0:a7:2b:10:87:ea:b9:
         58:11:a6:72:8d:c3:e0:c9:c2:11:2b:27:25:7b:2f:a5:46:fd:
         c6:83:d4:4c:d7:fa:48:4f:e3:57:a5:eb:8b:2d:a2:b3:54:64:
         76:86:95:ac:ac:2d:a5:96:5f:1e:af:36:09:8e:f6:45:db:fa:
         cc:bb:fb:6a:6e:ba:22:14:70:2e:9a:e6:4a:8a:64:74:07:c2:
         73:86:5c:80:de:d8:41:c9:a4:fb:bc:5d:8b:c6:4b:05:41:58:
         97:d0:06:16:93:60:cd:10:cb:75:81:22:30:2a:09:7a:50:8b:
         45:44:29:db:12:71:f9:70:50:56:43:fe:21:c6:da:c0:16:a5:
         e0:79:a3:84:a0:2f:b7:28:f4:1e:f5:de:62:ce:ae:93:19:c1:
         9c:18:38:ba:f8:87:0a:65:c5:9c:bf:20:4e:24:7f:c5:06:54:
         4c:06:2e:03:c9:b9:f8:e9:22:f6:f5:8e:e8:19:54:b4:33:5a:
         e8:e5:02:c8:d7:91:45:ab:94:1e:ca:1a:d2:69:c4:e1:98:fc:
         72:09:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----