Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.mft
File:                     57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.mft (raw, json)
Hash identifier:          hSv4GjC1ikqumCU5NjKmGk/tLuFsdWY7xgDKUERoPzA=
Subject key identifier:   51:83:20:F3:15:50:90:40:8C:98:8D:1D:73:D2:63:37:CA:90:1B:98
Authority key identifier: 57:60:5B:D6:E2:DA:5C:87:A8:B4:43:7F:83:34:A5:F1:32:0C:41:C7
Certificate issuer:       /CN=57605BD6E2DA5C87A8B4437F8334A5F1320C41C7
Certificate serial:       143C5C95434A4E892E29440CB423FB46C3F36838
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.mft
Manifest number:          2D
Signing time:             Mon 15 Apr 2024 02:33:47 +0000
Manifest this update:     Mon 15 Apr 2024 02:28:47 +0000
Manifest next update:     Tue 16 Apr 2024 02:40:47 +0000
Files and hashes:         1: 57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.crl (hash: VroAm9pm59FLoYHn5mBvIwgs+xiS4j3AEZZlXKHf9/M=)
                          2: 3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (hash: B5MdNwaZleZcmqSw4Zj+yT9CDRxRSOdbsdo3F1d7W5E=)
                          3: 323830343a333233303a3a2f33322d3334203d3e20323635303631.roa (hash: kXIWnKKzTN0A3v9Utr1z7TO8kQK+rGNhC8A5LlOzbEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3c:5c:95:43:4a:4e:89:2e:29:44:0c:b4:23:fb:46:c3:f3:68:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57605BD6E2DA5C87A8B4437F8334A5F1320C41C7
        Validity
            Not Before: Apr 15 02:28:47 2024 GMT
            Not After : Apr 16 02:40:47 2024 GMT
        Subject: CN=518320F3155090408C988D1D73D26337CA901B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:6c:0a:22:21:c9:55:90:3c:25:d9:0d:fb:
                    19:54:20:98:8b:64:86:e9:9d:d8:14:b5:7b:ea:16:
                    4f:53:58:2d:a3:61:32:ff:2d:0a:1d:f0:7b:21:a3:
                    fd:43:e1:7c:70:31:4f:6e:42:f9:93:19:92:bf:75:
                    13:2d:c3:2c:15:85:83:13:5c:e7:9f:a4:dc:3d:61:
                    f2:25:ef:9e:4c:67:b3:6b:2a:e9:c3:63:2d:75:d5:
                    61:dc:df:21:55:59:99:93:02:22:ba:4e:bf:8d:81:
                    b5:9d:0d:9a:e8:3f:71:bb:9e:24:15:53:09:1c:28:
                    f1:a4:d3:ae:9e:3e:23:5d:af:b7:3f:44:19:c5:df:
                    eb:05:54:af:f5:19:39:0d:01:d5:63:cc:05:3b:a8:
                    ea:a8:e8:05:9f:26:6c:c2:e7:6c:a8:b7:df:80:a2:
                    cc:3a:b9:15:68:c8:80:12:89:80:c0:f3:03:dd:6f:
                    90:76:26:a3:da:ce:4c:7c:32:1e:11:29:0f:30:de:
                    27:ca:76:4c:b4:f1:0e:e4:8d:e7:80:3e:25:4b:3e:
                    50:14:84:b7:40:85:22:e4:12:5f:2a:1b:b0:c0:24:
                    d9:cd:86:d2:ef:fe:09:c9:60:e1:f3:24:b8:85:3f:
                    9b:39:e0:23:50:d4:3f:e3:a7:b8:5d:e6:3a:98:d5:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:83:20:F3:15:50:90:40:8C:98:8D:1D:73:D2:63:37:CA:90:1B:98
            X509v3 Authority Key Identifier:
                keyid:57:60:5B:D6:E2:DA:5C:87:A8:B4:43:7F:83:34:A5:F1:32:0C:41:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/57605BD6E2DA5C87A8B4437F8334A5F1320C41C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:bd:03:0f:45:88:96:7c:83:86:ab:71:8c:fa:87:a9:9f:
         85:c8:4b:04:08:9f:96:ec:e5:77:63:64:0d:55:ab:aa:c5:15:
         59:5d:fa:fd:ec:b4:aa:c9:0b:e9:77:27:9b:d0:a5:86:dc:6b:
         01:04:24:1b:10:30:70:6a:e0:05:b9:58:35:12:76:da:9f:5a:
         df:19:23:9f:fd:db:59:38:c8:b6:6d:90:0f:2b:f2:31:ee:79:
         72:2a:8f:0b:b2:e4:b1:02:53:1b:df:2d:9f:d6:8c:b9:95:13:
         42:79:c4:c9:6e:2d:b7:fb:02:bc:1d:57:b6:8c:52:98:83:c1:
         1d:eb:82:f9:41:c4:f8:44:57:40:b3:24:19:ac:d4:b0:ef:62:
         92:5d:af:03:b3:4a:7b:a7:e3:8c:aa:3f:61:41:35:72:a3:c2:
         e2:b2:7d:dc:1d:a4:5b:45:1c:bc:4a:72:8c:59:46:97:8e:d3:
         d8:35:ae:6e:8b:cb:4e:56:76:c3:9f:02:d3:54:74:d4:a5:ca:
         53:2a:b9:0b:fc:5f:7c:da:29:81:30:08:10:bd:d4:f9:bd:8b:
         44:ae:02:96:b5:5b:dd:a5:c8:9a:49:4c:76:40:c8:2a:ee:08:
         17:f1:4b:0c:47:88:50:89:e5:7b:ea:83:93:e6:0f:aa:3f:b7:
         ed:7a:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----