Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.mft
File:                     D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.mft (raw, json)
Hash identifier:          BtYnnMD97pQXsXd4lCQ4MHjD0do7J2Ma5JkvIVF3J9Q=
Subject key identifier:   BF:A0:52:5F:D2:C9:F1:DD:66:05:50:A4:EF:2F:EC:A5:D6:39:B1:BA
Authority key identifier: D4:4F:32:5C:7D:B3:DE:67:D8:77:62:90:A6:F5:5A:F2:69:8F:FF:9C
Certificate issuer:       /CN=D44F325C7DB3DE67D8776290A6F55AF2698FFF9C
Certificate serial:       03AA5684A115BC27793FC63BD6CB48341FE86F3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.mft
Manifest number:          23
Signing time:             Sun 19 May 2024 11:11:02 +0000
Manifest this update:     Sun 19 May 2024 11:06:02 +0000
Manifest next update:     Mon 20 May 2024 12:39:02 +0000
Files and hashes:         1: D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.crl (hash: ws9jfGxfhF7HhlOP/chacSNMuopzxzFLbiFB1MsfwM0=)
                          2: 323830343a373361383a3a2f33322d313238203d3e20323730393239.roa (hash: oFwoTAoQd5t9QoUl8bVWV2Y7sXFmamDlg8DHLfM5cc0=)
                          3: 3138362e32362e39362e302f32322d3332203d3e20323730393239.roa (hash: yca61bohXZxLp0abtkn8AlzDBN07R4oVNwzR+cgy+uA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:aa:56:84:a1:15:bc:27:79:3f:c6:3b:d6:cb:48:34:1f:e8:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D44F325C7DB3DE67D8776290A6F55AF2698FFF9C
        Validity
            Not Before: May 19 11:06:02 2024 GMT
            Not After : May 20 12:39:02 2024 GMT
        Subject: CN=BFA0525FD2C9F1DD660550A4EF2FECA5D639B1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:d5:55:78:9b:36:a1:7a:0f:72:79:e3:7b:
                    97:65:80:e9:24:82:b8:fa:b7:30:c2:8e:72:e6:f9:
                    6c:27:de:02:6f:e0:48:1e:51:40:d2:d9:b8:d2:c6:
                    c6:f4:b7:ab:39:d1:00:6c:90:32:59:eb:63:8a:56:
                    e0:80:63:9b:9c:03:e3:a6:60:ad:eb:ff:17:fe:2e:
                    4f:56:ca:20:a8:26:08:62:88:55:03:b4:36:ee:f7:
                    46:87:45:d7:50:2d:f9:68:62:e5:88:34:b2:4f:61:
                    fc:c0:c4:00:cd:56:fc:20:8a:eb:dc:c6:ef:ad:7d:
                    f8:7d:1c:1b:f2:e3:48:d1:dc:b5:cb:b2:fb:88:84:
                    de:84:fc:bc:52:6a:0e:7c:ac:f0:a2:88:d8:8a:d2:
                    9a:fc:c7:8c:94:a4:50:15:c9:79:14:cd:d5:96:12:
                    99:0e:41:74:b4:76:5e:2d:ba:55:09:3c:07:ea:89:
                    e4:d1:43:59:a3:3f:c0:98:e5:ca:8f:96:f2:b9:10:
                    64:49:86:36:93:7a:cf:41:af:99:99:c3:ac:fd:1c:
                    23:9f:04:cb:63:e2:04:f8:1c:4a:8b:b4:c9:15:e9:
                    ff:5b:0c:7f:25:51:cd:f4:83:db:d9:a8:dd:8e:22:
                    cc:f6:a3:34:29:c6:4c:fa:4f:4e:da:fc:1c:33:dd:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A0:52:5F:D2:C9:F1:DD:66:05:50:A4:EF:2F:EC:A5:D6:39:B1:BA
            X509v3 Authority Key Identifier:
                keyid:D4:4F:32:5C:7D:B3:DE:67:D8:77:62:90:A6:F5:5A:F2:69:8F:FF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D44F325C7DB3DE67D8776290A6F55AF2698FFF9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c4:43:81:ef:fc:da:80:db:c8:97:8d:2c:94:52:61:e6:1a:
         90:00:a6:20:44:5c:a9:28:b3:3e:fd:ee:d8:37:04:3d:68:b6:
         53:b4:0a:a6:80:14:d3:dc:5f:77:05:b0:54:c6:bd:0c:23:ce:
         95:94:e7:0e:b2:cb:07:d9:fe:a8:8e:d7:ae:7b:20:64:7d:97:
         69:ad:fe:80:bc:d5:43:b3:27:d5:08:e6:64:96:ed:32:5b:44:
         0f:21:08:ff:cc:eb:e0:7e:bc:ce:dd:c0:07:ab:e0:8e:91:d8:
         36:d7:35:4c:fc:8f:3d:1c:11:d3:b7:e3:e4:bf:5c:ea:4d:ea:
         8b:a0:d7:0b:0f:09:7b:49:0e:d1:10:69:b6:ed:5c:e0:6c:eb:
         09:f7:dd:43:e1:62:b7:70:97:b7:fb:24:86:4d:2d:c3:b7:47:
         77:98:ea:6c:1e:db:ed:21:bf:91:36:e2:17:2b:04:e2:66:8b:
         1b:b7:db:f9:2d:31:18:70:a4:12:ac:dc:9f:ff:38:e7:f2:13:
         e3:7e:24:52:59:ca:4e:16:54:50:66:0e:fd:33:c6:dd:13:f1:
         88:f0:c1:c6:25:1d:27:c5:5f:e3:e5:5d:44:28:bc:f0:33:99:
         e3:07:8f:3c:ad:86:cb:0b:12:53:0f:8c:7f:f2:77:c1:06:49:
         75:c4:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----