Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/B584B98A8771D2CECC7673116562082E67430EE0.mft
File:                     B584B98A8771D2CECC7673116562082E67430EE0.mft (raw, json)
Hash identifier:          Mdo2TKTJuyeZAioPJO8e6MApHBWZPLYFZgCe34Y0NKE=
Subject key identifier:   A1:DA:01:5C:EE:75:96:2E:20:48:AA:B5:E8:C7:16:FF:23:1E:FA:8A
Authority key identifier: B5:84:B9:8A:87:71:D2:CE:CC:76:73:11:65:62:08:2E:67:43:0E:E0
Certificate issuer:       /CN=B584B98A8771D2CECC7673116562082E67430EE0
Certificate serial:       19940C46EE0BF5F023DB5A602DC7178087ECC166
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B584B98A8771D2CECC7673116562082E67430EE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/B584B98A8771D2CECC7673116562082E67430EE0.mft
Manifest number:          0214
Signing time:             Mon 15 Apr 2024 06:19:54 +0000
Manifest this update:     Mon 15 Apr 2024 06:14:54 +0000
Manifest next update:     Tue 16 Apr 2024 09:15:54 +0000
Files and hashes:         1: B584B98A8771D2CECC7673116562082E67430EE0.crl (hash: 4hDZpvlfHqk3rYkn7fF+JumycIeYyvi+ExrLk5gl5ys=)
                          2: 323830343a356163633a3a2f33322d3336203d3e20323638373937.roa (hash: iftgszCxo7R73vdeIW6Q2Xz5AUgbMEyTkyAZXTqiEUs=)
                          3: 34352e3137322e3234342e302f32322d3234203d3e20323638373937.roa (hash: rIPD5ql9uJd4D414qW8hR/hBcF0EYREC0VmeSuh40fA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:94:0c:46:ee:0b:f5:f0:23:db:5a:60:2d:c7:17:80:87:ec:c1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B584B98A8771D2CECC7673116562082E67430EE0
        Validity
            Not Before: Apr 15 06:14:54 2024 GMT
            Not After : Apr 16 09:15:54 2024 GMT
        Subject: CN=A1DA015CEE75962E2048AAB5E8C716FF231EFA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:f2:05:86:c6:95:87:32:aa:69:90:04:ad:
                    27:24:0c:16:36:d0:f8:88:e2:d2:ea:3e:4e:22:3a:
                    57:e7:b1:97:24:2d:18:03:0a:11:21:f0:b1:af:86:
                    76:93:fe:53:07:64:8f:5e:cd:f3:59:d4:77:1b:45:
                    c0:93:b3:42:06:7b:db:23:23:54:db:fb:d1:4b:5d:
                    aa:ed:40:8e:86:2b:8e:40:80:8e:91:1a:c4:e6:b2:
                    62:fa:2b:1a:22:43:84:94:7f:85:95:84:06:64:d4:
                    88:99:8f:cf:b1:75:fe:f3:4f:c8:1a:1f:31:07:ba:
                    5b:a6:7a:ff:36:99:15:f1:cd:18:ee:74:d9:d3:be:
                    b3:6b:f4:5f:59:17:c0:b1:07:56:d2:4e:19:a4:17:
                    cf:ff:06:29:c2:86:f9:c0:af:4d:e5:92:3d:28:14:
                    32:df:3e:25:78:40:47:68:79:67:3b:fc:22:2b:fc:
                    b8:39:61:00:ba:9b:2e:da:ff:ef:0c:e3:94:8b:57:
                    9e:2d:c1:5f:17:14:d9:6e:13:7c:b2:50:de:34:e8:
                    d0:75:12:3a:db:81:d0:92:43:d9:7a:25:dd:b3:a2:
                    81:42:8f:1f:63:38:9e:5a:90:cd:33:ef:66:90:b9:
                    a8:ea:9d:db:fe:f4:ea:d8:c1:50:f6:09:6d:29:70:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DA:01:5C:EE:75:96:2E:20:48:AA:B5:E8:C7:16:FF:23:1E:FA:8A
            X509v3 Authority Key Identifier:
                keyid:B5:84:B9:8A:87:71:D2:CE:CC:76:73:11:65:62:08:2E:67:43:0E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/B584B98A8771D2CECC7673116562082E67430EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B584B98A8771D2CECC7673116562082E67430EE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/B584B98A8771D2CECC7673116562082E67430EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:18:8e:cc:4e:bb:7b:e9:61:77:43:c6:82:58:22:55:5c:
         62:80:07:1c:c3:66:ad:27:9c:b2:d2:2c:ed:16:04:37:0c:b5:
         32:a0:fb:05:e6:7b:03:25:a7:e5:3d:f9:41:b8:89:cf:50:91:
         3a:19:89:7c:93:6d:68:56:ca:2a:80:c4:92:d1:a9:93:cb:0e:
         3a:f5:7c:f0:5c:f5:d9:cb:f9:fa:b6:d4:3c:1b:52:d1:38:c1:
         64:a5:94:b8:78:a6:f9:31:c8:9a:89:ff:93:39:35:f1:36:a8:
         4d:e5:8d:d9:0b:66:fe:81:1b:ee:97:5a:b4:e0:e5:96:0b:2e:
         eb:f3:38:9a:e8:f4:07:65:fc:3c:42:53:9d:a8:10:0b:ec:70:
         ec:b9:5e:86:0a:7a:2e:b2:5b:cf:36:49:8e:ad:96:59:24:94:
         e0:1a:ec:9f:68:bc:09:a4:d8:94:77:cb:8d:a3:4a:bf:07:cc:
         0b:58:2e:d7:76:6e:fd:94:d4:3b:bd:4b:63:38:53:be:79:64:
         e5:28:e9:55:78:3e:e6:09:03:7b:3b:c9:b5:bc:b7:2d:b4:60:
         3d:f9:d3:af:74:d3:f9:ac:63:0e:56:07:34:53:21:c2:f6:3a:
         71:f9:c3:5d:76:77:63:0e:4e:1b:41:ea:da:06:f6:1f:a7:29:
         4b:38:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----