Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.mft
File:                     8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.mft (raw, json)
Hash identifier:          ZAM7+QBz5aTN2CrzSaUjjG++SPFcgQXPSpaiyZu5HSE=
Subject key identifier:   C9:79:51:71:07:1C:F1:CF:AB:27:EA:BD:E9:01:12:B3:1E:A9:C6:4A
Authority key identifier: 8D:DD:5B:4E:CD:EA:93:0D:3E:92:37:49:0D:72:A4:1D:F4:D9:53:C0
Certificate issuer:       /CN=8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0
Certificate serial:       6DFAE9CE61D4289B67559CB4D2259022495DF1B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.mft
Manifest number:          44
Signing time:             Wed 22 May 2024 23:05:51 +0000
Manifest this update:     Wed 22 May 2024 23:00:51 +0000
Manifest next update:     Fri 24 May 2024 02:15:51 +0000
Files and hashes:         1: 34352e3137322e3234342e302f32322d3234203d3e20323638373937.roa (hash: TwfWDKak4O1jQIFXVe9SuZ9JbQIF5d0zKHEF9FVqqHg=)
                          2: 8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.crl (hash: uQ0OHm2C2ZzqLIb0Yg8cGD/uIN6mN+ZUii3USTLdXes=)
                          3: 323830343a356163633a3a2f33322d3336203d3e20323638373937.roa (hash: HTlHEHIhHC/+i1ohaC0W4C0oJxR8jg8+806axdbhZyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fa:e9:ce:61:d4:28:9b:67:55:9c:b4:d2:25:90:22:49:5d:f1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0
        Validity
            Not Before: May 22 23:00:51 2024 GMT
            Not After : May 24 02:15:51 2024 GMT
        Subject: CN=C9795171071CF1CFAB27EABDE90112B31EA9C64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:e2:a9:0e:b1:87:d1:58:c8:37:8c:ec:23:
                    f5:34:f6:e0:b2:ab:e6:06:57:88:19:96:af:8a:e8:
                    77:16:66:1d:50:8e:41:c7:5c:0e:11:2a:9f:9e:88:
                    72:ca:e2:31:3f:b6:10:11:b9:86:68:b1:9e:9f:aa:
                    32:c1:79:9f:ba:93:24:28:ed:c8:7d:33:bf:b2:33:
                    06:6e:60:c6:bf:cf:ad:83:ee:84:26:fb:0b:ce:6e:
                    d4:1d:cd:62:55:5c:6a:b5:08:5a:55:7a:4d:2e:0e:
                    18:1c:a1:80:fd:2d:f2:45:35:ae:6b:ad:dc:6e:6d:
                    b4:28:62:3f:5e:e5:0c:48:71:49:86:7a:e3:04:64:
                    4b:fe:0b:a5:29:1a:76:18:b4:57:a8:70:bd:e1:ba:
                    f4:82:9e:d1:28:37:48:f8:07:02:32:c2:aa:c8:b2:
                    8c:e5:37:81:a2:e3:5f:3a:70:60:a1:e7:5c:db:e3:
                    55:4a:ab:d6:03:9d:03:19:df:50:1a:92:c0:40:12:
                    e6:a8:e8:7a:05:61:05:63:55:3b:de:55:f6:26:a5:
                    e6:ad:46:be:3a:8f:f3:59:d7:43:b3:df:1f:2c:c4:
                    3d:d6:41:69:e9:1b:53:24:50:31:b0:dc:66:44:2c:
                    94:e0:dc:ef:63:8c:aa:18:1a:49:e9:b8:90:14:4f:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:51:71:07:1C:F1:CF:AB:27:EA:BD:E9:01:12:B3:1E:A9:C6:4A
            X509v3 Authority Key Identifier:
                keyid:8D:DD:5B:4E:CD:EA:93:0D:3E:92:37:49:0D:72:A4:1D:F4:D9:53:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:3e:4a:9e:0c:dd:02:51:9b:5e:5d:89:90:6c:94:c9:97:
         9b:0d:23:af:61:97:d1:53:07:40:6b:df:ba:e6:1c:e9:21:f6:
         74:2c:b7:4a:a8:0c:08:c3:51:0a:2d:93:fb:1c:d6:99:b5:77:
         95:01:e6:a7:83:dd:b9:02:66:66:cb:75:86:a7:9a:68:c5:39:
         89:6f:ba:03:4b:83:89:fa:4b:bd:bd:05:00:e5:29:62:91:92:
         c7:0f:6f:10:3c:6f:10:82:0b:9f:89:ba:a0:02:0c:a7:25:44:
         4f:6c:36:60:91:d0:a9:3a:96:d6:99:bf:30:1d:e8:d1:95:fd:
         b2:62:e5:02:f4:fa:ef:d3:a1:70:f5:ed:ed:bf:9d:f0:13:4a:
         45:8f:f0:a1:ed:ab:98:fe:7c:d8:3d:1a:1c:d0:8f:62:d6:3c:
         af:98:ce:00:7d:a8:17:7c:cb:22:02:29:0f:57:ec:67:df:a5:
         21:0b:ea:e6:77:3b:52:fc:c6:5d:c9:ca:85:4f:f2:fc:1c:92:
         d7:75:86:2e:f8:00:fc:73:ca:0a:08:ef:9c:90:b3:90:f6:bf:
         f0:62:c5:70:a2:0c:ad:ea:8b:00:08:80:65:9e:2e:25:7a:fd:
         fd:c5:eb:1d:b0:1c:49:9c:05:1a:8c:b2:71:a3:a9:c0:10:c5:
         48:26:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----