Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.mft
File:                     EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.mft (raw, json)
Hash identifier:          BnLhmwvOjaS+kKtzxzFUyaPyVWK7nHXBlQrkydWm2hM=
Subject key identifier:   23:A8:33:00:FE:46:29:B7:D2:A6:00:8C:90:2A:ED:1F:39:F6:CE:70
Authority key identifier: ED:D5:16:BF:C1:83:DF:33:AB:0F:5D:56:D9:A5:1F:9E:B4:AE:45:53
Certificate issuer:       /CN=EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553
Certificate serial:       180CABF5E8BB3F4973ED2F5AFFC25CAA839F6BEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.mft
Manifest number:          5E
Signing time:             Thu 24 Oct 2024 10:43:50 +0000
Manifest this update:     Thu 24 Oct 2024 10:38:50 +0000
Manifest next update:     Fri 25 Oct 2024 11:53:50 +0000
Files and hashes:         1: 34352e3232362e3139362e302f32322d3234203d3e20323636393738.roa (hash: V9UEu2/eaoQfrJjSdgOpmgx1A7WgQT2C70ZPYiYOqAg=)
                          2: EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.crl (hash: zR1BX3M9DDb63yx0g0mBBpI3Gt7AnYtb7e+wKQd1GUU=)
                          3: 323830343a343634303a3a2f33322d3336203d3e20323636393738.roa (hash: jUbnmuN7AG+koA7fi3Le3k/udIrj6CJuELy0jzLc72w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0c:ab:f5:e8:bb:3f:49:73:ed:2f:5a:ff:c2:5c:aa:83:9f:6b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553
        Validity
            Not Before: Oct 24 10:38:50 2024 GMT
            Not After : Oct 25 11:53:50 2024 GMT
        Subject: CN=23A83300FE4629B7D2A6008C902AED1F39F6CE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:0c:c2:35:ee:9f:90:ac:35:f6:e9:ec:b7:
                    fa:30:78:01:50:34:0c:ff:71:b5:42:96:f8:9a:50:
                    5d:da:d7:0a:d6:c9:31:ec:56:53:d2:23:eb:a9:f8:
                    99:62:22:e8:e5:d6:25:8d:3f:c3:ae:31:33:d2:fa:
                    e8:9f:74:64:1e:55:d9:2f:da:cf:8f:0b:f7:19:9b:
                    76:96:87:8f:15:07:f5:a4:6f:ac:fc:d6:5d:d7:9d:
                    9a:a5:2c:84:f9:a6:ab:a6:f0:26:db:a9:f0:3e:aa:
                    29:b2:b0:b2:b9:26:bf:03:59:02:08:ef:3c:9d:bc:
                    d7:34:09:be:9b:71:b1:7e:94:c3:76:90:6a:ab:fd:
                    d4:5f:e3:d4:9b:ff:46:68:20:52:b7:5e:eb:30:04:
                    3e:c7:0f:7b:fe:8e:9f:d5:bf:b7:c5:16:6f:80:92:
                    59:79:9a:8a:dc:7f:68:26:f4:36:70:94:07:4d:da:
                    7e:f2:48:e7:d1:3e:c6:9c:42:d8:22:13:7c:55:60:
                    77:a9:36:81:3a:7e:52:b7:3f:46:bd:f1:c0:98:8c:
                    a6:ac:28:b5:e8:4f:72:a0:e7:d2:b0:9f:ba:a6:33:
                    b9:bb:86:e9:b8:f9:78:55:db:21:1e:0c:f5:c6:7a:
                    b4:6b:8e:61:0c:57:21:c0:8e:5e:f4:ba:2d:ec:1b:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A8:33:00:FE:46:29:B7:D2:A6:00:8C:90:2A:ED:1F:39:F6:CE:70
            X509v3 Authority Key Identifier:
                keyid:ED:D5:16:BF:C1:83:DF:33:AB:0F:5D:56:D9:A5:1F:9E:B4:AE:45:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85fXwmpG2ST9YwnsnTKer35p7WxaCY1oHbXMrzVXtdTf/0/EDD516BFC183DF33AB0F5D56D9A51F9EB4AE4553.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:72:8e:9f:eb:be:38:df:6d:f3:84:f4:0e:d7:60:b2:ff:
         60:75:67:3a:c3:8d:ef:12:49:a2:fa:f3:6e:74:1e:ee:32:5e:
         7d:ad:0e:06:6b:71:03:83:ed:b7:a9:2b:e5:12:c9:60:f9:8a:
         82:a6:7c:0f:5c:a1:7d:69:bb:59:97:a9:bc:ac:2c:1c:f5:2b:
         b5:27:ae:d1:95:0e:70:53:86:34:45:ed:5f:a1:98:d6:d1:0e:
         c2:de:a7:f4:1e:33:0c:58:7e:8b:f9:21:45:81:7b:f7:2e:42:
         95:54:e8:3f:79:ad:a6:b2:3a:64:4e:f4:df:26:07:ac:40:cb:
         a6:37:6b:7a:47:e8:84:31:4a:a0:be:d6:ce:e9:2a:b8:7d:f3:
         a2:99:0c:6c:c3:ff:69:cd:a6:69:5a:45:8e:5a:87:e6:8e:83:
         24:72:a6:79:19:e9:57:05:27:fd:7d:5d:9a:ee:a4:98:45:41:
         f4:8b:1e:09:cc:01:15:2c:90:48:a7:99:8f:13:9b:6e:9e:ff:
         6c:b6:e8:7b:6d:c3:24:d9:aa:e4:84:cc:ff:40:2d:fa:04:26:
         12:f7:1b:45:04:14:8f:d7:59:43:f2:ce:1c:8c:b3:e5:d7:66:
         47:d2:17:a5:da:2a:c6:42:ff:6a:19:7e:e0:25:f3:cb:52:86:
         14:5b:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----