Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.mft
File:                     0EE453A3507C247D4D2FA3B18D9661870AA5160A.mft (raw, json)
Hash identifier:          8KemoQ6TJ7EDW8PQ6iZrjZpLapXJSkjhdLkDSwGUR84=
Subject key identifier:   B6:32:AA:A3:DD:D9:8B:44:9B:A3:72:72:6E:26:DC:B1:44:FC:F0:34
Authority key identifier: 0E:E4:53:A3:50:7C:24:7D:4D:2F:A3:B1:8D:96:61:87:0A:A5:16:0A
Certificate issuer:       /CN=0EE453A3507C247D4D2FA3B18D9661870AA5160A
Certificate serial:       18A3B7B2939778DD0326FC70E093BB69270492EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.mft
Manifest number:          012F
Signing time:             Tue 19 Nov 2024 08:51:45 +0000
Manifest this update:     Tue 19 Nov 2024 08:46:45 +0000
Manifest next update:     Wed 20 Nov 2024 12:15:45 +0000
Files and hashes:         1: 3133382e33362e33362e302f32322d3234203d3e20323634353638.roa (hash: 9B0VNnM+HDkT/TntVCdxCVB32KwXOgIc0wWcNv2puOc=)
                          2: 0EE453A3507C247D4D2FA3B18D9661870AA5160A.crl (hash: pCbPVSz8R4Mkf3w4HEB1oy+LTS5soIj/IMkr3tKzlKY=)
                          3: 323830343a323162343a3a2f33322d3438203d3e20323634353638.roa (hash: Bo0iS4aGX86eRiC4nfihm+8rqCz0NUnCJUtKvzoPK84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a3:b7:b2:93:97:78:dd:03:26:fc:70:e0:93:bb:69:27:04:92:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE453A3507C247D4D2FA3B18D9661870AA5160A
        Validity
            Not Before: Nov 19 08:46:45 2024 GMT
            Not After : Nov 20 12:15:45 2024 GMT
        Subject: CN=B632AAA3DDD98B449BA372726E26DCB144FCF034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:97:e6:33:a8:d2:0d:0a:56:77:a4:78:49:
                    af:f9:46:29:cc:be:6e:8f:31:e4:b1:4c:85:e5:18:
                    1d:a7:d0:7f:8d:ba:de:e2:cb:d1:9f:91:a7:c5:f4:
                    b0:86:56:ac:e9:4c:3c:66:27:e6:6b:01:d4:b5:7f:
                    d4:7b:07:53:27:9b:97:f3:2e:ca:af:c6:e7:68:51:
                    12:71:dc:72:8c:36:73:5c:fa:f1:56:43:f4:d2:7f:
                    18:6e:df:07:0a:15:29:3a:59:a0:da:d3:d3:cf:74:
                    c1:9a:28:2a:47:c5:93:aa:74:ae:28:f3:ab:f8:56:
                    09:09:1d:74:9a:37:0d:be:7e:4d:79:c6:ff:4e:27:
                    c2:d1:d3:39:69:a6:e5:5b:a3:4b:98:e2:82:ed:c3:
                    ec:3f:53:44:df:4f:86:b3:7f:92:77:ec:69:f6:52:
                    68:f2:e0:ae:01:39:58:5c:bc:cd:27:d8:ed:e1:98:
                    96:78:31:76:56:57:0b:9c:ff:4e:5f:9e:b0:66:f0:
                    ac:10:de:bf:1e:f6:3c:f4:a1:11:08:38:1a:50:41:
                    04:b5:f5:af:22:c6:b2:68:78:45:3c:66:c1:a4:db:
                    10:5e:3a:42:23:75:29:76:c7:36:93:04:fd:6d:93:
                    ed:06:29:e7:ce:68:0e:94:02:dc:a1:09:24:db:b2:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:32:AA:A3:DD:D9:8B:44:9B:A3:72:72:6E:26:DC:B1:44:FC:F0:34
            X509v3 Authority Key Identifier:
                keyid:0E:E4:53:A3:50:7C:24:7D:4D:2F:A3:B1:8D:96:61:87:0A:A5:16:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:56:5c:d8:70:99:2d:22:f2:e3:3f:8e:06:f5:13:8c:a1:
         29:20:66:5f:86:b3:97:b7:bb:bc:34:88:5d:c5:8e:5c:cb:cd:
         17:e7:40:4e:05:7e:cb:15:1f:27:79:1e:6c:3d:86:ff:51:1c:
         7d:ef:71:9e:d0:92:92:c2:4b:ea:f8:89:36:fb:0c:0b:ee:b9:
         d0:30:cb:b3:c1:e1:0d:6b:de:72:a1:e0:07:4e:1f:f8:96:d0:
         95:0f:b8:e0:e7:92:2a:0e:0c:3a:ed:a2:94:69:4b:60:4e:fb:
         a7:b4:2e:77:25:d3:8e:f8:1a:0a:42:0f:be:32:93:b8:b9:22:
         80:49:c9:c4:e1:1c:d3:73:72:86:d8:a3:36:43:cc:fe:dd:a9:
         ec:65:1e:96:f3:81:82:20:8e:42:d8:51:52:a1:2e:3c:70:75:
         87:80:de:cc:5a:5b:0a:da:9b:28:f3:43:87:0b:04:24:05:df:
         7a:80:64:d2:a8:70:3b:93:ec:c3:ee:98:c4:b6:5c:40:dd:ca:
         bc:4c:55:b9:92:42:bf:ee:d9:70:fb:15:66:7d:03:10:9d:0c:
         72:eb:cc:9f:73:22:a8:d2:67:1c:9f:48:26:e0:e2:c4:23:f5:
         5c:5a:31:7c:61:36:37:5f:2b:85:69:3e:d7:9b:bf:8b:3f:1c:
         b1:41:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----