Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.mft
File:                     EAECF417F30F34ED5C20C0955F311C6417A8F9B0.mft (raw, json)
Hash identifier:          HjgUoa4FgIEMq43nrZxspOsW7XH7fffpMm0zh1sC8Ak=
Subject key identifier:   3F:35:EB:AB:7C:E0:21:C9:20:16:F7:50:F2:6B:B2:C1:06:AE:37:FA
Authority key identifier: EA:EC:F4:17:F3:0F:34:ED:5C:20:C0:95:5F:31:1C:64:17:A8:F9:B0
Certificate issuer:       /CN=EAECF417F30F34ED5C20C0955F311C6417A8F9B0
Certificate serial:       342CF7477338A06C83F7346B2DD34DFD0C20020D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.mft
Manifest number:          0120
Signing time:             Sun 14 Apr 2024 18:30:47 +0000
Manifest this update:     Sun 14 Apr 2024 18:25:47 +0000
Manifest next update:     Mon 15 Apr 2024 20:54:47 +0000
Files and hashes:         1: 323830343a313764383a3a2f33322d3438203d3e203631393139.roa (hash: CbPDHwoh6GWvdipbgW89/ctiNAbmp5zqugQ3t0LIZCo=)
                          2: EAECF417F30F34ED5C20C0955F311C6417A8F9B0.crl (hash: m/kF9WzgpJ+LW6LSkiz3F9AbAHC8iErlnuAP9wVFngo=)
                          3: 3139302e3131322e3230342e302f32322d3234203d3e203631393139.roa (hash: YkLXLw0b2ufdqbNxLhUeKufnIT220wghOUNpt9lmtSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2c:f7:47:73:38:a0:6c:83:f7:34:6b:2d:d3:4d:fd:0c:20:02:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAECF417F30F34ED5C20C0955F311C6417A8F9B0
        Validity
            Not Before: Apr 14 18:25:47 2024 GMT
            Not After : Apr 15 20:54:47 2024 GMT
        Subject: CN=3F35EBAB7CE021C92016F750F26BB2C106AE37FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:5d:14:e8:24:84:74:37:48:06:41:1e:b4:
                    d5:a2:2b:d8:ef:41:76:01:26:51:d9:c0:af:09:4e:
                    2b:f6:7a:5b:2f:67:04:76:82:12:4a:d1:c4:02:04:
                    96:bb:12:7d:67:da:1d:7f:83:80:1b:34:e6:04:b0:
                    72:3d:88:0f:69:31:b0:f1:60:1a:08:33:30:d7:5d:
                    13:4e:ad:ed:a8:7b:b3:82:2f:a5:cf:11:f5:03:51:
                    ff:ce:3a:c1:54:39:5e:59:64:63:7d:35:1c:7e:ea:
                    1a:83:77:2d:b6:0a:69:d6:bc:69:c3:cc:df:a3:dc:
                    81:93:57:c1:34:cb:6f:66:45:f0:c5:b1:af:ac:8c:
                    13:8e:71:c9:f3:7a:b2:fc:db:a0:68:7e:50:82:64:
                    51:91:9e:84:0b:a2:8e:0a:1e:60:07:c2:4b:38:a2:
                    ca:05:c6:a5:2b:86:f6:b3:7f:41:3a:05:64:ab:fa:
                    1f:7b:5b:6e:2d:6e:90:ce:96:e7:24:31:fd:4e:da:
                    77:c2:3c:c3:5b:79:3d:7c:64:c3:98:6d:00:41:cb:
                    e9:fa:77:43:ad:e9:d2:7d:35:31:5b:43:b1:63:9e:
                    ab:94:8b:48:03:3a:a7:34:38:80:0b:a0:2e:e8:cc:
                    74:27:bb:a6:ff:16:1e:3e:8a:3b:e7:84:28:a6:9a:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:EB:AB:7C:E0:21:C9:20:16:F7:50:F2:6B:B2:C1:06:AE:37:FA
            X509v3 Authority Key Identifier:
                keyid:EA:EC:F4:17:F3:0F:34:ED:5C:20:C0:95:5F:31:1C:64:17:A8:F9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:6d:86:44:0c:d2:85:dc:9f:63:24:92:6c:67:fe:76:dc:
         f2:64:ee:0b:d8:28:dd:93:59:8c:db:25:f5:85:dc:84:7e:ea:
         f3:de:2e:d2:3f:df:fc:8d:d5:87:a6:24:65:4a:ef:94:9d:f6:
         3e:17:25:8e:4e:17:e3:90:e8:80:32:bf:39:67:7e:ea:76:9b:
         57:bf:99:80:52:d5:23:44:c5:c3:79:0a:1e:ca:30:05:67:7c:
         28:55:bc:eb:32:b8:4b:83:d9:40:e1:5f:ff:42:c7:d1:4e:1d:
         99:1c:31:0f:cd:7e:cd:dc:e1:b6:11:9f:58:6a:80:02:77:d3:
         fa:f7:6b:36:f4:bb:c0:f0:0d:12:88:d9:3b:66:ca:b7:c7:4d:
         1e:6e:0f:a6:86:1a:59:2c:fd:08:1e:1b:27:67:0a:ed:06:4b:
         11:b5:e6:0c:d2:dd:3b:71:c6:9b:73:49:6a:51:ac:a4:e0:25:
         73:1a:ac:24:67:21:14:59:26:81:68:a3:f0:7e:ec:4c:57:02:
         7e:68:f6:61:c8:03:bf:6a:06:c3:fc:6c:74:e1:7a:90:4f:58:
         2c:e2:d4:e8:54:51:8c:80:e3:1b:a2:e9:5b:f5:5b:b5:36:a9:
         8c:e9:32:c2:f6:d7:a6:20:4a:99:bc:38:07:95:f4:ac:bb:2c:
         aa:6c:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----