Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.mft
File:                     896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.mft (raw, json)
Hash identifier:          UGinWzAs6MFAc4fE+rUBmAFUr0OezGPg/13+WjS4a+A=
Subject key identifier:   48:DC:23:FD:81:89:5B:3E:73:D9:9A:25:F3:57:C2:10:3F:95:C9:4C
Authority key identifier: 89:64:25:AF:5A:D2:BE:AA:DA:B7:20:A8:46:C4:F2:B7:C7:1C:3B:E3
Certificate issuer:       /CN=896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3
Certificate serial:       07FA75A4F505D591C7F34BA38A0E85CAF93308AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.mft
Manifest number:          4C
Signing time:             Sun 14 Apr 2024 20:08:14 +0000
Manifest this update:     Sun 14 Apr 2024 20:03:14 +0000
Manifest next update:     Mon 15 Apr 2024 20:58:14 +0000
Files and hashes:         1: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (hash: wC+/n5Cc4LQv6oAd956Qg/kLO7o0/lHNAEohLnWEpqc=)
                          2: 896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.crl (hash: F/vmp3Uv+pqMUQuXw9SeWp2/1yIrrZgOG41Rdg0zuK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fa:75:a4:f5:05:d5:91:c7:f3:4b:a3:8a:0e:85:ca:f9:33:08:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3
        Validity
            Not Before: Apr 14 20:03:14 2024 GMT
            Not After : Apr 15 20:58:14 2024 GMT
        Subject: CN=48DC23FD81895B3E73D99A25F357C2103F95C94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:a4:3d:bb:ed:2c:6c:4b:ba:e1:b1:43:6d:
                    67:ef:05:34:41:3d:8a:e8:68:37:83:de:20:13:bb:
                    f7:89:cd:f0:82:9b:b2:86:0a:e2:22:e2:97:86:58:
                    00:74:22:ea:c7:f4:86:53:80:27:f6:7f:aa:74:76:
                    21:3e:c0:13:c8:e3:48:4d:cb:ea:a4:09:17:37:2e:
                    35:6b:c7:1f:36:7f:8e:50:18:22:5a:3d:14:20:67:
                    51:99:3c:59:35:a7:a4:3b:5a:a6:3d:8f:b9:63:79:
                    24:b5:54:f3:88:69:62:b0:f3:4f:c3:22:3c:45:ed:
                    b3:d4:32:52:e7:6b:8d:cd:39:e7:2a:17:19:bf:83:
                    05:c7:6f:b2:37:97:59:ce:51:45:32:84:c0:8c:ee:
                    17:7e:c3:c1:a6:25:e7:76:0c:f2:10:02:d5:82:06:
                    53:72:df:fc:09:f9:c4:94:c4:ce:d6:5f:2d:22:58:
                    6f:c5:6c:0a:ef:bc:ec:a1:4c:80:3c:d3:92:1e:c9:
                    ed:41:08:9f:7c:9c:b6:ab:bb:b9:b4:b0:ac:c5:94:
                    30:a7:d5:78:98:03:d9:f5:a1:14:c7:b6:4d:c1:0d:
                    38:41:e1:32:71:e0:91:74:f9:88:03:12:73:92:a4:
                    05:56:27:b8:b0:66:64:98:b1:fc:d4:08:92:1d:ed:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DC:23:FD:81:89:5B:3E:73:D9:9A:25:F3:57:C2:10:3F:95:C9:4C
            X509v3 Authority Key Identifier:
                keyid:89:64:25:AF:5A:D2:BE:AA:DA:B7:20:A8:46:C4:F2:B7:C7:1C:3B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:b4:e6:ee:27:e4:76:7f:04:bc:ab:28:76:8e:43:79:99:
         9c:01:b4:f3:39:0a:cc:10:b8:35:8c:af:c9:e3:54:85:7a:d3:
         aa:0e:26:22:3f:15:6b:f1:b8:00:e6:45:57:dd:ac:b9:0d:ad:
         eb:3c:7b:69:5c:3e:e8:93:11:83:d5:e3:ff:50:82:18:af:13:
         dd:75:79:cd:cd:ff:c6:29:36:23:3b:ec:fb:a9:d4:c4:5f:29:
         69:89:a9:f0:57:af:2c:ec:05:44:02:40:72:97:0d:62:f4:91:
         cf:90:a1:5b:30:79:8d:4d:1f:73:26:d1:a1:97:d0:58:02:b4:
         67:f9:aa:5c:bb:b6:e3:76:75:84:46:a6:c1:e4:4e:4d:e0:b3:
         9c:f1:9c:0f:f8:ff:f8:c4:4b:14:59:4c:ec:df:35:a7:65:e6:
         20:fc:1e:5b:01:24:94:17:f2:e5:31:27:8d:a8:81:58:83:c9:
         58:5d:d5:c9:ec:3f:c3:64:ee:44:e5:4b:fb:51:25:c8:35:24:
         10:d5:7f:60:0f:eb:c1:6e:a0:8f:7a:0e:db:c8:c7:5e:a1:0e:
         b0:37:cc:8d:70:71:0e:61:6e:91:e0:60:d2:92:49:53:1b:d6:
         4e:0f:28:29:86:19:24:f8:48:aa:fa:0c:67:06:0b:c7:a6:5d:
         f3:90:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----