Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.mft
File:                     0BEDBC9F25C3978554ED91AA9D925E7498F260D9.mft (raw, json)
Hash identifier:          0Lz+uFgFaLOYdeUSQ+L0oXnzBQuFRDFwq7fW56U5Pss=
Subject key identifier:   42:8E:4D:34:A4:7F:C3:AD:F0:DF:AE:00:4F:43:EC:A2:A5:80:B7:C1
Authority key identifier: 0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9
Certificate issuer:       /CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
Certificate serial:       1EB67803B42027BED923271E890D3EAF99D2597B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.mft
Manifest number:          FE
Signing time:             Sat 16 Nov 2024 07:50:13 +0000
Manifest this update:     Sat 16 Nov 2024 07:45:13 +0000
Manifest next update:     Sun 17 Nov 2024 11:03:13 +0000
Files and hashes:         1: 0BEDBC9F25C3978554ED91AA9D925E7498F260D9.crl (hash: 6DLOZ5FAWyc7BcnHfV+BFrin79dW4zu1JLbCwjbXb4k=)
                          2: 323830343a3337633a3a2f33322d3634203d3e203532393831.roa (hash: yIfhszphOkfx7llcaMHpTDzGXnk2bFNkj//udQRimME=)
                          3: 3137372e32322e33322e302f32302d3234203d3e203532393831.roa (hash: OiL53+XvH8QtS0BZBTjknOjJCPYpVHe3fsHnTp5OD5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b6:78:03:b4:20:27:be:d9:23:27:1e:89:0d:3e:af:99:d2:59:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
        Validity
            Not Before: Nov 16 07:45:13 2024 GMT
            Not After : Nov 17 11:03:13 2024 GMT
        Subject: CN=428E4D34A47FC3ADF0DFAE004F43ECA2A580B7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:91:e0:fe:e7:8e:ac:54:5c:6e:16:7f:fd:
                    c1:44:a4:23:c8:27:84:2e:18:49:0b:14:26:c0:01:
                    c2:80:4b:eb:cb:45:7a:cf:c2:3a:85:83:71:ee:52:
                    9f:ac:35:c8:9b:d7:55:d2:d9:e3:9c:74:42:12:1c:
                    81:38:1a:bc:8c:8c:fa:9e:92:fa:b9:d3:02:f3:12:
                    13:1f:fc:09:da:1d:29:0e:4c:00:eb:73:6f:fe:86:
                    da:a4:fd:29:4c:30:f7:b1:86:cf:9e:85:c8:fd:e5:
                    54:38:1c:73:64:ad:2b:c9:ca:81:92:b6:6b:45:6e:
                    9d:6e:ae:b5:a6:83:e6:0c:bc:0c:87:b8:e1:01:66:
                    c1:e2:f1:2a:a2:1b:0e:34:95:9a:1b:56:6e:13:d8:
                    57:0e:4d:da:3f:b2:1f:85:41:e5:3c:ed:30:bd:e8:
                    2a:2a:9b:b1:53:18:3b:47:38:77:b2:01:6b:33:73:
                    ee:ae:4e:9f:f1:02:eb:92:db:9f:00:af:00:6f:38:
                    07:22:30:79:85:fa:27:51:eb:c4:9d:d6:a9:b4:81:
                    b5:e9:0f:39:7b:78:64:58:b4:69:ad:62:af:4b:57:
                    9f:1b:29:26:1d:03:02:7d:c9:d7:0b:82:3b:9d:39:
                    21:a2:be:be:a3:98:dd:96:68:e8:80:ca:74:0e:0f:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8E:4D:34:A4:7F:C3:AD:F0:DF:AE:00:4F:43:EC:A2:A5:80:B7:C1
            X509v3 Authority Key Identifier:
                keyid:0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:ef:1c:00:0a:07:96:3f:6b:52:f4:a6:e0:09:2f:ae:6a:
         04:09:2d:99:eb:d0:c3:cd:87:57:d2:85:33:f9:67:3a:8a:53:
         0c:79:c6:0e:1d:a7:3d:6c:f8:0a:2a:ae:92:33:21:4f:93:0a:
         51:09:08:37:37:86:b7:5a:b3:61:f4:98:80:07:0a:cf:98:fc:
         dc:69:e3:ac:49:c7:6a:44:10:23:30:70:41:92:fb:73:5b:66:
         25:3e:ed:3b:da:8e:c1:23:8f:d0:49:cd:ca:5c:9e:bf:2f:12:
         94:d4:27:57:d2:b9:6b:a3:4f:fc:d8:51:74:32:02:ad:04:b1:
         e9:35:0c:17:45:be:bc:be:2f:67:bf:1d:16:4d:04:aa:f9:ce:
         9e:85:a8:ea:19:d5:f7:bd:bd:ea:f4:8c:7c:df:27:3b:b0:aa:
         36:d0:65:b5:24:e7:da:4e:73:55:46:d9:94:ee:38:5b:ee:4a:
         30:14:f1:b7:02:ac:dd:c5:0c:a9:86:79:6b:a8:39:20:7c:4b:
         98:56:50:2c:45:3d:f2:e1:60:8b:b5:6c:09:2c:63:0c:1d:67:
         2a:f8:06:a3:e0:51:e3:49:4a:3e:de:73:f7:c2:8c:6c:53:73:
         54:5f:c5:d3:54:f4:35:84:bc:62:a9:e5:34:29:2a:a1:29:09:
         91:8a:50:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----