Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.mft
File:                     96241E2937532ADFA240CD6F40331679CB3DEFD8.mft (raw, json)
Hash identifier:          m6kDoE8golRplQExmHTFS1un7SmSMp7caUENXJcebEI=
Subject key identifier:   CC:F2:BD:B6:11:F2:C1:76:39:FC:CF:C3:78:79:32:A7:F6:9A:36:EE
Authority key identifier: 96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8
Certificate issuer:       /CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
Certificate serial:       5CDE7C3839627AE2E8AD8D6D4036006146BEC7F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.mft
Manifest number:          0157
Signing time:             Mon 15 Apr 2024 09:28:48 +0000
Manifest this update:     Mon 15 Apr 2024 09:23:48 +0000
Manifest next update:     Tue 16 Apr 2024 12:42:48 +0000
Files and hashes:         1: 96241E2937532ADFA240CD6F40331679CB3DEFD8.crl (hash: LvTBhKpiGpSaNZ3VI+bxXIlNuW/Fbi9o6EW3mMFu56k=)
                          2: 3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa (hash: cfFoK6ZmyQK+LklWG+hauAoT4BssrRB1AdOiwR/CfZA=)
                          3: 323830343a333433343a3a2f33322d3334203d3e20323635343432.roa (hash: b+a3qsApURsIoCxUYBOc2B75qFLbIuIzzIS5y32Fzww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:de:7c:38:39:62:7a:e2:e8:ad:8d:6d:40:36:00:61:46:be:c7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96241E2937532ADFA240CD6F40331679CB3DEFD8
        Validity
            Not Before: Apr 15 09:23:48 2024 GMT
            Not After : Apr 16 12:42:48 2024 GMT
        Subject: CN=CCF2BDB611F2C17639FCCFC3787932A7F69A36EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:2c:3c:62:58:0c:af:db:27:fa:52:23:91:
                    8b:23:c7:fb:8b:c1:fb:9f:b8:5a:37:57:e2:c7:5d:
                    1e:55:b8:1c:9e:5f:02:76:97:58:81:f4:de:98:45:
                    ab:47:1e:a3:9e:e6:b4:3d:e3:a2:77:1b:15:a0:8d:
                    04:86:77:00:4e:50:c1:db:48:69:17:66:7b:d3:f3:
                    0b:36:31:a2:39:ba:3b:3b:65:1f:95:fb:da:d6:b9:
                    63:5a:2d:6a:ae:f2:d6:7d:9d:6f:bd:42:13:81:f3:
                    78:9f:7e:b0:6b:2a:79:a0:e6:d5:66:5e:96:c4:a5:
                    6c:af:13:e6:d2:e7:9c:24:78:d7:91:2f:9d:c3:2f:
                    31:99:0d:c8:28:8b:ab:12:61:1d:68:d6:21:54:db:
                    e6:81:b0:96:62:46:d9:8f:39:a1:41:18:7c:96:cd:
                    87:89:ed:b9:57:23:76:6c:1e:ff:e6:33:c8:b6:aa:
                    16:9e:73:bd:7d:65:be:08:c7:18:ff:54:1d:d8:01:
                    0a:a7:fe:d5:2a:1c:cf:f7:6a:b4:93:f6:8d:3e:e3:
                    4d:19:be:44:8a:29:47:ed:d1:a6:8c:f3:5f:26:90:
                    04:2c:bb:35:23:57:ec:3c:a2:7a:ad:90:92:63:78:
                    71:ab:29:98:47:97:48:21:3f:dc:1c:a8:c3:b5:92:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:BD:B6:11:F2:C1:76:39:FC:CF:C3:78:79:32:A7:F6:9A:36:EE
            X509v3 Authority Key Identifier:
                keyid:96:24:1E:29:37:53:2A:DF:A2:40:CD:6F:40:33:16:79:CB:3D:EF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/96241E2937532ADFA240CD6F40331679CB3DEFD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:09:d0:85:54:88:45:29:53:9b:64:ef:41:ef:03:0b:39:16:
         66:dc:ba:1e:6f:f1:e0:ca:97:06:15:7e:20:cb:aa:5c:35:d8:
         4e:69:54:99:5c:38:1b:78:f3:f3:61:e5:6f:2f:d8:e4:0e:55:
         74:47:ea:11:b6:e3:06:68:ad:1a:b0:18:1d:e6:1e:5f:e8:be:
         a5:90:b3:bb:3c:af:12:db:dc:4a:15:de:d6:ec:03:90:2e:c1:
         88:a0:b2:f2:a5:ba:65:3a:67:70:f2:8a:c2:80:69:71:ef:66:
         7b:0e:1c:5e:c9:b8:9e:d1:05:48:c7:a2:4a:56:49:87:4e:16:
         d6:ed:58:25:1a:f8:7e:6f:59:c2:32:19:b9:0b:32:42:31:ee:
         0c:e6:72:94:35:63:66:e0:e7:bb:6b:ed:22:71:89:81:dd:7c:
         5d:47:46:ab:b7:1b:e3:64:00:4d:68:1e:e7:be:bf:10:ac:36:
         b2:e1:3e:56:49:f3:c1:0e:d3:31:f1:32:0a:36:3e:bf:53:6f:
         46:a3:24:bf:fd:46:5c:6d:fa:02:2a:2a:7a:9a:bc:38:d0:22:
         2d:8e:15:be:93:fa:b2:51:c5:65:44:a9:b0:cb:18:01:1b:1b:
         51:e0:7d:76:d7:4f:b8:46:48:c6:7b:85:a2:c7:75:16:90:50:
         65:ca:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----