Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.mft
File:                     5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.mft (raw, json)
Hash identifier:          XVTbO6FAwZgc2dheHIs+q5NPEwu8N8WIERGHQ18vrnE=
Subject key identifier:   80:80:B5:87:44:9B:C0:E1:91:15:73:3A:B9:FF:91:8C:AA:A3:20:F4
Authority key identifier: 5D:5A:74:35:54:85:EE:B1:AB:04:97:1B:4B:7D:E3:A1:9B:C1:33:4F
Certificate issuer:       /CN=5D5A74355485EEB1AB04971B4B7DE3A19BC1334F
Certificate serial:       5B44013A987FA23E4FD70A500087DF78C3B4286B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.mft
Manifest number:          026A
Signing time:             Mon 15 Apr 2024 01:20:00 +0000
Manifest this update:     Mon 15 Apr 2024 01:15:00 +0000
Manifest next update:     Tue 16 Apr 2024 02:28:00 +0000
Files and hashes:         1: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: qpFVwQnnCuz7CADYbSl2eO8Gm/ATzUYoQHOVl4Fr6Ik=)
                          2: 5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.crl (hash: pf3VdKCqNf87HbGEj9Zktnx0bdxVMFlZqHt57V8wk5E=)
                          3: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: UBP8Px8xZO5Kr4RksptwGJItHQGKjMtN3YkfAnWmiUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:44:01:3a:98:7f:a2:3e:4f:d7:0a:50:00:87:df:78:c3:b4:28:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5A74355485EEB1AB04971B4B7DE3A19BC1334F
        Validity
            Not Before: Apr 15 01:15:00 2024 GMT
            Not After : Apr 16 02:28:00 2024 GMT
        Subject: CN=8080B587449BC0E19115733AB9FF918CAAA320F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:89:1a:a8:41:44:f1:ab:a6:f4:92:b6:73:
                    10:60:cc:92:c8:0c:85:e4:3a:6d:36:71:4b:f9:f4:
                    58:83:f3:ea:1c:74:15:69:2c:78:01:e2:40:90:7a:
                    15:8d:91:be:02:73:e6:01:55:3a:65:e3:0e:0d:02:
                    c7:b4:3b:8c:61:bc:a0:6a:56:37:a8:e8:f3:c5:29:
                    a8:bc:f8:8e:4b:be:9b:56:3b:5a:fe:72:a2:e0:3d:
                    ca:2d:cc:10:d7:95:77:24:df:84:fd:14:f5:d8:65:
                    25:bd:c3:b1:ab:72:f4:80:ff:90:09:ad:4c:de:6c:
                    a0:b6:71:12:e7:b9:5b:a4:e9:9e:e6:cc:d7:7b:ce:
                    a8:85:83:5b:b1:33:4a:80:60:9b:90:6d:fd:78:25:
                    bc:f0:3e:46:58:e6:c9:f0:4f:80:2e:1f:16:f1:90:
                    03:c1:cd:86:76:37:d4:f1:a9:10:ac:fb:94:d2:eb:
                    eb:fc:98:c9:06:fb:e5:50:27:e0:49:5f:60:ad:60:
                    a1:c3:a3:f1:75:1d:e9:dd:67:f6:45:0b:20:e4:f3:
                    2a:33:12:4e:fe:a1:b1:d5:5b:ff:74:c6:32:42:99:
                    4d:10:7a:5e:35:40:cc:03:ed:0f:c4:a8:69:43:0d:
                    2c:7f:eb:13:e8:25:d5:7a:1c:68:62:c0:75:10:b6:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:80:B5:87:44:9B:C0:E1:91:15:73:3A:B9:FF:91:8C:AA:A3:20:F4
            X509v3 Authority Key Identifier:
                keyid:5D:5A:74:35:54:85:EE:B1:AB:04:97:1B:4B:7D:E3:A1:9B:C1:33:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:94:d3:fa:93:1c:04:9f:21:d7:47:bd:bf:51:43:57:5e:
         23:bb:a7:a8:25:29:3d:3f:ce:2e:ec:80:2b:f5:1b:ec:4b:b6:
         44:5f:bf:72:41:44:8e:c7:67:2d:72:a9:1a:66:d9:24:df:60:
         5b:1f:33:7f:dc:e4:77:da:35:24:fc:11:81:f8:15:58:c1:7b:
         24:d0:c6:b1:fb:4d:14:fd:2d:1e:87:82:20:1c:2d:f3:09:1c:
         d0:9c:01:be:a8:76:e1:96:b8:6f:e0:22:e9:96:9b:92:db:12:
         06:5c:d7:08:b6:44:ce:6f:e6:ed:78:54:6d:97:6f:dc:18:cd:
         dc:b5:86:b2:50:7e:19:c4:b2:d8:82:2b:5d:03:23:f9:45:21:
         20:35:af:96:8a:5b:5c:d0:c8:25:6f:00:bb:43:57:22:49:6e:
         5f:09:5c:5f:82:38:39:a1:b4:a1:a2:16:83:08:e4:d6:2f:5d:
         93:11:cf:5f:11:06:06:ca:a3:13:e3:38:cc:c7:6a:ef:43:bb:
         12:41:85:94:a8:55:e4:53:0d:c3:f3:65:ed:b1:13:cb:05:d3:
         23:06:7c:45:83:db:b7:a2:23:36:36:96:d1:33:e0:bb:47:d2:
         15:90:1a:e8:a4:fe:5a:96:a0:7e:52:3c:e6:20:cb:33:45:62:
         95:67:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----