Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
File:                     DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft (raw, json)
Hash identifier:          6oQ5Er0v61PtnOm4alcFsiWYJlCLjEnlHsTfMn9TRqU=
Subject key identifier:   4B:CA:6C:AC:E5:1C:94:E2:20:F0:B8:50:3F:B4:B4:BD:51:B2:08:50
Authority key identifier: DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA
Certificate issuer:       /CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
Certificate serial:       60DB9E7286B12FC8B847DF4CE095442E4ABFF7D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
Manifest number:          70
Signing time:             Wed 14 Feb 2024 12:14:51 +0000
Manifest this update:     Wed 14 Feb 2024 12:09:51 +0000
Manifest next update:     Thu 15 Feb 2024 14:08:51 +0000
Files and hashes:         1: 323830343a336561633a3a2f33322d3438203d3e20323636363134.roa (hash: uEW08ygPlyVJ73eVn53sRlISxCIQcGx6V0O2w17b1sI=)
                          2: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: N5375BBGruYe0yNGataB6svGdD1eytxScM6Fr6gD5rk=)
                          3: DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.crl (hash: lBvQs8OYtdYIzZzLX7tbVKiAkN5XSXyZX076PoIiIkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:db:9e:72:86:b1:2f:c8:b8:47:df:4c:e0:95:44:2e:4a:bf:f7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
        Validity
            Not Before: Feb 14 12:09:51 2024 GMT
            Not After : Feb 15 14:08:51 2024 GMT
        Subject: CN=4BCA6CACE51C94E220F0B8503FB4B4BD51B20850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:30:66:cf:74:09:66:f8:44:2a:2a:2e:cc:
                    1c:6d:ad:16:39:83:d7:0d:b4:65:6c:85:29:2c:4f:
                    37:cc:34:d9:40:94:a1:71:ca:e1:a4:9c:61:21:4a:
                    cc:30:5b:4f:ba:04:7d:30:9e:89:98:c9:82:16:65:
                    c1:38:23:5e:40:a1:db:d8:5b:4a:ed:48:11:5c:f3:
                    f3:4c:77:43:8d:f6:dc:88:aa:f1:f2:29:14:ff:d2:
                    3d:d4:c1:b5:60:56:56:87:24:9b:31:85:b0:95:59:
                    e5:23:00:b7:3c:1f:de:d0:5b:98:88:d3:7a:7f:aa:
                    76:b1:a7:fd:9a:ee:fb:f6:74:2e:bb:ca:4e:86:02:
                    c4:7a:e0:a0:4e:7d:26:a6:56:a8:40:44:01:10:34:
                    00:0c:4a:f6:a7:07:c2:55:b7:65:64:ef:54:96:c3:
                    07:df:12:3a:78:e5:11:c7:85:6d:b4:09:67:6b:ba:
                    27:f7:08:63:56:de:5d:d0:d6:a1:b3:44:93:1b:1d:
                    83:54:2d:3f:8b:2e:97:17:48:28:34:5f:e0:45:66:
                    fa:6a:1d:f7:40:46:f6:17:f1:c0:cb:74:6e:af:f3:
                    48:d9:d3:2d:c8:10:84:7c:ff:e0:ca:b5:5a:96:6e:
                    3a:e7:68:de:52:07:c2:73:71:05:dd:c4:df:48:8c:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CA:6C:AC:E5:1C:94:E2:20:F0:B8:50:3F:B4:B4:BD:51:B2:08:50
            X509v3 Authority Key Identifier:
                keyid:DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:64:db:84:98:17:e6:81:5c:c9:5c:5e:11:37:34:bd:62:ee:
         5f:f8:b5:7f:fc:75:2b:e7:e2:d2:16:df:35:9c:22:73:e8:92:
         0c:92:b5:1a:0a:67:e3:56:1d:50:fa:92:b3:f7:e5:cd:02:fe:
         37:d1:00:06:69:80:df:6f:c9:1d:1b:b7:cd:ba:c4:c8:e2:53:
         45:5e:49:75:92:49:80:5f:62:d3:82:ac:0a:fa:4c:9d:bd:f2:
         ce:e4:4e:bc:63:a3:c6:34:2e:d1:f5:1c:fd:a3:ff:a9:d6:18:
         b7:a5:84:5b:70:98:b0:d3:99:2a:30:0a:98:0d:ca:df:2f:40:
         e8:6d:85:14:56:56:e5:fc:b0:ba:14:b3:d2:c6:a6:0c:64:de:
         f5:33:b8:aa:77:6b:7e:86:62:73:8d:4a:08:a9:f3:78:ee:12:
         dd:4d:a2:5a:ad:f0:df:c0:0c:6c:2c:a2:45:00:2a:59:b3:cc:
         89:da:11:68:e8:4c:2e:7c:3f:f2:c1:f0:84:b5:f4:22:cc:82:
         ec:83:94:69:77:b1:b8:f9:64:96:1b:06:b6:8d:60:83:27:37:
         76:70:07:63:33:8c:62:1d:25:60:be:90:e8:e8:d4:ea:56:4f:
         04:5a:da:97:b1:a2:15:88:90:1a:e0:24:d3:c0:26:19:91:aa:
         ab:dd:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----