Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.mft
File:                     BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.mft (raw, json)
Hash identifier:          5MtDbmcbY1gxdvBWlY6yXmwofC+5xXnwkFgFaHSWnaY=
Subject key identifier:   AA:06:B3:A2:F1:DA:22:88:D2:FC:78:15:2B:36:A3:13:E8:97:58:10
Authority key identifier: BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4
Certificate issuer:       /CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
Certificate serial:       0D29BA19B02114418C3F7A70F53B2026AADF087C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.mft
Manifest number:          1D
Signing time:             Sun 14 Apr 2024 20:16:32 +0000
Manifest this update:     Sun 14 Apr 2024 20:11:32 +0000
Manifest next update:     Mon 15 Apr 2024 22:33:32 +0000
Files and hashes:         1: 3132382e3230312e3230342e302f32322d3332203d3e20323636363438.roa (hash: Lb0QyCwm3BdvmQlylF7F6WqqNWOIOt9UwLflKsueQCw=)
                          2: BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.crl (hash: xuh0tBl1oRA3EChdNfFMHPfwYAyrFWPnQUNEuHwqpF8=)
                          3: 323830343a336634303a3a2f33322d313238203d3e20323636363438.roa (hash: 8z5OfVRpCmUPQSgV5JnRCZTg9WHM3UeEnDXnC6g/Q6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:29:ba:19:b0:21:14:41:8c:3f:7a:70:f5:3b:20:26:aa:df:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4
        Validity
            Not Before: Apr 14 20:11:32 2024 GMT
            Not After : Apr 15 22:33:32 2024 GMT
        Subject: CN=AA06B3A2F1DA2288D2FC78152B36A313E8975810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:2d:06:21:af:7f:67:48:e2:59:e4:44:72:
                    51:53:59:51:e7:4e:dc:84:d3:b3:f0:1d:61:48:e1:
                    86:55:e5:13:c2:a9:00:96:d9:51:be:01:f5:f1:4b:
                    2f:b7:7f:e4:fd:3e:4a:fd:1d:95:6e:93:e8:d4:7a:
                    13:ce:18:a2:0c:24:ee:b2:60:64:88:39:e3:86:bc:
                    af:85:75:17:b9:b0:f3:90:95:6c:50:e0:a4:6b:ac:
                    4b:54:fc:06:16:86:45:01:f6:33:48:de:87:47:67:
                    80:0e:a6:8c:ba:34:3e:37:3d:f0:3f:8b:86:f2:d6:
                    d7:d7:3c:ff:2c:8a:d5:bd:16:6a:ff:01:77:fc:32:
                    71:f2:42:e3:19:fd:d6:b1:7d:37:8b:f8:c2:70:db:
                    1f:e2:4a:99:7c:c8:09:1e:5c:9f:0c:60:2c:9d:18:
                    72:8f:fd:cf:41:04:57:89:e1:df:61:5e:de:a9:71:
                    06:da:13:51:21:d4:eb:59:9f:db:e4:73:c1:79:77:
                    af:61:f2:2b:56:6c:81:b7:70:9d:62:72:50:5d:38:
                    77:3f:1a:d6:b1:cf:09:7f:c2:e6:52:01:87:d4:00:
                    d9:c6:00:43:4b:94:e4:1f:29:ca:20:2a:0d:9e:2a:
                    bc:7d:31:4f:f0:80:79:ff:b7:08:9b:ec:2d:34:b3:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:06:B3:A2:F1:DA:22:88:D2:FC:78:15:2B:36:A3:13:E8:97:58:10
            X509v3 Authority Key Identifier:
                keyid:BC:B5:CD:71:9F:47:B3:2C:85:03:9F:C1:EB:6F:7E:DE:D3:CD:D5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/BCB5CD719F47B32C85039FC1EB6F7EDED3CDD5B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:0f:d0:ec:43:9c:b9:e7:42:2c:37:c7:49:db:2b:8f:3f:
         46:5b:b3:1c:d2:7b:97:22:92:00:2f:23:ac:e4:f6:f7:a1:92:
         24:d9:a2:3b:1a:e4:88:8d:44:80:61:08:7a:18:36:91:95:6a:
         a6:a3:bf:8c:04:4e:ee:0c:aa:b1:4b:0c:98:36:c7:4f:ba:54:
         77:3e:5b:da:6b:ee:ae:a4:41:3e:7d:f4:0c:5c:e0:e1:af:01:
         92:a5:84:8d:2d:67:1a:1e:54:ac:76:43:df:bd:e3:09:3b:23:
         43:62:55:35:b3:14:12:3e:2e:6e:d0:ab:51:b7:eb:57:84:f6:
         eb:f5:4a:4a:f8:7e:cf:3a:28:f2:91:3e:7b:ba:32:43:f0:8f:
         62:8a:90:5a:5b:2e:f1:c6:1b:5b:8c:b8:ef:bf:46:1c:c4:49:
         a7:9a:ba:80:37:52:60:c2:29:14:ff:38:ab:ac:eb:4d:48:cc:
         b8:8f:26:ae:b6:39:eb:66:6f:30:dc:e4:0d:b0:31:2a:3b:04:
         f4:f5:96:a4:94:00:0c:c2:99:86:ed:50:a3:65:24:10:d5:0e:
         72:37:c5:f1:ee:bd:fa:04:50:82:e9:d1:32:22:95:b1:30:dc:
         57:31:18:35:8c:5e:6d:bc:e1:85:e0:28:de:7f:b3:f9:a2:f7:
         a6:7b:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----