Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/0/D0C391A530D1E74FC005E0DFE4FD82FC732714EE.mft
File:                     D0C391A530D1E74FC005E0DFE4FD82FC732714EE.mft (raw, json)
Hash identifier:          b8pK2+Qsn4LpfwWF4FN7PCB+uwkFJ14tuZro5cowcTI=
Subject key identifier:   20:FF:0C:D7:DA:55:85:B6:AB:91:C8:EF:92:17:FA:D3:37:A3:5B:16
Authority key identifier: D0:C3:91:A5:30:D1:E7:4F:C0:05:E0:DF:E4:FD:82:FC:73:27:14:EE
Certificate issuer:       /CN=D0C391A530D1E74FC005E0DFE4FD82FC732714EE
Certificate serial:       1B2732954DCB60FCF381580B7C18132E5AE6700A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0C391A530D1E74FC005E0DFE4FD82FC732714EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/0/D0C391A530D1E74FC005E0DFE4FD82FC732714EE.mft
Manifest number:          7F
Signing time:             Sun 14 Apr 2024 19:53:33 +0000
Manifest this update:     Sun 14 Apr 2024 19:48:33 +0000
Manifest next update:     Mon 15 Apr 2024 20:57:33 +0000
Files and hashes:         1: D0C391A530D1E74FC005E0DFE4FD82FC732714EE.crl (hash: OY44j7fSytwoKv4MGUF5dM8dDsqXnQmY9AXZyER7Ucg=)
                          2: 323830343a383631303a3a2f33322d3438203d3e20323732363138.roa (hash: KD4PCwsHMipZwnLIX27xKT9wVG615wJG46bAuv9x/K0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:27:32:95:4d:cb:60:fc:f3:81:58:0b:7c:18:13:2e:5a:e6:70:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C391A530D1E74FC005E0DFE4FD82FC732714EE
        Validity
            Not Before: Apr 14 19:48:33 2024 GMT
            Not After : Apr 15 20:57:33 2024 GMT
        Subject: CN=20FF0CD7DA5585B6AB91C8EF9217FAD337A35B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:34:0e:49:ac:99:3e:a0:57:4a:43:ba:c2:
                    81:13:4d:15:a8:78:be:ff:93:31:0f:9d:9b:3b:4e:
                    4f:42:a7:83:53:40:03:11:93:d9:a8:1b:b9:c4:99:
                    e1:26:32:17:96:2d:cb:82:2b:ad:85:4e:ad:c5:65:
                    cc:f2:a1:9e:2b:19:29:7f:f2:70:c2:c3:87:22:ca:
                    1e:85:74:d9:1c:dc:52:95:25:9c:9b:d1:1c:e5:75:
                    66:ec:9b:4e:f0:19:e0:e4:45:66:cd:31:9e:04:4c:
                    d7:6a:c6:db:d6:f8:34:8c:d5:2b:3d:75:05:eb:0a:
                    c2:9b:c6:c6:ff:c2:ea:3d:a4:27:f1:e5:66:cb:7b:
                    ef:d2:13:5d:f1:99:0b:72:7a:25:9b:ae:61:be:d0:
                    14:f3:f3:5d:02:30:e2:a5:9e:dc:88:5a:89:ee:f5:
                    99:bd:0b:67:88:f8:10:38:5b:96:a7:50:18:c4:e9:
                    34:54:4e:10:3b:e1:46:3b:4f:bc:74:08:5c:59:bd:
                    81:ec:ca:09:a4:71:a4:e5:98:55:e9:69:47:a0:ee:
                    8a:6d:ed:6c:eb:95:c7:29:ec:c0:ce:46:b9:ee:34:
                    06:a8:fd:52:2a:11:1f:d9:28:58:dd:26:34:8c:15:
                    b3:a5:d8:2c:2a:cb:a7:32:7a:0d:f1:87:5a:91:b2:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:0C:D7:DA:55:85:B6:AB:91:C8:EF:92:17:FA:D3:37:A3:5B:16
            X509v3 Authority Key Identifier:
                keyid:D0:C3:91:A5:30:D1:E7:4F:C0:05:E0:DF:E4:FD:82:FC:73:27:14:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/0/D0C391A530D1E74FC005E0DFE4FD82FC732714EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0C391A530D1E74FC005E0DFE4FD82FC732714EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/0/D0C391A530D1E74FC005E0DFE4FD82FC732714EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:f6:81:4c:f5:97:bf:30:8b:43:6f:f8:0e:e4:89:9e:44:
         9d:f5:5f:2f:28:96:e1:28:db:23:12:9f:db:0b:24:95:72:dc:
         d4:92:f8:42:85:a2:24:4c:7b:5d:cb:8b:f3:34:5b:39:3f:d0:
         50:7c:ab:84:21:6d:11:7b:78:f6:cd:ca:87:02:08:fa:3a:a1:
         6a:3b:c1:83:05:c4:6c:56:dc:da:37:20:99:35:f7:fa:cd:bb:
         6e:bb:8d:63:76:7d:1e:3c:bb:2c:c0:52:1d:93:01:3a:0a:00:
         af:39:1d:a5:1d:bc:f7:a9:17:b8:c1:4b:11:98:f1:cb:00:07:
         07:73:c1:69:8d:73:07:66:2d:d8:8d:19:d7:ce:08:05:58:f3:
         0f:66:f9:bd:d4:11:44:3b:fd:76:93:d4:c2:a9:f3:12:fb:4a:
         34:50:62:6c:b5:13:22:ac:7d:e6:b4:8e:e2:39:22:de:4a:21:
         f8:52:6a:1b:51:52:ba:62:4a:b8:80:d8:ae:11:65:b3:db:3a:
         85:65:75:fa:20:1a:6e:ff:ba:91:07:b9:2e:42:87:40:9d:36:
         27:c7:43:9f:d8:40:62:10:99:37:aa:7b:7d:7d:fd:08:8c:9a:
         c4:89:ea:dd:ce:22:20:b5:8e:cd:94:72:05:61:2e:c6:c0:0a:
         93:f0:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----