Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.mft
File:                     9361649E2A9CD6320D5D128742E2688A2D4E81F3.mft (raw, json)
Hash identifier:          6B/7mPw9mxj2QCSFIWZFHnFklhVNw5HQUVydLJfXR8I=
Subject key identifier:   E8:31:F0:A2:57:6C:93:0A:55:B8:81:AC:E3:15:90:FE:32:0F:7C:9C
Authority key identifier: 93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3
Certificate issuer:       /CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
Certificate serial:       237F7D552B5E22F25C6399AB592E4025B173CD37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.mft
Manifest number:          0328
Signing time:             Sun 14 Apr 2024 23:16:23 +0000
Manifest this update:     Sun 14 Apr 2024 23:11:23 +0000
Manifest next update:     Tue 16 Apr 2024 01:22:23 +0000
Files and hashes:         1: 9361649E2A9CD6320D5D128742E2688A2D4E81F3.crl (hash: t7WNYF1btotffn2zQUAi8bjT5MkdLKIVL+T32mhedtQ=)
                          2: 323830343a346437633a3a2f33322d3333203d3e20323638313939.roa (hash: QGlInNEz747b18Xza411sCTIOAEDbr3LNNJw9fH6uho=)
                          3: 34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa (hash: I5731I8zlSroElkdPIJGZuPDOF1UaUudumtSmcUUtCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7f:7d:55:2b:5e:22:f2:5c:63:99:ab:59:2e:40:25:b1:73:cd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
        Validity
            Not Before: Apr 14 23:11:23 2024 GMT
            Not After : Apr 16 01:22:23 2024 GMT
        Subject: CN=E831F0A2576C930A55B881ACE31590FE320F7C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:69:86:c1:86:6d:45:b0:cf:4a:32:75:a0:
                    25:e6:0d:ff:0a:3c:b5:96:47:f0:26:28:ab:4d:9d:
                    f4:db:8a:1c:23:e6:5f:98:4a:8b:eb:85:79:2b:1d:
                    c7:71:b9:89:28:fc:08:55:ab:c7:3d:02:b4:5f:d4:
                    c6:aa:6d:52:ea:e6:7b:5c:29:f8:1e:8a:bf:8a:02:
                    38:ad:9b:87:e5:83:bd:33:62:84:02:74:06:e8:1a:
                    36:45:03:9d:ce:81:2e:eb:98:dd:62:95:f3:04:ee:
                    d9:32:fd:d9:cc:fe:ff:c5:9c:66:df:63:c5:47:12:
                    86:3f:a7:ab:3c:98:e8:c9:de:85:1c:b8:2e:94:f5:
                    f3:72:ab:ac:47:2b:17:4c:9a:57:69:88:f3:41:42:
                    1a:bf:25:39:f9:87:53:5a:bd:7f:ad:ae:e7:41:48:
                    3d:fc:6f:a4:b4:0e:6c:d4:7a:d0:82:a1:a6:9a:4d:
                    08:29:de:1a:ca:f5:6b:17:4a:aa:e0:ad:75:91:9d:
                    36:62:54:bd:e0:25:91:6e:2b:f2:19:ae:a7:18:ce:
                    0d:8c:3f:3c:df:43:25:f8:ba:61:9c:77:f3:53:6a:
                    66:33:16:61:01:8c:64:21:64:72:f6:8a:1d:bd:c8:
                    60:14:b3:92:9e:e2:7d:2a:b2:00:aa:75:b5:f4:01:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:F0:A2:57:6C:93:0A:55:B8:81:AC:E3:15:90:FE:32:0F:7C:9C
            X509v3 Authority Key Identifier:
                keyid:93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:5d:4e:4a:13:bc:e6:e5:d0:c9:7e:6a:b5:a8:e4:4b:e2:
         5c:46:d5:f2:d8:50:cb:f2:c4:cb:ac:e4:06:23:7c:06:75:e2:
         4c:44:57:e5:c2:3b:11:19:fd:0e:c8:8a:ba:2a:d5:b6:78:0b:
         9a:e6:d9:3a:73:20:26:af:60:32:ee:32:7f:a8:f1:e3:b3:92:
         aa:79:92:1f:34:a3:54:e3:ee:cf:2a:01:21:11:68:df:33:59:
         2a:4a:b5:17:23:1a:33:aa:77:eb:a0:9b:48:1b:78:6b:b2:40:
         80:cd:6e:81:2f:58:78:1b:b7:4a:1b:6a:c4:e4:8e:c7:27:d0:
         22:d5:74:ae:48:d4:fd:18:3f:69:43:43:0f:08:21:0c:d7:89:
         dc:98:52:5e:38:03:97:da:02:fd:f8:06:0a:01:c7:a1:4c:3b:
         d3:93:6d:27:54:eb:30:bf:c1:38:ec:57:6f:26:fb:13:34:e3:
         f1:da:72:09:bc:87:72:89:b2:c2:59:64:3e:7b:6f:db:a9:21:
         27:e8:55:6a:31:fb:bd:aa:35:ed:e2:f0:09:0b:e9:2d:27:77:
         3c:ca:da:9a:5e:65:73:72:cf:90:d0:e1:fc:46:7a:61:ae:a6:
         30:65:16:3c:57:0f:9c:a5:a5:ae:97:f3:16:94:67:1c:48:c0:
         3a:ae:62:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----