Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.mft
File:                     2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.mft (raw, json)
Hash identifier:          qNkV0rq1eRv/ZqItQRIAwFEZd+ShoLhBm8aPL9W24QA=
Subject key identifier:   B6:E2:F1:01:E0:D3:4C:97:7A:95:32:DF:90:71:6E:AC:62:DF:3F:52
Authority key identifier: 2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0
Certificate issuer:       /CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
Certificate serial:       758AD401F65E48FC107BD9EC58553E9CB493A3D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.mft
Manifest number:          020D
Signing time:             Sun 14 Apr 2024 21:04:04 +0000
Manifest this update:     Sun 14 Apr 2024 20:59:04 +0000
Manifest next update:     Tue 16 Apr 2024 00:23:04 +0000
Files and hashes:         1: 34352e3137312e3134302e302f32322d3234203d3e20323638373938.roa (hash: O79h39HyOqeVzuFrErJ5+YExgAulyTSo1V5eC1k6rks=)
                          2: 323830343a356164303a3a2f33322d3438203d3e20323638373938.roa (hash: O6JkXEjGFjbo+cR6BZonBkDdRKGweS+y5XhZSDroAP4=)
                          3: 2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.crl (hash: Y4q6+927HaeNXinZIVfcOibs+7zd4yhFbX7HJNqrBfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:d4:01:f6:5e:48:fc:10:7b:d9:ec:58:55:3e:9c:b4:93:a3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
        Validity
            Not Before: Apr 14 20:59:04 2024 GMT
            Not After : Apr 16 00:23:04 2024 GMT
        Subject: CN=B6E2F101E0D34C977A9532DF90716EAC62DF3F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:99:74:43:80:bd:14:7c:ec:f8:9f:ae:77:
                    c8:ad:33:74:a5:e1:d7:c7:53:29:e4:dd:e6:cf:89:
                    10:ba:7e:1c:85:03:a3:31:97:7f:61:e1:67:a2:f7:
                    32:ea:35:ef:c0:03:3b:b0:95:08:0a:21:87:67:66:
                    c5:de:a9:ba:19:03:2b:04:d0:bc:81:45:6d:35:32:
                    ce:f9:d7:8f:47:0b:12:a5:2d:4e:d4:34:4e:2c:4e:
                    38:11:75:8b:3f:7a:4f:ed:33:9e:c4:72:e7:4c:87:
                    bb:68:8a:23:ed:a0:62:62:c5:25:df:17:48:24:16:
                    a1:43:5e:ff:84:ff:3d:ab:d9:b0:a7:91:c0:a2:05:
                    3b:23:e5:07:b3:3f:1c:2f:1d:e4:ee:5c:0c:53:db:
                    05:e1:f2:60:3c:82:b7:af:da:59:20:51:50:c7:cf:
                    e0:e4:c9:99:24:0c:79:5e:b5:54:c5:a6:35:d7:79:
                    71:12:68:8e:b4:f5:7d:a6:64:e1:4c:ae:54:e5:70:
                    2a:d1:4e:c1:eb:ce:7a:61:1e:a0:ac:eb:3c:4c:6b:
                    70:ee:58:e8:af:ad:8b:74:2e:96:10:1d:f1:e5:41:
                    3d:a5:37:4b:ac:ef:eb:dd:bc:9a:6c:d5:77:72:09:
                    43:50:9f:ae:8a:10:64:6f:02:5a:b5:ed:a1:39:3a:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E2:F1:01:E0:D3:4C:97:7A:95:32:DF:90:71:6E:AC:62:DF:3F:52
            X509v3 Authority Key Identifier:
                keyid:2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:67:83:2d:3e:aa:bd:dc:39:a2:1f:42:f4:c1:ad:61:b4:
         bc:d6:d2:77:7b:bd:2b:70:42:1e:4f:d1:97:2b:7e:b0:9b:51:
         ee:87:37:28:5a:af:59:38:43:63:d6:ca:a3:cb:b9:82:cb:72:
         d4:d4:77:2e:35:a5:2c:2b:e5:0e:e2:47:2c:9e:94:21:3a:ea:
         25:6d:71:b1:02:c4:a8:0f:99:41:4a:d1:9b:73:6b:73:4d:23:
         cc:78:47:e9:c7:a1:e8:62:4f:36:20:3a:a6:6a:b0:45:5b:ec:
         3f:1a:30:0f:93:6d:01:ca:cd:c1:38:21:c9:76:99:01:ee:5d:
         76:1e:e5:1d:0a:4b:8c:90:15:16:61:e4:30:9d:48:55:cf:82:
         10:03:79:6f:91:ba:fc:13:28:86:46:14:f2:19:41:9b:a5:5b:
         24:62:d9:d8:86:77:ce:0f:22:2b:4d:5b:52:6c:b5:5f:cb:b9:
         cd:d2:ad:b2:b5:7e:82:a2:06:4f:68:0e:cc:d3:14:ba:b6:fc:
         01:e7:66:09:d1:7d:64:e0:a1:37:cd:45:e0:91:0c:57:70:8c:
         d8:7e:f2:77:65:fe:5d:26:80:27:bc:c5:48:b8:41:60:ad:12:
         91:b6:04:3a:80:42:e0:fc:c7:f1:91:c4:86:92:e6:53:dc:e5:
         09:a9:ac:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----