Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.mft
File:                     E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.mft (raw, json)
Hash identifier:          yIaSKUxg0lsLBU5P2JY6PrgmI0toW0vVKa86rTROWBg=
Subject key identifier:   DD:85:52:9A:9F:11:57:52:BC:BE:75:71:8F:5C:EF:55:6C:2F:63:D3
Authority key identifier: E3:84:2E:2A:AD:1E:39:3B:5C:B7:57:59:B6:45:8B:7E:CA:1A:3B:7B
Certificate issuer:       /CN=E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B
Certificate serial:       18D2519AC25E7E88397B38562EA16724963947B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.mft
Manifest number:          6D
Signing time:             Mon 15 Apr 2024 07:31:16 +0000
Manifest this update:     Mon 15 Apr 2024 07:26:16 +0000
Manifest next update:     Tue 16 Apr 2024 08:26:16 +0000
Files and hashes:         1: 323830343a333838383a3a2f33322d3332203d3e20323636343834.roa (hash: Gedun8ZmMnYTwllH33cnXQVvK2Bkctu+WqolJVJcrqQ=)
                          2: E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.crl (hash: lSaRAqUqB18mes81R49HZA3nJtBd7ZjeUq9dggOUWyQ=)
                          3: 3137302e38332e3136382e302f32322d3234203d3e20323636343834.roa (hash: hgYoftdJCLt4HbbJ6j/6KaEkGYQUP3zuxHgCe02/o7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d2:51:9a:c2:5e:7e:88:39:7b:38:56:2e:a1:67:24:96:39:47:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B
        Validity
            Not Before: Apr 15 07:26:16 2024 GMT
            Not After : Apr 16 08:26:16 2024 GMT
        Subject: CN=DD85529A9F115752BCBE75718F5CEF556C2F63D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:c6:d7:c3:e0:66:d0:2b:78:58:d6:3c:09:
                    c0:d7:2e:b2:9c:08:2c:da:ef:60:7a:68:24:c9:1a:
                    22:61:12:1a:d8:04:7a:0a:67:87:50:ed:58:d3:1d:
                    79:88:d4:0b:ad:ce:41:f7:e9:b0:91:e7:17:5a:5d:
                    86:37:a3:95:fe:0e:7b:b8:a9:1a:ea:3c:15:5e:78:
                    bc:10:07:2b:4c:7d:ef:3c:4e:80:42:db:22:9d:8b:
                    b0:ab:fc:36:d7:3c:d8:71:6d:57:81:28:8b:d0:b2:
                    fb:a7:e6:90:fc:58:cc:84:56:54:93:31:ab:ec:5a:
                    04:bb:aa:5f:20:d7:b7:54:cb:c7:11:f7:1b:70:db:
                    78:28:a6:dd:21:12:ee:99:bf:db:7a:17:cb:60:d4:
                    c6:8c:cb:99:fc:7d:03:92:9d:c8:4d:45:17:36:4d:
                    66:1a:85:a4:24:a4:e4:56:97:5f:a0:33:6f:1b:8e:
                    c0:95:35:f3:af:0d:40:f7:f3:35:07:be:1f:0d:ad:
                    8a:17:7c:6d:9d:2e:cf:d2:46:8c:e3:23:e9:eb:1a:
                    51:ca:d9:ae:8f:55:f2:b5:3c:7e:1b:5f:ce:10:62:
                    39:fa:ee:df:d1:ca:f8:ec:be:b3:d2:6e:d0:60:33:
                    39:a2:b7:d5:f1:15:15:93:50:41:8b:65:2f:9c:66:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:85:52:9A:9F:11:57:52:BC:BE:75:71:8F:5C:EF:55:6C:2F:63:D3
            X509v3 Authority Key Identifier:
                keyid:E3:84:2E:2A:AD:1E:39:3B:5C:B7:57:59:B6:45:8B:7E:CA:1A:3B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/0/E3842E2AAD1E393B5CB75759B6458B7ECA1A3B7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:11:23:5f:1c:0d:80:6f:a6:a9:3a:48:ce:83:df:61:3f:04:
         73:9b:07:34:5d:66:b7:8b:7a:76:f6:51:2a:69:c6:b5:7d:f8:
         0d:b6:2e:ae:25:87:4e:3a:e6:08:65:ef:c2:7d:9a:b2:fa:4e:
         c5:5c:aa:42:cc:71:43:b8:90:1f:94:68:94:28:6d:59:3c:4d:
         f8:dd:ed:af:5c:d8:52:d4:00:3b:b7:5a:45:f7:54:53:f1:e2:
         07:42:a8:d2:32:3f:62:24:79:f7:10:10:ca:51:76:79:be:ce:
         4e:4f:ce:2a:31:0e:d5:db:e8:dc:36:15:6e:4f:6f:a5:c2:1a:
         1e:bf:c0:8b:22:da:58:7c:1a:80:90:53:60:07:88:e6:19:86:
         d5:6d:ba:89:cb:cc:d3:14:ea:d6:55:0b:b2:8e:a7:04:71:31:
         16:83:fc:ae:47:5d:99:4d:0f:8d:c2:db:f3:b6:9c:2a:3c:76:
         f6:5f:85:65:0a:42:04:62:a8:7e:05:1b:22:ee:29:62:cb:df:
         b6:9b:35:47:b6:d8:08:b3:a4:5c:57:3f:65:0c:2e:38:08:c9:
         7e:c6:e9:f1:2c:14:ca:e1:d1:5e:7e:a4:ef:23:a3:a4:ab:06:
         7f:66:98:91:ee:51:be:12:52:01:ff:e1:3b:21:26:a6:6c:7e:
         63:7b:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----