Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft
File:                     E43F929F1A53246574F0400683594164F34379B9.mft (raw, json)
Hash identifier:          83u5zNRqweOCCCCR3hkPbM9gL3OupjIWqTENpXu74J8=
Subject key identifier:   3F:0F:8E:F7:AC:0E:91:46:EC:FB:D9:41:F1:B1:91:4D:5A:8A:EE:FD
Authority key identifier: E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9
Certificate issuer:       /CN=E43F929F1A53246574F0400683594164F34379B9
Certificate serial:       6227F6375C0D7730499C794DAE6D29EDEA559E97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft
Manifest number:          AF
Signing time:             Tue 13 Aug 2024 22:41:57 +0000
Manifest this update:     Tue 13 Aug 2024 22:36:57 +0000
Manifest next update:     Wed 14 Aug 2024 23:20:57 +0000
Files and hashes:         1: 323830343a346638633a3a2f33322d3438203d3e20323638333333.roa (hash: RbFZmU5QSte/rsxPgSXyPEX6HMdrynehH7FB9tVRCJg=)
                          2: E43F929F1A53246574F0400683594164F34379B9.crl (hash: ZEZiZb39998sDyrRXpa/I9EvabuQs5jVLvr49fHf9LU=)
                          3: 34352e3233372e3235322e302f32322d3234203d3e20323638333333.roa (hash: EyFOUIl8im+yGID6QoOH1H7Kg0MLPJglij+2yI73N5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:27:f6:37:5c:0d:77:30:49:9c:79:4d:ae:6d:29:ed:ea:55:9e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43F929F1A53246574F0400683594164F34379B9
        Validity
            Not Before: Aug 13 22:36:57 2024 GMT
            Not After : Aug 14 23:20:57 2024 GMT
        Subject: CN=3F0F8EF7AC0E9146ECFBD941F1B1914D5A8AEEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:58:b4:36:56:f1:8f:82:8c:8f:e0:be:93:
                    b1:b7:73:bd:e0:57:ba:7a:e0:c4:1a:6b:ad:21:95:
                    d5:a1:16:11:c7:0e:c5:00:a8:8e:5d:88:5f:ee:02:
                    fb:32:04:db:c8:28:93:fb:c3:af:a8:69:53:4e:b7:
                    de:fb:53:52:12:44:a9:6a:12:e1:c2:d0:ae:81:5f:
                    e0:57:c3:e2:4c:ba:d9:23:9f:2d:36:45:14:a2:9f:
                    3e:48:45:ba:11:16:01:fc:96:9c:6c:c9:d3:4f:34:
                    02:69:73:98:c3:bd:52:05:16:a9:01:01:8a:8b:c5:
                    cd:ee:bd:55:8e:57:94:57:e1:f5:68:db:d1:f6:b1:
                    1e:e4:03:29:f1:7c:cd:05:78:1e:0b:1e:ac:65:e6:
                    31:52:44:95:f2:c0:ce:e3:d2:98:20:c1:54:9a:4c:
                    31:11:2f:99:7a:1d:b4:d7:6c:ae:93:f1:1e:cc:cd:
                    a8:48:d5:b7:47:9e:6e:8a:02:86:c5:60:4a:01:91:
                    21:52:f1:7c:89:be:24:a6:d3:70:e3:55:af:38:2a:
                    d9:64:bf:57:64:61:b0:6a:20:fe:a3:48:15:d5:34:
                    1c:e0:61:7d:0e:c1:a9:05:1a:c2:a0:70:5b:c3:de:
                    87:f3:87:64:36:0b:4e:b4:16:b4:8d:ef:45:89:d7:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0F:8E:F7:AC:0E:91:46:EC:FB:D9:41:F1:B1:91:4D:5A:8A:EE:FD
            X509v3 Authority Key Identifier:
                keyid:E4:3F:92:9F:1A:53:24:65:74:F0:40:06:83:59:41:64:F3:43:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43F929F1A53246574F0400683594164F34379B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9aCi3nMpixxXTMU4NsZKzWZaV391y7HVCeuCNBMMRHev/1/E43F929F1A53246574F0400683594164F34379B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:98:f8:d4:4f:37:aa:90:bd:03:d9:0f:34:44:ba:58:af:7a:
         dd:9b:0c:d8:18:dc:c4:04:6b:f1:b8:46:d8:0e:33:68:cf:89:
         09:08:49:e0:c3:78:2c:f5:01:ca:4c:37:ca:24:20:b0:ae:cc:
         c0:28:5e:b6:47:96:ba:55:ea:76:37:06:4c:2d:7d:5c:2b:56:
         73:b6:71:9d:66:82:3e:02:ac:db:ac:a1:47:d0:a3:de:72:8d:
         73:04:f7:eb:be:f5:f2:b2:66:ab:c7:c4:8d:a5:82:6d:c9:2e:
         84:d6:ac:80:be:67:b6:c6:d6:88:5b:eb:57:dc:d5:4d:e1:52:
         cb:2d:67:a9:75:92:c0:34:77:52:75:1d:a3:93:86:92:24:7e:
         ba:71:26:7b:59:df:bc:df:9a:ae:3e:d7:e7:79:c5:a8:95:c1:
         a8:cb:fb:8d:a8:ee:75:ba:70:9c:b1:37:81:3c:da:02:19:d9:
         60:2b:f6:3f:1d:97:97:e3:83:37:d3:88:81:65:07:62:eb:bb:
         b4:59:5a:78:23:9d:47:ef:50:5d:0b:1f:78:79:84:29:e1:53:
         1f:10:08:d7:49:a0:0c:9a:e7:e4:82:2f:65:57:93:0a:c8:bf:
         c4:d5:03:f8:f3:2a:2b:60:22:4c:9e:05:8c:7a:e1:de:12:b5:
         66:4f:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----