Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.mft
File:                     D5C6AFEA72EACE21CAF8211FBF519D375CB01702.mft (raw, json)
Hash identifier:          2RAHAoE/cBW0MrOZ2Qctbtxh9el52hd/nyVj/RmPNQo=
Subject key identifier:   15:27:90:C4:25:98:83:42:35:B5:32:C0:4A:C6:F4:95:1F:EC:B1:66
Authority key identifier: D5:C6:AF:EA:72:EA:CE:21:CA:F8:21:1F:BF:51:9D:37:5C:B0:17:02
Certificate issuer:       /CN=D5C6AFEA72EACE21CAF8211FBF519D375CB01702
Certificate serial:       49107B0516B330DD291BF7CA5EB0BEDB4B8B9D03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.mft
Manifest number:          36
Signing time:             Mon 15 Apr 2024 07:15:17 +0000
Manifest this update:     Mon 15 Apr 2024 07:10:17 +0000
Manifest next update:     Tue 16 Apr 2024 11:04:17 +0000
Files and hashes:         1: D5C6AFEA72EACE21CAF8211FBF519D375CB01702.crl (hash: lzxWEc7dKraKneAAUuQQ3gFmaERYEM+Y8AkptBkb9tk=)
                          2: 323830343a326662303a3a2f33322d3438203d3e20323634393036.roa (hash: Ulv9+g8olUqlXQg0dKcLfWStXQHZNB96Yv1Iidr8Qps=)
                          3: 3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa (hash: bOWXQhIrH1q/Lc6FcSqBc1o8BHe7S7SmNH6CR0IdCrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:10:7b:05:16:b3:30:dd:29:1b:f7:ca:5e:b0:be:db:4b:8b:9d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5C6AFEA72EACE21CAF8211FBF519D375CB01702
        Validity
            Not Before: Apr 15 07:10:17 2024 GMT
            Not After : Apr 16 11:04:17 2024 GMT
        Subject: CN=152790C42598834235B532C04AC6F4951FECB166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:6f:cf:e2:b6:34:b9:20:8e:2f:f9:91:2f:
                    e8:a0:80:97:25:ba:ce:83:c6:50:1b:68:ed:27:1c:
                    c9:c1:14:e1:b8:76:53:19:00:4c:71:ae:a0:97:f4:
                    f2:ec:e4:bf:5d:41:d4:2b:51:88:2c:4f:ef:46:3c:
                    b5:4c:42:e4:6e:13:80:02:45:01:59:dd:d7:e8:8f:
                    94:f1:2e:90:2a:e8:41:2a:5a:e2:67:bc:10:4e:14:
                    70:d4:a2:c7:27:2a:c9:54:03:2a:89:66:b8:70:9e:
                    b3:d3:dd:1a:dd:d3:49:28:49:a7:d4:fb:e8:45:b9:
                    34:b5:78:3f:68:b0:0e:f4:6c:29:22:db:72:41:ce:
                    74:6a:56:15:f2:2a:e3:52:1a:15:e7:0a:4e:38:91:
                    c4:25:c7:89:28:75:27:82:c8:8d:21:31:15:e1:d6:
                    2f:79:0d:87:67:ec:92:2b:22:1d:af:14:ee:ec:44:
                    f3:87:8e:3c:c8:0e:91:68:bf:88:1f:f6:7f:11:08:
                    be:81:53:17:28:4a:ac:97:7f:a0:89:d7:e8:a9:b1:
                    17:4f:90:95:06:70:e5:b3:df:a5:12:25:f4:1d:be:
                    d7:d8:4a:4a:6a:de:9a:00:e5:08:10:ae:17:f5:7a:
                    1d:97:ea:44:41:f3:be:1c:23:6d:0e:56:ea:2a:d6:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:90:C4:25:98:83:42:35:B5:32:C0:4A:C6:F4:95:1F:EC:B1:66
            X509v3 Authority Key Identifier:
                keyid:D5:C6:AF:EA:72:EA:CE:21:CA:F8:21:1F:BF:51:9D:37:5C:B0:17:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/0/D5C6AFEA72EACE21CAF8211FBF519D375CB01702.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:60:d9:58:46:2a:f3:9f:fd:13:1a:97:ff:d0:a5:17:26:b3:
         be:24:bc:bd:15:d6:b9:da:25:e5:1d:8c:be:3b:70:36:bd:d3:
         9c:23:8e:48:b0:4b:08:41:ee:7e:9b:cd:cb:90:29:7b:26:2a:
         7a:eb:33:1a:53:0f:f2:f9:7e:0c:ae:57:c8:aa:da:d9:f0:c0:
         de:55:a8:d5:30:dd:9a:86:7a:5f:2a:d6:59:ce:1a:34:77:8d:
         fb:03:1e:4e:f2:5a:86:d1:be:96:99:9c:83:78:7e:04:d2:bc:
         a2:48:7b:95:0f:87:05:b4:e7:70:ec:1c:b4:02:6c:5f:07:de:
         a6:45:66:6e:b3:a4:a2:bc:c5:0e:d8:55:9c:ef:ba:31:d0:c8:
         a3:20:19:e2:ed:b1:df:b1:3a:89:60:c1:3a:2a:d1:24:0a:91:
         3f:c6:b7:04:f0:84:c2:d3:92:86:13:b3:a0:99:47:4d:06:9e:
         71:a4:23:a4:31:df:d5:4f:59:e1:d8:09:82:c5:38:6c:2d:3e:
         6c:b9:07:46:06:a3:b5:73:cf:1a:ff:39:65:ec:72:25:65:36:
         23:3f:52:7f:2a:72:4a:30:df:c9:e9:c3:58:4d:af:34:2a:ce:
         7a:1f:a8:de:81:25:b2:ec:11:29:5f:61:c4:5c:8f:d6:87:27:
         d0:8e:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----