Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.mft
File:                     B5C41D258314BEAD112B53343A51D3ED73995B11.mft (raw, json)
Hash identifier:          sGKAr4zXsmrNx3DuZophxASp2j1U8iErCqcOyn+lRQg=
Subject key identifier:   7E:A1:18:34:15:D4:FA:A5:CB:EB:48:09:A6:E9:FC:12:E3:A8:27:D1
Authority key identifier: B5:C4:1D:25:83:14:BE:AD:11:2B:53:34:3A:51:D3:ED:73:99:5B:11
Certificate issuer:       /CN=B5C41D258314BEAD112B53343A51D3ED73995B11
Certificate serial:       3FEBBCF24378FFA67C3147F4B5E7F7646DCA7741
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5C41D258314BEAD112B53343A51D3ED73995B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.mft
Manifest number:          01D4
Signing time:             Mon 15 Apr 2024 10:08:30 +0000
Manifest this update:     Mon 15 Apr 2024 10:03:30 +0000
Manifest next update:     Tue 16 Apr 2024 11:26:30 +0000
Files and hashes:         1: 3230302e3232352e3133362e302f32322d3233203d3e203631373734.roa (hash: DVC1SnH4vvH2tTWlUIjRJlGZSl1ULZHSDJb4R9MGmsQ=)
                          2: B5C41D258314BEAD112B53343A51D3ED73995B11.crl (hash: OjQCMVvWf8siZAdoN0ibOVoZsmD2NYrv4m7hQ/ev9LU=)
                          3: 323830343a313932343a3a2f33322d3333203d3e203631373734.roa (hash: FJb/PS+0UArrPpGueaqx2WIWXt6x7Bv3MlndmUttqXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:eb:bc:f2:43:78:ff:a6:7c:31:47:f4:b5:e7:f7:64:6d:ca:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5C41D258314BEAD112B53343A51D3ED73995B11
        Validity
            Not Before: Apr 15 10:03:30 2024 GMT
            Not After : Apr 16 11:26:30 2024 GMT
        Subject: CN=7EA1183415D4FAA5CBEB4809A6E9FC12E3A827D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0d:3c:80:14:b5:8f:d7:2a:67:96:59:b9:ea:
                    79:81:43:d4:a1:c3:d2:85:78:19:4c:4b:9f:a3:81:
                    39:33:9e:2b:a2:a1:cf:bc:b3:fb:3d:9d:36:65:9e:
                    37:df:3e:fa:6f:d8:33:85:25:06:c6:71:c4:dc:83:
                    27:9d:29:51:9c:94:56:06:5e:70:10:ef:cc:93:a4:
                    1a:d2:4c:11:aa:b1:53:c2:95:2b:9d:96:da:aa:30:
                    13:18:98:2c:0e:f1:12:eb:4a:0a:bd:c3:a5:60:63:
                    c5:74:30:4e:93:45:17:13:3b:7b:9d:43:18:1b:b5:
                    8f:19:5f:eb:bd:d9:46:14:f5:d9:50:da:6d:a6:9b:
                    3c:bc:34:b0:1f:f6:39:a9:c5:0c:e5:b6:33:e1:9c:
                    04:cc:35:29:dd:a6:e1:4f:dd:51:6c:6b:c2:9d:11:
                    ef:fe:d1:8c:6f:1a:d0:7c:a4:b4:2f:8c:5f:0e:2e:
                    07:40:9c:2d:8b:ee:95:b3:6e:4f:b2:0f:ad:fe:6b:
                    4a:bd:d0:9b:ed:30:2b:e5:50:1d:3c:c3:e1:3e:a5:
                    c0:b1:e6:41:96:9b:b8:7b:ba:09:d3:11:f9:4e:16:
                    c9:5e:8f:f8:5c:5b:67:72:26:22:32:d9:79:4d:42:
                    02:ed:23:bb:17:92:18:89:49:cc:47:7a:50:af:5d:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A1:18:34:15:D4:FA:A5:CB:EB:48:09:A6:E9:FC:12:E3:A8:27:D1
            X509v3 Authority Key Identifier:
                keyid:B5:C4:1D:25:83:14:BE:AD:11:2B:53:34:3A:51:D3:ED:73:99:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B5C41D258314BEAD112B53343A51D3ED73995B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/B5C41D258314BEAD112B53343A51D3ED73995B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4a:6c:4b:7f:f3:d1:9b:b1:db:aa:03:40:4e:47:4b:f7:ce:
         a1:48:af:d7:be:a6:18:c7:1c:98:34:ce:ac:f0:50:b8:83:c0:
         99:e0:12:42:4d:17:6e:fc:db:aa:7a:11:72:be:e1:83:9a:7c:
         1a:36:42:80:f4:52:bb:b0:cd:58:2a:c3:d7:6c:05:50:14:92:
         5e:bb:b4:02:8d:a0:b5:69:b9:bb:45:f5:97:b5:2a:da:34:ba:
         af:cf:d3:da:ea:14:22:5b:dd:7e:a8:e4:8a:de:e5:f7:d2:d9:
         e2:eb:6d:e4:0a:d6:51:1f:45:f4:de:ad:44:b0:7a:16:44:31:
         9c:ce:fd:5b:92:b1:b0:24:61:2c:59:30:b8:67:0a:ba:ee:33:
         a0:fe:19:67:02:f5:31:f5:11:df:d4:92:8c:28:a7:c5:b1:b9:
         4f:9c:1f:06:a7:86:fc:72:42:ed:0b:5a:4b:5f:52:fa:0f:c8:
         46:6f:58:d2:a4:23:5c:32:29:ad:93:ce:a7:6c:8a:06:c7:05:
         17:b1:d0:ff:cd:e3:8a:6b:a0:bc:63:c4:9e:00:5a:23:d7:86:
         95:b4:2f:8b:90:57:a8:06:1b:fa:eb:c2:d0:26:5c:72:6c:46:
         23:16:ef:89:f9:3e:91:79:56:b6:27:d5:9c:ba:c1:32:45:19:
         9b:1e:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----