Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.mft
File:                     B20C19BE837487F270BE3762AA874E14A967E6EC.mft (raw, json)
Hash identifier:          D0soEa65oLHYog07VW7l+fxM/DhQ78yEPNhkaz/m7RA=
Subject key identifier:   FC:06:8F:59:22:5F:29:1C:A2:44:BC:4F:B9:83:9B:C2:D6:DC:96:7F
Authority key identifier: B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Certificate issuer:       /CN=B20C19BE837487F270BE3762AA874E14A967E6EC
Certificate serial:       69F3B2EEB661DB891F2EA73AD95412F31AC0A398
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.mft
Manifest number:          0F
Signing time:             Mon 15 Apr 2024 05:48:07 +0000
Manifest this update:     Mon 15 Apr 2024 05:43:07 +0000
Manifest next update:     Tue 16 Apr 2024 05:57:07 +0000
Files and hashes:         1: B20C19BE837487F270BE3762AA874E14A967E6EC.crl (hash: q6KCq2AzY0koEXAMM3Jr7oC89FM8uuLE4+cZj+UBJw4=)
                          2: 34352e3233382e37322e302f32322d3332203d3e20323638333238.roa (hash: +fXnpMeIIEEFO2ldht3b4aeoq+3mezGG99yKgY9d9sU=)
                          3: 323830343a346637343a3a2f33322d3438203d3e20323638333238.roa (hash: HK0Q6uQNJMMm/zeI/xltLEnZti/+tG/0lBGi1tiZ/ZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f3:b2:ee:b6:61:db:89:1f:2e:a7:3a:d9:54:12:f3:1a:c0:a3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
        Validity
            Not Before: Apr 15 05:43:07 2024 GMT
            Not After : Apr 16 05:57:07 2024 GMT
        Subject: CN=FC068F59225F291CA244BC4FB9839BC2D6DC967F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:3d:9d:8d:25:1b:7f:18:f9:0a:a3:88:73:
                    02:9d:37:61:4d:8c:c4:41:ed:9c:6a:00:75:0a:f0:
                    bf:6a:38:2b:47:3b:61:41:f4:b5:1d:17:fa:4c:2c:
                    94:0d:50:18:93:60:29:e4:aa:50:17:61:a3:da:56:
                    50:b1:96:ca:86:50:82:e0:a0:36:c2:7a:8e:bc:69:
                    3c:82:1c:ed:8d:8a:64:a5:e4:99:c9:22:1b:88:93:
                    15:d4:26:c2:50:33:f7:e2:61:67:2b:c6:48:e3:b7:
                    5f:e5:78:d4:0b:a9:48:c2:f8:d5:a9:c8:0f:5b:ed:
                    7f:a1:81:d5:09:bf:17:0f:25:1b:7c:25:72:fe:1d:
                    e2:0c:3f:82:ad:dc:3f:78:81:d8:71:de:ef:43:78:
                    57:83:9b:11:59:71:95:ca:e2:23:a3:90:d5:c2:02:
                    96:aa:6a:04:ac:7c:98:e1:e2:ab:b8:20:f7:8c:46:
                    ef:d5:98:81:23:73:47:a0:9f:f4:54:02:49:6f:ca:
                    ca:72:49:4e:4c:73:61:d8:1a:bf:30:94:f8:25:80:
                    d0:76:05:5a:1a:f6:19:4c:95:00:3f:90:ad:e0:dc:
                    f8:f4:eb:b0:18:14:4c:a7:60:b1:5f:bf:77:0d:ef:
                    f3:6a:db:ea:e9:69:df:31:b3:f4:eb:00:da:97:ce:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:06:8F:59:22:5F:29:1C:A2:44:BC:4F:B9:83:9B:C2:D6:DC:96:7F
            X509v3 Authority Key Identifier:
                keyid:B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:97:d8:32:33:69:1a:81:83:59:0b:00:41:30:e7:bb:61:7d:
         f1:1a:1c:bb:1f:59:a9:b5:01:55:a6:46:06:24:5d:b8:02:8c:
         af:c1:4e:36:76:d3:a3:29:04:11:f6:95:6f:f2:8e:a4:a0:43:
         95:7c:7a:cd:69:11:b7:36:8c:00:c8:df:b8:95:bf:cc:b3:8a:
         f6:3b:d4:f8:9f:8a:98:45:a4:1a:d4:3d:13:d1:a5:72:d2:99:
         5e:05:7b:ed:56:08:c6:bb:07:04:12:95:ca:d1:98:e2:eb:d6:
         3a:2f:46:09:b9:3b:41:b7:54:1a:3e:90:01:1c:f8:b6:61:71:
         ae:37:dc:e2:41:83:a1:9a:f8:74:eb:b3:0c:fa:90:f4:8c:74:
         2c:e8:c1:19:77:6a:44:11:4f:68:19:63:1a:64:82:74:32:ed:
         27:da:e9:d9:64:d3:5d:d8:d2:f3:ac:22:01:d5:7f:bc:33:0d:
         d8:b2:73:e3:87:9b:e8:3d:f1:cb:52:81:80:ab:6f:e7:ae:31:
         6e:b3:30:52:b2:51:50:c7:eb:8a:85:49:cc:a8:47:68:41:d0:
         5a:e6:83:37:4f:1c:a7:6e:c6:6e:cd:1d:45:b6:af:51:c5:e5:
         ba:f3:e8:6f:ad:5a:3f:e7:c4:3d:39:df:0c:ba:cc:7a:ce:33:
         1e:ff:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----