Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/187120C349BA37B84CAC44BC0DD8EA820E7936B0.mft
File:                     187120C349BA37B84CAC44BC0DD8EA820E7936B0.mft (raw, json)
Hash identifier:          +wRxN/83u96GcpRMMqOYHrY52PSspKPjyUi+g3ME/ks=
Subject key identifier:   20:AE:B5:22:67:8B:8A:6D:76:64:07:88:F8:B3:64:19:20:E2:CE:77
Authority key identifier: 18:71:20:C3:49:BA:37:B8:4C:AC:44:BC:0D:D8:EA:82:0E:79:36:B0
Certificate issuer:       /CN=187120C349BA37B84CAC44BC0DD8EA820E7936B0
Certificate serial:       10D70BCBECFFFB0140FF0A0A6384B92493C2301E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/187120C349BA37B84CAC44BC0DD8EA820E7936B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/187120C349BA37B84CAC44BC0DD8EA820E7936B0.mft
Manifest number:          17
Signing time:             Sat 20 Apr 2024 16:29:47 +0000
Manifest this update:     Sat 20 Apr 2024 16:24:47 +0000
Manifest next update:     Sun 21 Apr 2024 19:34:47 +0000
Files and hashes:         1: 187120C349BA37B84CAC44BC0DD8EA820E7936B0.crl (hash: ySSxQ8/ATwt+1L8i8CVWbhVu68ZYlqPPwG1/qjriiaQ=)
                          2: 323830343a383135633a3a2f33322d313238203d3e20323732343439.roa (hash: fiQeG5fVUzIFFB7hQ3XUMIEjcvpuhfvZFCmH3EkFWJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d7:0b:cb:ec:ff:fb:01:40:ff:0a:0a:63:84:b9:24:93:c2:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187120C349BA37B84CAC44BC0DD8EA820E7936B0
        Validity
            Not Before: Apr 20 16:24:47 2024 GMT
            Not After : Apr 21 19:34:47 2024 GMT
        Subject: CN=20AEB522678B8A6D76640788F8B3641920E2CE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:3a:e2:e6:83:ba:16:e4:6d:b6:4d:da:d6:
                    4b:f5:5a:d5:6c:b4:c4:19:bf:43:3f:47:21:e6:59:
                    96:ae:4f:0a:83:62:57:cf:1b:7d:41:d9:a4:75:54:
                    94:52:35:b7:3b:f6:78:fb:c7:f6:ec:37:c1:af:ac:
                    1a:d4:24:41:41:ef:6c:95:aa:88:e4:f4:b0:bd:61:
                    0d:e8:22:6a:fe:94:ce:81:cb:fd:30:c6:89:e3:ef:
                    8f:bc:69:ff:cd:11:0f:8d:2f:99:4e:29:12:6a:89:
                    dd:12:49:96:b6:38:6e:4f:aa:c5:d2:c6:84:5a:ed:
                    8d:78:e5:22:54:65:eb:f2:84:23:2f:06:3a:0f:9f:
                    36:a6:83:34:03:1b:8b:2e:57:dc:6e:1c:61:fa:cc:
                    e4:91:81:65:2f:41:ae:ce:b7:08:fe:7a:47:2c:5d:
                    37:23:b7:c6:c7:3f:76:a1:72:64:c3:22:df:e8:cc:
                    35:45:db:29:57:23:2f:43:7e:a0:18:0f:c4:cf:2b:
                    78:99:79:d6:6c:55:ee:d4:c0:ae:70:f7:c1:a6:53:
                    b5:6a:89:bf:03:ae:df:53:5a:64:1b:8d:96:c8:97:
                    1d:8c:df:f5:41:e8:b2:ee:eb:45:57:8d:c8:0a:8a:
                    01:65:64:38:f8:17:26:60:67:fa:61:53:f0:3f:ea:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:B5:22:67:8B:8A:6D:76:64:07:88:F8:B3:64:19:20:E2:CE:77
            X509v3 Authority Key Identifier:
                keyid:18:71:20:C3:49:BA:37:B8:4C:AC:44:BC:0D:D8:EA:82:0E:79:36:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/187120C349BA37B84CAC44BC0DD8EA820E7936B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/187120C349BA37B84CAC44BC0DD8EA820E7936B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/1/187120C349BA37B84CAC44BC0DD8EA820E7936B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:90:8f:9e:74:93:a2:bc:25:fe:aa:ea:52:8b:42:35:1f:40:
         1e:a9:4e:24:11:4c:f7:5a:d2:67:57:df:84:b1:8b:7b:db:0c:
         52:47:83:6f:80:20:6a:1e:25:48:50:9c:39:18:15:91:0e:62:
         bd:d7:a8:44:e9:2a:93:bd:e9:7d:11:b8:a1:b6:26:38:05:86:
         8b:f4:60:18:e2:73:f2:e6:81:e8:cc:6d:5c:f1:17:49:2b:c5:
         9c:1c:57:77:40:8a:d4:82:ef:93:38:02:22:3d:2c:f9:a1:c0:
         b7:4d:67:5d:84:7d:1f:ac:92:95:cf:df:9e:f5:f8:11:70:b2:
         ee:8e:66:a1:eb:2f:27:9e:d9:a3:62:f0:33:f0:a9:8b:c4:e0:
         ec:e5:ee:99:aa:bb:23:9a:4e:59:59:3b:9c:98:b9:28:86:19:
         ba:4b:94:65:57:33:a2:d4:aa:66:0e:c7:21:e9:78:57:7c:bb:
         9d:9f:c5:90:a6:de:26:b2:d8:58:27:10:57:a9:17:8a:75:e5:
         e4:78:b6:bc:b7:84:b4:03:e3:50:37:a9:6b:a2:45:ba:22:a1:
         cf:d5:cd:dc:55:ee:c3:c3:91:c5:20:98:24:4b:d0:38:dd:3d:
         44:d7:f7:f7:65:fe:86:17:c8:c1:df:3e:ff:57:9a:d4:9c:9a:
         15:5f:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----