Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/67EA701434960D575DDC6F2D9E89E9155833AF65.mft
File:                     67EA701434960D575DDC6F2D9E89E9155833AF65.mft (raw, json)
Hash identifier:          4QZt1EPQpqRBgbs4M1kOyd9gggkY7OrllPypwiH9ixE=
Subject key identifier:   A8:1D:23:19:FB:97:C5:60:61:8E:01:93:F2:ED:7F:8E:78:93:1A:F7
Authority key identifier: 67:EA:70:14:34:96:0D:57:5D:DC:6F:2D:9E:89:E9:15:58:33:AF:65
Certificate issuer:       /CN=67EA701434960D575DDC6F2D9E89E9155833AF65
Certificate serial:       3FEAC2E1CC4D924720C9E73067A4614A905D9C0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EA701434960D575DDC6F2D9E89E9155833AF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/67EA701434960D575DDC6F2D9E89E9155833AF65.mft
Manifest number:          0280
Signing time:             Mon 15 Apr 2024 03:50:11 +0000
Manifest this update:     Mon 15 Apr 2024 03:45:11 +0000
Manifest next update:     Tue 16 Apr 2024 04:46:11 +0000
Files and hashes:         1: 323830343a336333303a3a2f33322d313238203d3e20323636313935.roa (hash: y/5ZVTI6RJAvIyWjiu9jLVQZX7dhjpqewhoVTUzWjQI=)
                          2: 67EA701434960D575DDC6F2D9E89E9155833AF65.crl (hash: 8XvzKCTwahgo7DwyxXRCMeNcJyodlcbrIo4VPqcXS0Q=)
                          3: 3139302e3132332e3230302e302f32322d3332203d3e20323636313935.roa (hash: 5dtcNCOl5aLYnD4u0pWA8jSRoY3YZWONoacMFxEg9yA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ea:c2:e1:cc:4d:92:47:20:c9:e7:30:67:a4:61:4a:90:5d:9c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EA701434960D575DDC6F2D9E89E9155833AF65
        Validity
            Not Before: Apr 15 03:45:11 2024 GMT
            Not After : Apr 16 04:46:11 2024 GMT
        Subject: CN=A81D2319FB97C560618E0193F2ED7F8E78931AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:3e:82:32:bf:a7:ed:a7:75:dc:af:a5:ac:
                    da:54:45:a5:91:5c:17:ba:8f:52:6e:27:37:12:9e:
                    33:f3:55:e4:5e:87:bc:90:cb:a6:d2:3f:fc:f6:c8:
                    b0:7f:de:19:75:89:80:b4:04:a3:77:5e:e9:ca:93:
                    f8:e6:5d:61:78:e2:a0:d0:d9:ff:69:3c:ea:ab:ea:
                    d4:ce:62:0d:40:03:46:dc:ea:21:e4:e5:86:c9:a2:
                    6e:0a:9a:9e:1a:10:49:4c:24:0c:45:6f:51:3c:59:
                    3d:d1:1c:df:0a:ba:66:80:3d:48:66:b2:fd:2d:a9:
                    d9:44:0b:c5:e5:88:2f:1d:cf:c0:8a:d0:8b:47:0f:
                    f8:47:c6:fa:d9:ba:8a:ea:58:1f:67:21:0b:5c:9a:
                    94:00:24:63:f6:85:a2:ce:e5:7f:ec:86:59:34:a0:
                    19:2f:56:ea:fb:34:68:46:d1:98:cd:45:67:f6:29:
                    6e:83:a3:2a:69:31:7d:ca:42:f9:59:21:12:a0:35:
                    29:54:58:24:6b:ef:7f:30:6b:bf:3c:17:cf:5f:0b:
                    56:33:42:5b:f4:f9:df:fe:59:16:87:54:b4:33:73:
                    f6:1c:c5:3a:3e:9f:06:ed:77:2c:a4:35:37:54:ca:
                    e1:85:b9:66:db:53:ff:25:23:0e:d9:22:76:fa:03:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:23:19:FB:97:C5:60:61:8E:01:93:F2:ED:7F:8E:78:93:1A:F7
            X509v3 Authority Key Identifier:
                keyid:67:EA:70:14:34:96:0D:57:5D:DC:6F:2D:9E:89:E9:15:58:33:AF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/67EA701434960D575DDC6F2D9E89E9155833AF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EA701434960D575DDC6F2D9E89E9155833AF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uLs22ASqpqZvBJL8xJRKQ4Rzwy4zjmpPdx9hZmqEPGE/0/67EA701434960D575DDC6F2D9E89E9155833AF65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:57:6f:c4:9c:a9:09:5d:48:d2:1d:f7:d1:ef:83:1a:fa:
         6e:b1:27:98:3b:6e:89:1a:5f:29:82:d5:b0:dc:9c:7b:37:a0:
         d8:77:4b:3d:cc:e7:d0:43:d6:7e:ef:8f:f2:4d:a2:a2:14:6f:
         9b:94:38:4d:32:fc:3f:a1:e5:38:33:87:58:63:85:c1:55:19:
         84:8e:dc:1f:2d:c2:8a:ce:1a:fd:e9:ad:dd:46:02:b9:84:e6:
         16:26:86:5c:1f:38:2d:ba:c4:33:0e:0f:82:49:be:95:b5:5f:
         8c:4c:c6:88:20:38:d8:8e:d9:d1:84:29:69:0f:16:4d:bc:e3:
         0c:1d:fb:c1:2e:be:37:f2:5c:e6:50:62:c3:16:bc:c5:f1:a1:
         85:0d:ba:71:63:31:1b:10:c1:18:ba:0b:ff:f5:7e:b6:1e:0e:
         95:a9:a0:c5:6d:a3:e4:85:bc:91:ba:fa:a0:c1:01:1d:fb:6f:
         75:1b:2d:64:bc:6c:42:6b:52:d5:53:2e:4e:50:ce:29:22:86:
         fc:33:98:e0:d1:0e:76:14:3d:c5:d4:9f:3b:68:c3:9e:93:5e:
         ed:10:27:ca:47:84:bd:1d:eb:22:52:ff:44:8d:a9:b2:b0:2f:
         5f:aa:59:25:f8:a4:a6:2e:84:57:44:79:d7:52:d4:71:8e:1d:
         b4:a5:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----