Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.mft
File:                     CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.mft (raw, json)
Hash identifier:          FSlwGKrwPp7A+rk0M8cpMZsV22yvRYXTKcuRaEN2zXM=
Subject key identifier:   CA:FF:0C:E0:3A:F7:F0:64:56:B3:4D:C9:5B:A6:44:91:E7:F7:B6:90
Authority key identifier: CA:C3:ED:DC:9F:E5:F7:37:C6:74:E0:C5:1B:29:6F:B3:3C:1D:3D:0E
Certificate issuer:       /CN=CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E
Certificate serial:       33F7A2B9A34D64218F523CEBAB33F8F38B86CEFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.mft
Manifest number:          0118
Signing time:             Fri 26 Jan 2024 17:28:59 +0000
Manifest this update:     Fri 26 Jan 2024 17:23:59 +0000
Manifest next update:     Sat 27 Jan 2024 18:57:59 +0000
Files and hashes:         1: 34352e3136362e3132382e302f32322d3234203d3e20323637393537.roa (hash: SnNzv5Aj66zeJfuBAPqohsW9uwwJuQf3xBWFzumIIgA=)
                          2: 323830343a353563633a3a2f33322d3438203d3e20323637393537.roa (hash: j3niu8W6W3Gv9vqbW7qdIo6695t5Cio7PnPAGIdTYJ4=)
                          3: CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.crl (hash: jw8TbGZY8U4rMpSWah7JClPj+x+4blWK2UBAwOiKIRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f7:a2:b9:a3:4d:64:21:8f:52:3c:eb:ab:33:f8:f3:8b:86:ce:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E
        Validity
            Not Before: Jan 26 17:23:59 2024 GMT
            Not After : Jan 27 18:57:59 2024 GMT
        Subject: CN=CAFF0CE03AF7F06456B34DC95BA64491E7F7B690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:a7:9f:1f:93:02:a7:d6:56:94:82:e2:ee:
                    4f:ec:63:45:7d:c5:26:3f:e1:3a:0c:2a:5f:01:ea:
                    c4:12:13:fc:f5:db:df:13:0a:b4:20:eb:65:1e:4b:
                    2f:9a:fe:81:ff:e5:bb:1c:28:cb:b1:5b:18:70:62:
                    68:01:ea:80:21:dd:2e:d1:15:44:0b:be:79:4b:ff:
                    ba:71:30:ef:2e:05:83:68:22:c1:64:87:8f:c7:6a:
                    37:51:ce:97:54:e4:82:74:60:d7:f0:69:dc:3b:c0:
                    59:de:21:b0:c0:2e:96:f4:c9:d2:7e:21:af:ee:c9:
                    1b:9b:05:ee:29:ff:62:d3:5d:1a:a7:b3:16:de:0a:
                    a9:24:31:cd:b3:7d:f2:c7:0d:11:01:60:10:fb:ea:
                    9b:12:dc:12:f0:b8:7e:df:40:8d:ab:f4:67:d7:dd:
                    6c:eb:0b:78:6f:b2:e1:d3:39:8d:7a:bd:df:bb:55:
                    e6:55:4b:ce:2e:78:40:89:9d:96:2c:32:b6:01:57:
                    64:99:b4:b0:df:02:34:b8:1d:9c:6d:a6:97:7c:e7:
                    2e:84:ad:56:f8:31:d2:9f:db:2e:60:e7:da:4c:aa:
                    7d:ba:28:f1:1c:94:e3:65:b6:ed:6c:5f:28:e6:ef:
                    23:d3:1a:40:e0:fb:e2:e9:aa:00:85:e1:23:f8:d2:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:0C:E0:3A:F7:F0:64:56:B3:4D:C9:5B:A6:44:91:E7:F7:B6:90
            X509v3 Authority Key Identifier:
                keyid:CA:C3:ED:DC:9F:E5:F7:37:C6:74:E0:C5:1B:29:6F:B3:3C:1D:3D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/CAC3EDDC9FE5F737C674E0C51B296FB33C1D3D0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:25:de:61:c7:ec:37:ad:eb:7c:50:89:e1:8e:3f:03:49:78:
         a8:2f:3d:5f:bb:97:fb:4f:8f:36:b1:74:00:af:5d:0f:f1:ad:
         2f:e1:9c:20:0c:87:99:52:62:bb:1c:03:e5:1e:f8:fe:81:5c:
         15:0b:7b:d5:6b:fb:a0:88:24:30:39:a6:f8:bf:b5:4c:9e:9d:
         88:8d:5b:be:19:2b:39:19:b6:a5:84:14:8f:0d:11:b1:35:c8:
         50:89:e7:f2:77:ff:77:aa:81:68:07:ff:f8:cb:d3:72:a6:cd:
         16:7b:50:4c:e9:54:8f:62:e2:7c:2d:44:20:d7:7b:37:10:92:
         ff:7a:09:4d:89:d4:6e:ea:91:57:87:b4:dd:3e:70:56:86:c5:
         7f:ae:36:a3:d9:d5:7a:37:86:fe:f8:ac:b0:53:db:f0:96:1e:
         0b:8c:91:5c:b3:33:b3:5b:4d:a3:49:6c:38:32:37:f4:f6:63:
         de:6b:e1:a2:db:7d:2d:4d:64:4a:55:47:21:b7:bf:57:f1:f3:
         f0:60:aa:96:10:06:d5:5d:f3:8a:97:52:a8:1a:ab:70:61:8f:
         16:6b:db:c8:8d:a7:6e:fe:36:f5:ac:e3:da:c0:37:42:0a:15:
         b5:78:08:76:03:03:49:6c:ac:a9:3f:20:a1:c9:28:1e:d9:e9:
         2a:5d:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----