Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.mft
File:                     0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.mft (raw, json)
Hash identifier:          4/IU5qYGuo0SMkfu/gUf3YItymedIT8R/YCbk1t5z8Q=
Subject key identifier:   C1:13:50:FF:4A:A5:84:B2:3E:C1:17:D7:52:6B:04:4E:49:B5:90:4A
Authority key identifier: 0C:A2:EA:A3:59:6B:92:4E:63:BD:BF:C0:99:7A:28:CA:F4:B2:6D:7C
Certificate issuer:       /CN=0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C
Certificate serial:       5C5ED26E89136CCC660F0D400990924C2372A093
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.mft
Manifest number:          0182
Signing time:             Mon 15 Apr 2024 00:54:22 +0000
Manifest this update:     Mon 15 Apr 2024 00:49:22 +0000
Manifest next update:     Tue 16 Apr 2024 02:20:22 +0000
Files and hashes:         1: 323830343a313739633a3a2f33322d313238203d3e20323633313539.roa (hash: EhyVuEIdR2NG371uFjw6sqRhKIsxbJkWUvQyfxaG4TI=)
                          2: 0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.crl (hash: NRLG+cfSXDkIvmrhRuKk9fFMqp7zhGE0cU+59m8vPNQ=)
                          3: 3137372e39332e3136302e302f32312d3332203d3e20323633313539.roa (hash: E/81/vZdWtSI2KI0nYXP/Vj7q+VR6fu4yWlQ8hPS8O4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:d2:6e:89:13:6c:cc:66:0f:0d:40:09:90:92:4c:23:72:a0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C
        Validity
            Not Before: Apr 15 00:49:22 2024 GMT
            Not After : Apr 16 02:20:22 2024 GMT
        Subject: CN=C11350FF4AA584B23EC117D7526B044E49B5904A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:98:8b:e3:a0:ac:dc:84:ec:97:64:8a:51:
                    18:b5:7f:ac:34:85:cc:e1:e5:70:3b:07:6b:9d:e8:
                    ab:52:38:58:d7:ac:01:25:9d:74:95:ef:3c:65:92:
                    8f:e1:99:45:51:14:83:12:73:81:e6:7f:9b:93:f6:
                    cf:1a:c1:ea:85:bb:0b:f2:93:4e:16:f0:3a:99:7e:
                    8b:9c:30:ee:9e:cd:63:02:68:32:36:62:ce:1f:2c:
                    e5:48:a6:56:50:96:d3:fd:ee:08:97:93:15:ac:e7:
                    93:22:87:90:5b:5d:9b:93:ed:09:3a:68:e6:aa:64:
                    9e:5d:7d:e0:dc:dc:b5:06:60:92:d4:f9:4d:32:f9:
                    49:f5:ad:2d:09:09:15:6e:01:22:11:d2:09:ba:a5:
                    df:a6:80:ba:f6:ca:81:2a:5c:c5:54:a9:7a:9e:31:
                    4a:5e:9a:a4:f5:9a:6b:23:72:de:5e:c4:c7:9d:4e:
                    7b:33:ab:56:e2:a3:94:ab:01:4a:25:6f:d8:71:e5:
                    3d:bb:0e:d1:1c:36:8a:c3:4f:f7:4a:5b:98:97:c6:
                    e9:ab:6f:ea:14:a6:2a:c7:15:d0:53:6c:c1:d8:77:
                    11:55:d1:a8:1f:1d:5e:31:85:d1:22:2e:c5:cd:2c:
                    1f:eb:c0:ad:6b:40:9d:31:86:76:8f:60:c1:10:55:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:50:FF:4A:A5:84:B2:3E:C1:17:D7:52:6B:04:4E:49:B5:90:4A
            X509v3 Authority Key Identifier:
                keyid:0C:A2:EA:A3:59:6B:92:4E:63:BD:BF:C0:99:7A:28:CA:F4:B2:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:11:a9:d4:47:77:83:0f:50:13:6f:77:d0:11:a5:10:61:
         99:38:48:06:7f:12:a5:94:e4:09:c9:ac:9e:e9:88:f7:d5:e8:
         de:75:65:c5:9b:66:80:c4:78:64:54:22:a8:d2:9a:ca:22:87:
         b6:f7:8d:9c:ca:96:d8:5c:85:a6:07:1b:aa:c5:59:8a:65:84:
         2f:33:c8:45:d4:02:0a:04:dd:c0:2d:d3:0b:d6:e6:6c:1d:67:
         f9:d4:86:47:89:8b:60:ea:9b:c4:d9:0a:7f:7a:66:9a:b4:e9:
         2e:9c:4c:04:4c:a4:d4:b1:03:8c:fa:a2:68:be:10:63:0e:2a:
         06:68:c2:97:66:8a:81:a3:3b:4e:52:6d:a9:18:35:ff:f9:26:
         db:86:a6:52:5c:8f:ab:ba:15:e9:27:e1:cc:96:1d:1f:d1:5f:
         d4:6c:e7:d7:c5:02:18:b3:9f:fd:eb:00:9b:99:3f:47:67:ce:
         37:11:e7:f6:2e:02:ce:d4:29:50:05:36:76:05:b2:3f:36:ca:
         c0:88:0b:43:72:fa:44:c7:2b:05:ac:d1:61:5b:12:d0:30:7c:
         d9:0b:40:55:aa:b7:64:c6:a0:37:b8:05:fb:c4:a4:a8:3b:71:
         1e:dc:9f:0c:a9:d6:9f:91:5b:69:7e:32:99:f9:75:32:cc:77:
         57:86:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----