Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.mft
File:                     D0192C20FA3780F24663DFCDF35C8C40255F1ABE.mft (raw, json)
Hash identifier:          DIXjHRUme5QrWoGHevS91eZMHoSYv59oMzmu7pEC9o0=
Subject key identifier:   BA:8E:56:69:B3:80:DF:48:7C:3F:2C:DA:2D:27:82:F9:F1:F9:7B:D0
Authority key identifier: D0:19:2C:20:FA:37:80:F2:46:63:DF:CD:F3:5C:8C:40:25:5F:1A:BE
Certificate issuer:       /CN=D0192C20FA3780F24663DFCDF35C8C40255F1ABE
Certificate serial:       4A8C894CFC82A184974723A8E552C982331840EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.mft
Manifest number:          0245
Signing time:             Sun 14 Apr 2024 20:34:10 +0000
Manifest this update:     Sun 14 Apr 2024 20:29:10 +0000
Manifest next update:     Mon 15 Apr 2024 21:50:10 +0000
Files and hashes:         1: D0192C20FA3780F24663DFCDF35C8C40255F1ABE.crl (hash: QkfdAetspk/AguHd0VSZUxKzLjsdu7JHujKJkbAGVbI=)
                          2: 323830343a333865633a3a2f33322d3438203d3e20323636353130.roa (hash: NSiGsuepbAlFJJ5eOiz6CZi68fDpal90UI7O9kDPlvk=)
                          3: 3137302e3234342e3232342e302f32322d3234203d3e20323636353130.roa (hash: 7oexO01qvB+qUU9Wun4vfLvqKOD5YxLS9M6NbwiT9GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8c:89:4c:fc:82:a1:84:97:47:23:a8:e5:52:c9:82:33:18:40:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0192C20FA3780F24663DFCDF35C8C40255F1ABE
        Validity
            Not Before: Apr 14 20:29:10 2024 GMT
            Not After : Apr 15 21:50:10 2024 GMT
        Subject: CN=BA8E5669B380DF487C3F2CDA2D2782F9F1F97BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:13:a0:bb:7a:57:ab:b8:5e:10:df:c8:4d:
                    6b:5f:a0:a8:64:85:c1:e3:62:99:86:07:56:64:39:
                    4b:ae:d3:10:c6:c5:b2:b7:f1:13:5e:7a:20:8b:7a:
                    7d:9a:bb:31:1c:bf:c2:90:8c:7a:3f:6d:5a:a3:84:
                    92:17:1f:8f:33:da:23:da:42:c4:bb:83:67:95:23:
                    e5:73:33:14:2f:45:16:ac:8c:21:c9:6d:80:fa:a4:
                    2d:95:4f:45:d7:ad:c3:e5:ae:81:1d:f1:a9:92:35:
                    10:19:b8:51:1d:3e:7f:e5:ca:89:ff:0a:4c:db:c6:
                    2f:34:90:f7:6a:1b:dc:0d:41:df:0e:03:98:3d:da:
                    90:b0:6e:d8:67:5e:40:3a:72:b4:d2:ae:5c:ae:1b:
                    4f:30:2b:3e:39:40:50:36:70:3e:ce:a0:25:6f:74:
                    9a:5c:45:27:50:0b:00:1a:7f:8b:a4:a1:d4:4a:0d:
                    96:7f:59:36:cc:43:3e:f5:26:72:18:84:99:3e:0e:
                    4f:26:77:37:4f:2f:01:fb:e3:19:21:da:96:2a:c6:
                    b3:13:b7:e1:32:59:80:43:4e:75:88:d6:33:8c:58:
                    fa:6d:a3:40:49:77:28:44:50:23:bb:8c:e2:23:17:
                    36:9a:3e:18:ca:ba:89:1f:8d:db:94:37:ef:f4:f6:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:56:69:B3:80:DF:48:7C:3F:2C:DA:2D:27:82:F9:F1:F9:7B:D0
            X509v3 Authority Key Identifier:
                keyid:D0:19:2C:20:FA:37:80:F2:46:63:DF:CD:F3:5C:8C:40:25:5F:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/0/D0192C20FA3780F24663DFCDF35C8C40255F1ABE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:12:07:c0:49:06:b5:21:af:ea:ae:0b:d7:e2:aa:cb:cd:d0:
         8c:31:1f:7c:4a:cc:43:e4:8f:61:c4:46:0c:9f:2f:6d:3a:70:
         28:87:dc:30:97:36:67:b7:4c:8c:17:32:ba:ea:a5:25:cb:96:
         d5:ab:67:c2:c3:78:83:5f:a6:57:6b:43:f6:44:a7:74:ae:69:
         a0:9f:ff:f0:92:03:aa:62:7c:89:9b:ee:13:75:eb:e7:e0:4b:
         a0:40:e8:e7:c5:5a:b3:c4:78:e3:15:61:1a:25:57:34:7c:33:
         81:b8:de:f6:19:d8:9c:38:d6:93:f4:b5:47:c1:8d:94:d6:0b:
         fc:36:1f:2d:16:58:81:61:31:73:1b:da:17:f2:c8:a5:55:b0:
         82:35:cb:16:f1:00:de:8c:40:95:65:1d:08:30:af:d1:a7:2a:
         38:0d:ba:4f:f4:71:42:31:51:b9:df:77:87:02:eb:ab:cb:65:
         59:29:a8:4f:f1:1a:4a:80:8d:a4:e0:fa:40:20:df:b0:5a:dd:
         f6:fe:d6:a1:bd:ba:9d:ee:a9:1c:41:f9:a4:0e:d1:8b:4c:da:
         45:e6:51:3e:48:15:9e:a4:b0:a5:18:d1:3c:16:3d:97:a9:dd:
         50:cf:37:91:ad:59:2a:d5:40:00:40:94:04:82:8d:fb:e3:7c:
         bd:09:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----