Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.mft
File:                     E26E3E7776B89B74777CBD275007F950E7C388C1.mft (raw, json)
Hash identifier:          DFQ0T1dpCUv8BBHR7BXjfIB6F+WAE/dVP9H4fuxiTRg=
Subject key identifier:   6B:1C:48:26:5C:2E:D0:D8:85:7F:BE:B4:F7:E8:5F:A8:69:F2:89:48
Authority key identifier: E2:6E:3E:77:76:B8:9B:74:77:7C:BD:27:50:07:F9:50:E7:C3:88:C1
Certificate issuer:       /CN=E26E3E7776B89B74777CBD275007F950E7C388C1
Certificate serial:       2AA8C129C6FF6A8F4F8E555702F2BC796F4DEFC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.mft
Manifest number:          01FD
Signing time:             Mon 15 Apr 2024 09:49:31 +0000
Manifest this update:     Mon 15 Apr 2024 09:44:31 +0000
Manifest next update:     Tue 16 Apr 2024 12:44:31 +0000
Files and hashes:         1: E26E3E7776B89B74777CBD275007F950E7C388C1.crl (hash: x6hcdLm+u8hySqRMHFh+glbLDq9XUcYyCtdz7/x/vzU=)
                          2: 323830343a343433303a3a2f33322d3438203d3e20323637363038.roa (hash: u6SilprkmO5KkNB8838Z3mcu8XGFdJuoyxPXQDankAI=)
                          3: 34352e37312e3132382e302f32322d3234203d3e20323637363038.roa (hash: CxiNjuDXGDeO4xOcDhi6ePlCH0j/B0zy+qZ0ArU8/VQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a8:c1:29:c6:ff:6a:8f:4f:8e:55:57:02:f2:bc:79:6f:4d:ef:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26E3E7776B89B74777CBD275007F950E7C388C1
        Validity
            Not Before: Apr 15 09:44:31 2024 GMT
            Not After : Apr 16 12:44:31 2024 GMT
        Subject: CN=6B1C48265C2ED0D8857FBEB4F7E85FA869F28948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:23:b3:07:78:91:3d:39:3b:a7:de:06:c6:
                    da:a8:79:15:8c:ac:e6:8c:be:9c:a1:47:40:79:60:
                    c6:d0:59:9a:fa:45:14:e8:86:e2:9f:08:14:5e:d9:
                    25:bb:65:33:d8:dc:35:1a:58:de:6a:65:b6:a0:ef:
                    cc:7c:b7:4e:8e:8d:04:41:22:00:28:fd:30:c9:14:
                    a1:80:b4:2f:36:f0:71:ba:b3:52:bc:75:11:17:2a:
                    5d:8b:3c:4c:2c:4f:46:fa:5c:09:e1:e3:a8:50:03:
                    1e:54:78:54:6d:52:65:7e:40:44:b2:d0:7b:b2:d6:
                    0b:98:51:da:b8:39:7b:20:7e:3a:ef:e8:54:59:64:
                    93:73:0e:80:01:6f:19:91:8a:5f:ce:0b:62:62:a2:
                    33:ae:6d:18:ec:fe:67:f1:ed:86:39:2c:93:59:ce:
                    66:b5:cf:75:d8:e6:b3:0e:15:ba:c2:52:42:cf:32:
                    e1:6b:85:11:06:fb:3e:38:7e:01:76:22:dc:e4:09:
                    ad:85:2a:cd:1e:3d:75:9f:13:df:9b:ed:c6:e7:55:
                    8a:93:3d:05:31:9e:56:84:48:dc:93:24:70:7f:76:
                    df:c9:1e:c5:6c:56:6a:c8:60:18:12:85:b1:2d:e9:
                    c8:45:3f:2b:fc:b5:07:52:8e:74:48:79:c2:69:f8:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:48:26:5C:2E:D0:D8:85:7F:BE:B4:F7:E8:5F:A8:69:F2:89:48
            X509v3 Authority Key Identifier:
                keyid:E2:6E:3E:77:76:B8:9B:74:77:7C:BD:27:50:07:F9:50:E7:C3:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cf:a2:55:41:d3:70:b9:59:a3:8d:c9:35:91:e2:2c:ec:6d:
         3d:ba:63:e6:22:35:74:39:df:6a:9b:44:f0:99:81:dd:81:1d:
         2a:b2:ee:0d:31:ac:e7:ec:41:a7:9b:60:84:6f:b3:a9:cb:7e:
         36:0f:3a:60:43:a5:0d:5b:5c:0b:4f:fc:ab:98:f3:97:82:18:
         31:14:66:ef:af:37:67:56:e9:61:be:4a:4e:de:4d:28:4e:e0:
         50:9f:76:7f:f7:c5:a4:4e:2d:f0:46:3f:70:10:ba:06:1f:71:
         99:de:71:84:21:ac:0c:97:18:17:61:f2:20:87:c1:e6:67:a2:
         bf:44:27:b8:a2:38:12:21:ab:31:bb:12:6b:31:55:66:81:71:
         8c:0f:f2:a9:97:b6:27:dc:ba:13:cf:f5:46:70:a1:52:9f:b2:
         2e:f3:85:2c:dc:ee:06:e4:65:06:8f:73:b8:c9:7f:cb:db:e2:
         f3:95:2f:2c:f3:46:14:1d:62:98:b1:a0:d6:92:3f:d8:3a:2a:
         1a:5e:3d:78:dc:d0:02:10:5b:40:99:ab:59:bc:d2:21:f5:7b:
         bb:5d:47:2d:c5:b9:70:b8:04:6c:f2:92:d5:c2:6e:94:4a:95:
         54:77:a6:36:c1:b3:55:94:c4:0c:44:e7:95:bf:6c:91:35:7a:
         7a:ad:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----