Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.mft
File:                     387AF1348EDD63172DB6EE8E38682949F9D3E956.mft (raw, json)
Hash identifier:          tsyk9Z4wTmejreRTxtm5d6w+rq+HxKMchZfH3m3KapI=
Subject key identifier:   BE:11:10:9E:8E:91:C4:EF:AA:DA:78:FE:31:78:C9:10:81:58:E6:54
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       45BF4F61C68238B830D9EEA1D35B127B60E8601D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.mft
Manifest number:          97
Signing time:             Mon 15 Apr 2024 08:58:57 +0000
Manifest this update:     Mon 15 Apr 2024 08:53:57 +0000
Manifest next update:     Tue 16 Apr 2024 09:44:57 +0000
Files and hashes:         1: 34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa (hash: ta8Nm63dv/BAhMgr0QhQ0dL/z1wdoAjNHKGMPrODzHw=)
                          2: 323830343a353637343a3a2f33332d3333203d3e20323637393939.roa (hash: WGYg4Bj0jwKJ+pgrmzIhNoK2crYDnAYh6GwO9dRLpO8=)
                          3: 323830343a353637343a383030303a3a2f33332d3333203d3e20323637393939.roa (hash: XHXRLGk08DuVSh3vv1kShlI4sAjJLULN1asRg+ZBTUo=)
                          4: 323830343a353637343a343030303a3a2f33342d3334203d3e20323637393939.roa (hash: cpGanbHOsaa8VDV/fev8B3UgnxT/wmu3Y0owCJ1cgoo=)
                          5: 323830343a353637343a383030303a3a2f33342d3334203d3e20323637393939.roa (hash: l1/LhhWh0hDyODaXYsEtBu41hVib+uc8B+mLyCp5q7E=)
                          6: 387AF1348EDD63172DB6EE8E38682949F9D3E956.crl (hash: IWmsMGv/Z8aFku+yq6bsVoHurBfCBPIMvi2UBjjtH3Q=)
                          7: 323830343a353637343a3a2f33322d3332203d3e20323637393939.roa (hash: c7GCeYed5oYXYVPiraaDWvJAVukG5Ks40yEPF9sxOMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bf:4f:61:c6:82:38:b8:30:d9:ee:a1:d3:5b:12:7b:60:e8:60:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Apr 15 08:53:57 2024 GMT
            Not After : Apr 16 09:44:57 2024 GMT
        Subject: CN=BE11109E8E91C4EFAADA78FE3178C9108158E654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:2c:ac:50:84:15:48:70:8e:ac:e9:71:50:
                    59:f7:c3:25:f9:53:48:a1:89:c1:d0:4e:0c:48:3a:
                    e3:34:de:d8:36:cd:f7:9a:e7:f8:72:bb:7a:7d:48:
                    a8:4b:fb:86:67:9b:3e:f0:e5:d0:70:ed:2e:8d:1c:
                    9c:97:14:ea:ca:e0:70:b2:99:cc:a2:5a:12:5a:dc:
                    c2:96:b1:99:01:9a:ab:4a:40:86:d3:7e:ab:76:b6:
                    c8:b3:e8:7c:70:bf:18:4e:0b:93:b5:23:66:49:59:
                    41:88:32:51:f4:af:3c:7c:e9:df:aa:f2:cd:02:82:
                    90:7b:e7:7e:29:19:8a:5c:60:61:5c:07:d7:e3:a0:
                    a6:bf:d4:89:1e:0a:bd:ae:f5:33:92:24:ce:8c:7f:
                    57:0f:72:90:f9:60:d5:c6:06:52:1e:07:9a:1f:62:
                    c4:0f:cd:39:e2:b1:5b:0f:e0:4a:3f:eb:7f:ed:88:
                    71:0d:3b:cb:9e:45:17:e9:ed:78:89:7e:e6:63:38:
                    35:55:2e:ef:8b:cf:ae:f2:1b:f6:ad:31:15:27:6c:
                    c6:0b:44:01:c9:53:be:11:03:03:9e:79:52:10:6f:
                    72:16:b6:60:8a:a6:29:b6:77:bb:c0:d0:93:9a:a9:
                    e5:db:16:b6:f3:75:45:36:67:a2:f1:4a:07:91:a1:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:10:9E:8E:91:C4:EF:AA:DA:78:FE:31:78:C9:10:81:58:E6:54
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:17:3d:c5:6d:dd:3c:65:04:8f:0f:f4:a8:a0:1f:6d:58:
         d6:8d:bc:92:ce:04:d1:33:ee:ec:0a:a2:a5:9a:89:30:a3:0f:
         a2:59:a6:4c:65:d5:57:3b:a4:c9:41:01:19:a2:30:dc:ef:94:
         be:8b:cb:a4:1b:10:2f:a5:93:e9:e0:02:61:47:82:77:87:86:
         37:12:e9:de:2b:dd:30:93:7c:69:c5:ab:6d:c8:c2:01:83:0d:
         92:a9:a7:c0:63:cf:1c:30:c6:12:81:06:73:ff:21:2f:a4:d3:
         90:26:b0:74:02:04:fe:fa:fe:1d:fb:bb:cd:0a:46:9d:9e:24:
         a4:0b:3f:97:84:cb:21:c7:62:b5:d2:95:ed:74:18:84:2c:b5:
         49:e5:a1:12:47:fb:a3:a9:c1:ab:40:27:e4:b9:db:a8:52:67:
         db:68:1b:9e:cf:a4:db:a6:7a:e2:9b:8b:4d:32:86:92:96:52:
         ce:ce:32:34:b0:1a:23:89:79:5a:25:03:42:15:6c:64:28:44:
         9f:84:58:8a:84:d8:04:25:8a:86:72:4e:93:17:75:54:30:8a:
         fe:fc:52:f6:0a:62:a5:3d:65:75:7b:8a:2d:32:45:eb:c6:d6:
         90:cd:60:46:1e:bb:25:59:6d:b2:d0:a9:2b:bd:1d:7a:92:f8:
         a5:ea:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----