Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.mft
File:                     DFBF57C6F9A11CBB0EE711B27866E30C49559F19.mft (raw, json)
Hash identifier:          7C6P5mqniUW6dKUwggwJIYymrqestVdyGMz1kUKQtFo=
Subject key identifier:   21:DD:74:D9:1A:14:51:75:AE:5B:C1:D6:97:CF:DF:7F:EF:43:BF:0A
Authority key identifier: DF:BF:57:C6:F9:A1:1C:BB:0E:E7:11:B2:78:66:E3:0C:49:55:9F:19
Certificate issuer:       /CN=DFBF57C6F9A11CBB0EE711B27866E30C49559F19
Certificate serial:       AC28D43BA1A1CE8270B5854C8B0A2AC5709B21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.mft
Manifest number:          24
Signing time:             Mon 15 Apr 2024 05:24:35 +0000
Manifest this update:     Mon 15 Apr 2024 05:19:35 +0000
Manifest next update:     Tue 16 Apr 2024 06:03:35 +0000
Files and hashes:         1: DFBF57C6F9A11CBB0EE711B27866E30C49559F19.crl (hash: kaN5yImZxMG9iwHpbjsGpf02cmRwWVgHQHGdvxY625E=)
                          2: 323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (hash: 9acQwZ9e7dId75HH9B6keo1qduSjLPRi5yUigHs32sE=)
                          3: 3136302e3233382e3139322e302f32322d3234203d3e20323636353439.roa (hash: llvX4LuUHvMmY4lPUyhF4XUcEe9tWcUYKOgX5cdPCps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:28:d4:3b:a1:a1:ce:82:70:b5:85:4c:8b:0a:2a:c5:70:9b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBF57C6F9A11CBB0EE711B27866E30C49559F19
        Validity
            Not Before: Apr 15 05:19:35 2024 GMT
            Not After : Apr 16 06:03:35 2024 GMT
        Subject: CN=21DD74D91A145175AE5BC1D697CFDF7FEF43BF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:a8:3c:6a:9e:01:38:c0:74:23:b2:3f:ff:
                    8e:b3:49:17:30:97:3e:4b:c9:6c:1a:45:81:19:5a:
                    a8:e3:9b:50:0e:27:5a:3b:a3:1d:9f:68:3f:93:01:
                    5f:99:26:9a:4c:b7:2b:f0:13:0f:4b:0f:42:04:bf:
                    90:3b:2f:77:57:6e:73:94:3a:51:28:78:25:91:01:
                    0f:e8:cf:4e:b4:63:2f:17:b4:02:df:60:06:be:7c:
                    41:f3:fb:bd:9f:c8:81:f8:83:c9:f3:b9:dc:fc:64:
                    27:85:3e:d4:7f:ca:c6:9a:f7:57:5b:90:88:16:f1:
                    98:29:bc:00:a0:88:81:2f:b1:28:db:d9:57:e1:c1:
                    53:5c:50:e3:cf:c5:8d:7b:c1:21:1b:19:d7:28:7b:
                    5f:2b:30:c4:b1:a6:7f:42:48:45:20:1f:74:24:3f:
                    58:9a:ec:be:30:00:b7:c6:ac:7e:e4:48:88:05:36:
                    ca:94:04:00:ff:89:57:5d:9c:93:22:a9:18:65:15:
                    d1:4c:41:0d:ed:f9:81:33:56:85:92:31:fa:38:47:
                    ff:ff:c9:28:0b:af:4e:e6:dd:32:ce:37:f0:be:f1:
                    b6:05:4c:f5:03:f1:09:1a:8c:35:43:2e:a0:3c:17:
                    e7:51:b4:55:fa:66:24:78:a5:4f:dc:a4:1d:4f:31:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:74:D9:1A:14:51:75:AE:5B:C1:D6:97:CF:DF:7F:EF:43:BF:0A
            X509v3 Authority Key Identifier:
                keyid:DF:BF:57:C6:F9:A1:1C:BB:0E:E7:11:B2:78:66:E3:0C:49:55:9F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:04:89:7c:d6:86:c9:cb:52:cf:18:88:94:cc:b0:e4:ec:
         eb:6b:ad:9a:23:4e:a6:c8:4a:f9:c0:73:d3:b0:ae:e8:c3:f5:
         09:da:8f:6b:22:84:04:68:b8:33:8e:d1:b5:6d:a6:62:2b:eb:
         eb:fd:14:0c:d1:1f:a0:93:dd:41:aa:bd:8b:ab:21:3a:bc:79:
         42:a6:ba:6e:fb:7d:0f:70:03:67:a9:84:b7:7f:92:1c:86:41:
         c6:16:c4:cd:30:f8:0b:d1:78:36:76:d6:60:72:53:c9:aa:d6:
         04:6c:48:99:52:c8:a0:3a:d1:d9:4a:b3:1b:f0:fb:35:54:dc:
         4d:f4:fc:a3:c4:f6:82:d9:3c:86:c2:a5:b0:9e:b9:45:c0:5d:
         ab:ae:df:83:79:89:64:27:f2:f9:ad:f6:69:4f:bc:a9:0d:57:
         3e:0b:15:2e:18:ae:98:f6:e8:81:74:bb:bf:24:fe:66:6b:d0:
         4e:1b:18:b9:c0:34:71:52:76:11:36:e0:db:c1:51:64:c2:95:
         84:5a:aa:6a:69:2c:cc:3d:44:f0:8d:aa:ed:5d:ff:34:31:c7:
         96:c7:4b:8a:9d:6b:a2:1c:2d:b5:74:5a:d9:b3:9e:0f:20:cf:
         38:db:ad:31:d3:e4:b9:37:60:d3:8e:b8:3d:a7:2a:9c:73:f9:
         9a:34:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----