Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.mft
File:                     2576B728EF25561749172CD23BA7CC6840DF5628.mft (raw, json)
Hash identifier:          54EZhSA4La//iRZSXIwMQ3ezQY0wP3JLssMrnFie5sM=
Subject key identifier:   81:75:5E:E9:33:90:33:5E:1C:AD:08:6A:58:A2:C2:03:70:50:86:52
Authority key identifier: 25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28
Certificate issuer:       /CN=2576B728EF25561749172CD23BA7CC6840DF5628
Certificate serial:       2181AEB3B60DB78D21472974476635B13B2B56E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.mft
Manifest number:          0219
Signing time:             Mon 15 Apr 2024 00:44:59 +0000
Manifest this update:     Mon 15 Apr 2024 00:39:59 +0000
Manifest next update:     Tue 16 Apr 2024 01:19:59 +0000
Files and hashes:         1: 2576B728EF25561749172CD23BA7CC6840DF5628.crl (hash: KEoPfOW6/Lrxxz2t9QxntrLpnPhMCN9Se3ZtALqy84Q=)
                          2: 3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (hash: tp2eTZsaYtnzq6h7K3CbHtt+CafmuOosCJ+GA15CKyI=)
                          3: 323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (hash: uwH8V1xoEyFbqrltb3xMiD57bo2lQ+KzGnQWs7yG+GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:ae:b3:b6:0d:b7:8d:21:47:29:74:47:66:35:b1:3b:2b:56:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2576B728EF25561749172CD23BA7CC6840DF5628
        Validity
            Not Before: Apr 15 00:39:59 2024 GMT
            Not After : Apr 16 01:19:59 2024 GMT
        Subject: CN=81755EE93390335E1CAD086A58A2C20370508652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:d1:02:8c:8b:a4:2a:7c:06:95:2b:50:27:
                    09:c3:ef:fb:27:71:95:20:f2:a4:69:c9:fd:9b:7b:
                    da:6a:02:ee:dd:8b:30:6a:9a:86:c0:da:a6:c2:c0:
                    d3:a5:8a:f4:48:d8:f7:6c:94:6d:b2:26:e6:31:d2:
                    b9:f2:f8:4e:7c:e2:5d:c6:da:f5:90:fe:12:7f:88:
                    d6:45:09:eb:a2:77:5a:2e:bd:fe:33:f2:c2:74:eb:
                    30:41:61:d8:f5:55:51:40:36:e3:a5:b9:5c:8c:72:
                    34:05:ef:6a:b1:bc:ef:65:f6:28:91:ba:5e:c8:89:
                    d3:4b:c1:9e:a7:2e:a1:11:5c:fd:95:02:12:4d:a5:
                    14:55:c2:1b:7e:32:90:92:70:13:c4:6c:f6:c2:d9:
                    e1:1a:f2:a1:dd:7f:4d:15:a1:a4:fa:f9:93:1c:42:
                    ea:5a:2f:61:0c:be:96:a5:84:8b:7c:e6:31:de:06:
                    88:77:11:f9:de:7d:10:e7:e0:33:5b:97:ac:09:13:
                    3a:aa:f5:3a:d4:d7:d5:8c:7f:63:6e:3f:3a:9a:1f:
                    f6:cf:d0:72:4d:fd:24:90:10:7d:d0:f6:4b:7d:c9:
                    86:3d:79:88:9c:c6:b2:4a:13:27:90:4d:35:8e:2d:
                    6f:7d:e4:42:a3:0e:39:57:a6:da:f8:62:e5:d2:11:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:75:5E:E9:33:90:33:5E:1C:AD:08:6A:58:A2:C2:03:70:50:86:52
            X509v3 Authority Key Identifier:
                keyid:25:76:B7:28:EF:25:56:17:49:17:2C:D2:3B:A7:CC:68:40:DF:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2576B728EF25561749172CD23BA7CC6840DF5628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/1/2576B728EF25561749172CD23BA7CC6840DF5628.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:80:fd:55:e7:cd:7e:54:0d:f0:72:c4:3f:2a:62:70:5a:6a:
         12:a4:e7:13:1d:2c:de:99:d1:59:48:8d:d2:31:65:70:8b:aa:
         d8:29:76:fd:50:5f:3d:22:f5:8f:25:6e:c4:85:f9:a9:29:ba:
         cf:63:a4:34:53:26:43:f3:e5:d2:cd:ef:2a:dc:14:96:9b:cc:
         72:55:fd:dd:ba:ef:44:74:4e:72:77:1a:fd:70:c8:18:61:50:
         62:04:dd:b0:cd:22:e5:54:32:37:e5:a2:eb:f0:fb:b1:6a:82:
         75:2e:41:7d:cc:6d:93:a9:5f:87:82:f2:b5:34:1e:d4:6f:85:
         f4:4e:f0:b0:83:8d:55:f7:f6:21:bb:c2:06:ad:92:1b:ea:47:
         4e:43:68:94:e5:b8:9c:62:1b:73:6c:e8:f2:ea:fc:18:74:ef:
         98:66:c9:57:42:ca:f0:af:3d:d4:c9:21:f6:ed:4f:e0:97:d1:
         4a:70:e6:d5:f5:67:4a:ff:0b:78:08:2a:9a:45:84:92:52:3e:
         bf:bb:13:77:40:77:8c:19:5a:bb:ad:8d:fd:f8:50:01:c2:f1:
         08:68:60:ab:b2:07:67:db:25:d1:49:76:ee:ac:5d:5e:18:a3:
         e5:69:93:61:92:d2:65:4f:1c:d4:e1:2b:fe:16:32:60:e7:df:
         08:21:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----