Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.mft
File:                     1A6E686960A7D47F1286E3D15A8DA89E120888BD.mft (raw, json)
Hash identifier:          r13LkfFQlr9YHY/uRn4BDgMi8AxDB0bd/OO74ALdxA8=
Subject key identifier:   74:EA:C5:49:54:51:92:8F:57:F0:D8:41:DF:71:28:7B:61:68:D1:0A
Authority key identifier: 1A:6E:68:69:60:A7:D4:7F:12:86:E3:D1:5A:8D:A8:9E:12:08:88:BD
Certificate issuer:       /CN=1A6E686960A7D47F1286E3D15A8DA89E120888BD
Certificate serial:       1856144C1C92CD74CD9EAD2C818560C547E05179
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.mft
Manifest number:          3C
Signing time:             Sun 14 Apr 2024 18:29:18 +0000
Manifest this update:     Sun 14 Apr 2024 18:24:18 +0000
Manifest next update:     Mon 15 Apr 2024 22:07:18 +0000
Files and hashes:         1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: 4lQrPKTAnuwhYlZv4AhR+BhTQ7ijt1H6O6IZieFM+2Q=)
                          2: 1A6E686960A7D47F1286E3D15A8DA89E120888BD.crl (hash: IQQDJvC9n6q+ngH9GahEscO/uHpATG1aCEEm8sORNME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:56:14:4c:1c:92:cd:74:cd:9e:ad:2c:81:85:60:c5:47:e0:51:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6E686960A7D47F1286E3D15A8DA89E120888BD
        Validity
            Not Before: Apr 14 18:24:18 2024 GMT
            Not After : Apr 15 22:07:18 2024 GMT
        Subject: CN=74EAC5495451928F57F0D841DF71287B6168D10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:4b:96:50:3c:0a:b5:15:d5:69:87:ad:0f:
                    32:da:8f:49:a6:7e:3f:84:01:f1:30:0b:54:2e:36:
                    8f:c7:6c:77:fa:fd:a7:8e:ab:80:47:9a:ff:9d:08:
                    59:21:3b:dd:8e:e4:de:1a:e9:85:09:18:c1:1c:2d:
                    b3:b9:0d:63:b8:b8:0d:b0:7a:06:e4:b3:a7:77:1b:
                    c8:47:13:00:52:fa:8a:f7:58:9c:dc:0f:ba:63:40:
                    53:be:6e:43:fd:0b:79:26:49:98:76:54:33:5e:88:
                    21:7f:21:98:59:bd:39:b8:de:01:89:91:32:b7:74:
                    4c:2d:d8:ea:c8:7f:70:82:1a:3c:42:fc:04:ab:b8:
                    cf:c6:34:be:74:0a:3c:c5:0a:4c:46:5f:bc:e7:d0:
                    ea:b4:e8:9f:3c:4a:ca:ce:20:e3:37:dc:9a:d9:ba:
                    6e:7f:0c:02:a6:52:fc:cc:25:a3:0b:95:be:d6:b1:
                    43:d9:0d:d5:19:80:38:75:65:ed:d1:1b:89:68:b1:
                    61:37:69:61:16:9a:f2:ad:70:c0:b2:d5:dd:26:a3:
                    4c:80:08:62:21:1b:3c:17:f5:7e:e0:e8:f2:7e:ba:
                    2c:87:21:61:c7:7d:61:88:13:6f:93:4c:ac:4c:ef:
                    26:11:44:95:69:a1:98:45:5f:e3:42:45:c0:7a:e0:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EA:C5:49:54:51:92:8F:57:F0:D8:41:DF:71:28:7B:61:68:D1:0A
            X509v3 Authority Key Identifier:
                keyid:1A:6E:68:69:60:A7:D4:7F:12:86:E3:D1:5A:8D:A8:9E:12:08:88:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/0/1A6E686960A7D47F1286E3D15A8DA89E120888BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:fe:6c:4b:92:93:58:3c:2c:58:b2:00:2b:52:b0:44:28:
         a4:be:10:d3:46:88:a0:d3:61:d5:90:fd:c1:4d:b8:5a:b7:d9:
         fe:9b:6d:cd:d7:25:3d:61:96:a6:12:13:ef:dd:f9:aa:1f:9e:
         b4:7f:f1:37:f0:d0:ae:94:d9:bf:2c:c9:f1:69:7a:0b:97:33:
         d1:91:94:e8:88:ca:f8:90:33:6d:5e:d3:df:0b:44:4e:9c:3a:
         98:e8:4f:02:3f:b9:e0:e7:a4:9c:ee:b7:8e:2f:01:6f:6d:c3:
         f9:a5:ae:94:60:77:2f:8b:ac:70:cb:5f:1f:36:86:f0:e2:9c:
         47:0d:30:d6:d5:b5:47:5a:8a:65:4b:9c:26:68:02:73:50:4f:
         fb:a8:32:a3:e3:96:87:aa:68:b9:5d:84:21:98:39:9c:27:e8:
         e7:7f:59:0c:a5:8e:c7:c9:6a:ab:6e:4f:61:d5:b3:69:e1:a0:
         c1:cd:a5:e9:21:46:31:1a:54:e8:23:fa:dc:03:80:ee:3a:ab:
         71:fe:c7:5f:91:91:85:34:08:03:18:2a:c4:6f:d4:5f:4d:6e:
         fa:0c:fb:bf:54:11:7b:b5:91:97:2f:e9:5a:5b:d4:e4:23:e0:
         b0:87:73:73:05:6a:27:7a:82:cd:8e:19:7e:4d:b3:d6:25:ed:
         ba:99:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----