Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.mft
File:                     870C2AD8E67C6E1CC63AAB945280201586BAC84A.mft (raw, json)
Hash identifier:          UFEs5PKM3TQpzu7E443kVIre+njmatJRZgNXEDFyWrc=
Subject key identifier:   21:FB:74:F0:21:9D:D8:09:FF:1E:A3:9C:DE:AE:9C:DB:D9:50:88:48
Authority key identifier: 87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A
Certificate issuer:       /CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
Certificate serial:       219F2972C88A38B951340034079931AF7CF13521
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.mft
Manifest number:          1E
Signing time:             Mon 15 Apr 2024 10:32:47 +0000
Manifest this update:     Mon 15 Apr 2024 10:27:47 +0000
Manifest next update:     Tue 16 Apr 2024 12:07:47 +0000
Files and hashes:         1: 870C2AD8E67C6E1CC63AAB945280201586BAC84A.crl (hash: LMsbHFmo+OUZ2tc5RZEdqanJf4N437y/PwfPxBhz7mo=)
                          2: 323830343a363565633a3a2f33322d3438203d3e20323639353233.roa (hash: jTN8bcFyAsZ2u9cka4R+9V75FrLZkxkEbM2jhiobcuU=)
                          3: 34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (hash: gJ++ThSKgBhva4bsl9J4UFQ4ve1eT9IIx8vszn3X/6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9f:29:72:c8:8a:38:b9:51:34:00:34:07:99:31:af:7c:f1:35:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
        Validity
            Not Before: Apr 15 10:27:47 2024 GMT
            Not After : Apr 16 12:07:47 2024 GMT
        Subject: CN=21FB74F0219DD809FF1EA39CDEAE9CDBD9508848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:a0:33:c4:0e:5f:e5:86:88:56:5d:de:e8:
                    93:8a:82:a2:a5:da:c1:1c:aa:0a:a0:55:a0:dd:73:
                    ee:15:32:18:ca:11:37:4c:d1:54:8d:f9:02:bf:64:
                    3c:9f:87:d4:cf:2a:ab:a2:69:68:f8:24:47:6b:ab:
                    32:b4:ab:e1:67:3e:df:2d:3a:34:10:e6:2e:f5:6d:
                    33:1f:b7:fa:3a:8d:d0:9c:19:50:82:51:a8:69:44:
                    0f:d8:fc:e1:f6:ee:c2:65:83:89:e3:05:f3:4e:d7:
                    d4:80:6e:7e:30:cc:c4:55:9d:d1:06:83:8a:39:d4:
                    78:1c:c8:1d:ee:63:8a:40:d2:93:26:c8:ab:ae:01:
                    14:61:b9:af:d9:08:09:1e:31:71:55:35:45:45:9f:
                    9b:89:9e:c4:8d:98:0d:ac:af:0d:8f:a0:e9:de:0a:
                    bb:14:4a:21:27:e1:ed:0b:71:8d:ed:63:f0:52:c5:
                    b1:2f:a0:ae:63:61:e7:1e:7d:80:60:06:56:d2:bc:
                    30:ff:d0:a7:21:16:ee:db:e1:fc:a8:e4:56:44:30:
                    ab:00:42:cb:35:7f:32:9e:47:2e:a3:cb:72:4c:50:
                    b9:61:ec:d9:29:10:34:08:6b:3e:b4:c1:c7:d9:4f:
                    ef:e3:8a:9e:28:fa:87:07:5f:c7:ee:4c:80:a2:2f:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:74:F0:21:9D:D8:09:FF:1E:A3:9C:DE:AE:9C:DB:D9:50:88:48
            X509v3 Authority Key Identifier:
                keyid:87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:4a:fe:39:cd:de:b4:4d:dd:dc:c9:2b:d6:f1:81:b8:50:
         d4:13:32:61:7e:24:c4:b4:7a:58:ab:c0:93:03:0a:38:60:ad:
         10:24:06:46:57:62:63:e6:b1:2d:27:ae:dc:9e:38:6c:4d:98:
         d3:7d:33:f0:15:7e:c7:87:c9:a4:7e:4a:70:9a:1d:71:dd:0d:
         32:74:c0:ef:d7:a7:d6:ea:2e:12:11:53:29:e4:38:06:a0:cc:
         48:c2:9e:a9:71:26:e6:d4:ec:74:1b:aa:55:0b:15:c5:3e:90:
         7c:8b:21:7c:6f:8c:c1:df:56:99:56:47:4b:6c:b8:68:f2:91:
         ab:b6:6b:bb:72:c5:08:ec:1a:36:05:31:cc:be:ee:ee:91:90:
         1f:48:19:66:05:dd:fd:e4:55:52:b6:30:53:cd:8c:70:35:9c:
         25:a2:cb:f8:ea:bb:2c:4b:8f:91:39:dd:3e:d3:06:55:80:e3:
         17:51:e2:e1:b5:6a:1a:2a:23:05:24:4c:da:97:cc:4e:4f:57:
         5c:85:e2:e2:7d:b0:79:cc:c9:1e:14:74:89:7b:c0:9b:60:8d:
         53:5f:aa:6e:a7:90:b1:3c:d1:c6:33:12:13:fb:ea:63:fc:14:
         99:90:5d:17:c5:de:04:35:dc:a2:69:97:21:ba:6c:44:fe:09:
         97:d2:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----