Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.mft
File:                     002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.mft (raw, json)
Hash identifier:          3kUrWEEEBcxN2c4qjObpps5xCZeDd/3yPOqn2GFt4CA=
Subject key identifier:   CA:FD:AD:F5:1B:FB:A1:B0:69:20:1D:2B:47:54:C1:50:3D:AF:54:FB
Authority key identifier: 00:2B:DE:82:06:BA:D8:1B:66:C1:D4:59:4F:9D:7B:CF:51:2D:8E:2A
Certificate issuer:       /CN=002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A
Certificate serial:       6F0287556963993A0139639B04616641C237819D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.mft
Manifest number:          0290
Signing time:             Mon 15 Apr 2024 04:39:50 +0000
Manifest this update:     Mon 15 Apr 2024 04:34:50 +0000
Manifest next update:     Tue 16 Apr 2024 04:59:50 +0000
Files and hashes:         1: 002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.crl (hash: o6cEx0EYPDEJygpbGii4JLZ4NkJ1hBnpcpP9Z8iXDWQ=)
                          2: 3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa (hash: cpOCNCEqm++TlGn5ovgLCJ71JR4IyFzCbO6CVAY9v+Y=)
                          3: 323830343a366231343a3a2f33322d3334203d3e20323730333736.roa (hash: pz+3ocdI165It3zqVaWMoa4E2/WE9ETSe/a/IvgQSi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:87:55:69:63:99:3a:01:39:63:9b:04:61:66:41:c2:37:81:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A
        Validity
            Not Before: Apr 15 04:34:50 2024 GMT
            Not After : Apr 16 04:59:50 2024 GMT
        Subject: CN=CAFDADF51BFBA1B069201D2B4754C1503DAF54FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:af:6e:a0:c7:a4:8e:00:9f:91:69:16:37:
                    e5:62:17:3e:a0:db:5a:17:11:41:7e:2f:c2:47:2d:
                    33:f7:4d:8c:99:4d:67:6c:6e:15:45:9a:27:64:99:
                    82:28:52:ae:f4:c0:d6:d8:c9:a8:aa:21:39:7b:6e:
                    41:e1:b9:9d:7c:f9:99:7a:fd:87:85:f3:43:f7:9f:
                    67:85:07:4e:f2:99:63:da:31:81:95:7c:7d:30:ff:
                    01:e4:86:96:b8:c7:61:90:7c:36:7f:ee:cd:5b:2e:
                    4a:91:be:d4:82:0a:14:45:2c:77:e6:c8:5a:8a:93:
                    00:13:11:88:4c:71:69:da:2d:6a:8b:7d:d2:08:64:
                    b8:13:c7:91:fa:b6:44:49:80:7c:82:49:b6:6a:ae:
                    7f:a3:b3:be:d5:c4:6c:dc:7a:92:1d:05:67:54:81:
                    ad:18:ec:70:e3:2d:68:fe:91:f8:bc:45:44:cc:93:
                    f7:20:60:fb:1b:ab:65:d2:0b:55:46:3e:6e:87:40:
                    a1:6c:e2:c6:07:a3:16:82:f3:97:05:bd:e4:71:60:
                    68:36:15:a8:0b:ff:c3:73:48:ff:05:5c:e1:c4:b7:
                    33:ce:dc:ff:3e:db:75:f4:76:03:57:4b:f3:6d:91:
                    d7:65:ec:64:88:61:f2:9f:cb:86:9c:23:01:d6:36:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:AD:F5:1B:FB:A1:B0:69:20:1D:2B:47:54:C1:50:3D:AF:54:FB
            X509v3 Authority Key Identifier:
                keyid:00:2B:DE:82:06:BA:D8:1B:66:C1:D4:59:4F:9D:7B:CF:51:2D:8E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:a3:cf:85:7c:a5:ce:24:34:b9:0c:2e:a7:2f:ce:af:87:
         09:cf:56:ba:9f:9e:55:13:45:7e:de:23:ba:5d:b8:49:9b:d5:
         25:d1:f4:17:67:d3:cd:21:ee:ba:0f:8f:53:9a:55:b8:b2:c7:
         3d:6a:c5:03:40:47:fb:a8:10:58:94:07:52:f0:e5:f7:0b:0b:
         c6:5c:a8:ee:5b:d3:93:50:85:d2:4d:cf:2a:9b:ab:7f:d4:37:
         86:33:cb:1d:13:44:a9:a5:a4:57:6d:dc:72:69:10:d9:66:4a:
         87:48:45:bc:9d:82:e3:a6:8b:3a:2d:14:1a:90:26:96:70:a0:
         a0:e3:83:85:8e:d2:c7:d9:1c:b0:a1:d6:fe:22:7a:7b:ee:36:
         7d:3f:d9:c5:3d:79:e9:ba:b2:a2:4e:8d:38:87:d1:7e:fd:16:
         fe:9f:84:6d:0a:fb:ab:2f:6c:5b:e4:b1:2e:01:4e:15:eb:87:
         15:88:16:05:c6:f3:6b:ab:75:86:a7:88:e1:8b:f3:d4:1a:67:
         4c:79:9c:29:3d:30:40:31:18:6e:f6:be:6b:66:1f:10:59:91:
         8e:3f:58:06:cc:97:f6:67:44:8a:3e:30:f3:62:af:a7:94:ec:
         b8:f9:1b:da:ba:33:c4:d4:63:18:c4:a9:1c:0f:c4:c7:8a:e9:
         f7:7c:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----