Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.mft
File:                     A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.mft (raw, json)
Hash identifier:          H9nFRJyIzL/pdvKxq97wwKKqn6yECHpsFwO+f0vjNPQ=
Subject key identifier:   F1:D6:0C:1B:59:E1:5E:04:78:59:61:98:4B:75:88:8F:68:89:F3:D4
Authority key identifier: A5:4C:68:89:46:51:8E:DD:F4:A5:EC:CF:BC:F9:D7:20:E1:3E:C6:4E
Certificate issuer:       /CN=A54C688946518EDDF4A5ECCFBCF9D720E13EC64E
Certificate serial:       503AD8954182EBCE677B4C0562CA38E9F601D718
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.mft
Manifest number:          0268
Signing time:             Mon 15 Apr 2024 05:01:43 +0000
Manifest this update:     Mon 15 Apr 2024 04:56:43 +0000
Manifest next update:     Tue 16 Apr 2024 06:05:43 +0000
Files and hashes:         1: A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.crl (hash: qgMOf9aTBPBUZD7JW2tSEqpob+2h6iCEyxQZ3lG3Hig=)
                          2: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: mg/ht94MZWiCrxww5BliFsLgE5q9LpjbN4FzkQ7zLkg=)
                          3: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: ZV0xTWZc3PFSf8CBkO62rRxMVbS/VerEKN9GeIQaIEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3a:d8:95:41:82:eb:ce:67:7b:4c:05:62:ca:38:e9:f6:01:d7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54C688946518EDDF4A5ECCFBCF9D720E13EC64E
        Validity
            Not Before: Apr 15 04:56:43 2024 GMT
            Not After : Apr 16 06:05:43 2024 GMT
        Subject: CN=F1D60C1B59E15E04785961984B75888F6889F3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:71:de:4d:f7:bd:63:db:89:2f:a2:c1:40:
                    5d:ec:c5:4b:54:fb:1d:79:d3:73:ee:7a:dd:0c:47:
                    e5:07:8f:c4:61:1d:18:44:de:84:78:a7:94:60:1e:
                    c8:a2:bc:70:72:9f:b7:ed:7f:bd:5a:9c:89:14:54:
                    25:ed:ed:aa:2d:44:a7:c1:2c:a7:b0:a2:44:b4:1e:
                    a4:ed:c7:e4:8e:dc:a4:3b:ee:59:0d:08:8c:4e:14:
                    79:27:a7:30:61:49:df:ee:e6:be:ac:4e:cb:d0:0b:
                    bd:3c:a3:e6:2b:93:2f:3e:e6:54:f3:54:91:52:5c:
                    53:cc:3a:e1:ef:48:1f:f1:51:08:a8:23:69:e5:a3:
                    0c:db:1c:ef:89:04:73:c5:68:37:97:be:5e:45:72:
                    18:33:3b:5c:30:e7:1f:38:c0:8d:39:82:f0:e4:60:
                    dd:cd:98:a2:44:b5:43:ed:be:32:95:49:97:10:07:
                    38:0f:d0:d4:66:00:1f:b4:ab:29:04:88:9f:6b:17:
                    c7:80:23:34:e6:6f:31:4e:5d:d0:0d:45:dc:b3:2c:
                    3f:b9:bb:96:2f:31:04:20:88:a9:b3:05:11:f9:4f:
                    5f:b0:08:60:85:05:30:9e:a9:ca:f1:62:49:8a:de:
                    6b:be:7a:78:ca:ea:02:c0:ad:16:77:39:75:f7:ad:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D6:0C:1B:59:E1:5E:04:78:59:61:98:4B:75:88:8F:68:89:F3:D4
            X509v3 Authority Key Identifier:
                keyid:A5:4C:68:89:46:51:8E:DD:F4:A5:EC:CF:BC:F9:D7:20:E1:3E:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4e:e9:fd:46:06:69:84:6b:8d:cf:0c:c3:23:e7:8a:a8:8f:
         87:ce:d8:43:56:7e:3a:2f:30:fb:22:75:fd:2b:a3:4c:ee:ab:
         62:35:e3:49:df:b0:05:48:18:fb:79:f9:4c:dd:a8:b4:70:68:
         12:08:cc:d0:2c:c7:ca:f8:32:05:4a:a5:05:d6:c2:68:df:92:
         7a:ed:0d:c8:c3:19:36:86:9a:c9:cc:67:7b:11:2c:a3:e4:9f:
         80:10:be:26:36:9c:31:f7:c0:9e:c8:99:56:61:25:b5:c1:41:
         44:d2:7a:92:22:0a:32:6f:54:78:a1:23:e0:93:7e:2a:89:17:
         2a:0d:5c:39:6c:67:55:1f:f3:be:30:a8:a7:73:ed:b9:69:7e:
         d7:2e:29:34:b7:5d:bc:39:46:54:bb:6a:3e:fa:34:6d:0c:0a:
         30:6e:08:bf:aa:5b:25:d6:5f:00:21:8d:0c:b8:8f:e8:b9:bf:
         18:c8:80:fd:57:30:f6:7c:20:81:f0:0b:0c:77:2e:de:79:69:
         b3:23:51:27:31:df:44:b2:b9:82:83:bb:db:53:83:4d:ff:42:
         9f:1a:de:33:e2:3d:6b:7d:39:83:1e:03:f2:01:2b:c9:a2:66:
         a7:71:6f:3b:74:33:b7:90:45:49:95:37:a3:26:87:a1:b5:9c:
         1b:d2:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----