Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.mft
File:                     4EC47B56D700BEB7D60AC0588B15D16725707AB1.mft (raw, json)
Hash identifier:          MadKRQbn55K6iHzyU1u5ZJUKDj+kUUFaVwk6WYj3Z6U=
Subject key identifier:   52:8C:1B:96:E0:DA:F7:89:5B:AF:00:1E:0E:94:3C:34:B3:89:0F:07
Authority key identifier: 4E:C4:7B:56:D7:00:BE:B7:D6:0A:C0:58:8B:15:D1:67:25:70:7A:B1
Certificate issuer:       /CN=4EC47B56D700BEB7D60AC0588B15D16725707AB1
Certificate serial:       41AEE03574ED2C3E860DFE08BC56948B7CF0821C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.mft
Manifest number:          0183
Signing time:             Mon 15 Apr 2024 11:14:22 +0000
Manifest this update:     Mon 15 Apr 2024 11:09:22 +0000
Manifest next update:     Tue 16 Apr 2024 11:40:22 +0000
Files and hashes:         1: 323830343a343136343a3a2f33322d313238203d3e20323637343330.roa (hash: gbQZIP9dfq64KM9pwK5POGPUdHz+Zulv4mt3D3Mm/n4=)
                          2: 4EC47B56D700BEB7D60AC0588B15D16725707AB1.crl (hash: Lo+5uEb9/A9VnD5rL22YMhX1kMDQAiYV+0Je0jNGvXI=)
                          3: 3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa (hash: 2+xA9+e1zzje1ZSRj7zZ4JpVtda1loMQ7GnCJwGkgjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ae:e0:35:74:ed:2c:3e:86:0d:fe:08:bc:56:94:8b:7c:f0:82:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC47B56D700BEB7D60AC0588B15D16725707AB1
        Validity
            Not Before: Apr 15 11:09:22 2024 GMT
            Not After : Apr 16 11:40:22 2024 GMT
        Subject: CN=528C1B96E0DAF7895BAF001E0E943C34B3890F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:5b:a8:1a:75:29:d9:06:5e:9b:8f:46:5c:
                    c7:8f:2a:f6:0f:80:cf:a0:a0:6f:1f:e6:bd:ff:c9:
                    b4:61:31:5e:4c:9c:e9:49:12:23:7f:6d:17:90:b2:
                    f0:75:a4:73:41:d6:0a:80:c8:73:68:1f:29:0f:61:
                    c3:28:2d:47:bd:55:be:17:4d:6c:e6:75:66:99:78:
                    04:9b:4d:ae:d8:90:fd:4e:a0:a5:57:b7:c2:71:61:
                    dc:64:8e:3a:cc:48:87:f5:eb:40:f5:8f:16:4b:e7:
                    2d:80:bf:35:ef:1a:05:16:8a:01:b8:8d:06:bd:97:
                    4b:62:97:13:5b:dd:06:da:20:bf:8c:83:4b:31:6a:
                    48:c9:b4:f3:d7:6b:d1:bb:cd:94:f1:a3:20:e0:f6:
                    39:e3:f3:e9:1b:b9:17:05:09:ea:2d:28:7f:80:d4:
                    5b:8b:61:ce:9b:91:73:ea:9e:a3:4e:61:96:d9:38:
                    8e:37:8e:3c:87:f4:47:38:55:31:f0:09:09:b7:1d:
                    6d:13:61:f6:3a:af:31:67:56:85:ac:84:1e:a4:9a:
                    eb:db:44:cc:2d:4d:a1:66:d4:3f:70:de:0a:d1:2d:
                    86:3a:8d:63:d4:0b:d1:d1:93:63:ff:c8:ba:c7:dc:
                    99:41:2e:0c:ff:52:a2:0c:8c:3c:f7:62:4c:d7:c9:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:1B:96:E0:DA:F7:89:5B:AF:00:1E:0E:94:3C:34:B3:89:0F:07
            X509v3 Authority Key Identifier:
                keyid:4E:C4:7B:56:D7:00:BE:B7:D6:0A:C0:58:8B:15:D1:67:25:70:7A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4a:e7:c9:2f:b6:86:a7:3a:4e:e2:08:c4:44:d5:47:00:dc:
         ca:86:65:d0:28:5c:8c:01:d3:46:55:15:ef:55:23:60:31:76:
         00:01:c7:5c:d3:06:6a:c8:e3:30:df:6e:4a:0a:48:3f:d5:f5:
         a2:cd:88:68:1e:b9:ac:de:c3:a5:52:7d:d9:c1:42:ff:15:af:
         df:cc:9f:bd:63:54:80:48:2a:18:fd:40:cd:64:5e:4e:65:66:
         79:d8:c0:da:c2:d3:ed:89:b1:82:ff:10:45:ca:8c:80:16:e1:
         ff:da:81:70:78:a0:b9:6f:32:16:be:c1:32:cb:eb:be:7f:5c:
         1f:cf:05:63:e1:6e:55:16:7c:53:9b:87:3c:7e:33:9c:82:1b:
         a4:58:63:d5:3e:dc:a1:83:78:52:2f:ae:57:9c:0a:05:05:61:
         07:b6:a7:32:62:83:89:2a:a6:7e:11:0f:46:f3:e1:4b:9f:de:
         7f:59:3b:19:38:26:7e:1c:43:53:6c:cb:cb:ca:f8:ca:62:b2:
         31:e3:ec:2e:b7:3b:05:4a:64:7a:24:1c:8a:61:72:50:c0:cc:
         0a:8b:8b:4e:30:05:18:48:e9:84:31:f5:81:f8:65:f2:c1:bb:
         67:29:a7:bc:09:9b:31:ab:70:26:4e:2c:c1:c2:da:e6:64:1b:
         ea:fc:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----