Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.mft
File:                     21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.mft (raw, json)
Hash identifier:          B/Jn0qaDsa/+VclQhjlNsJvAjbNfZdOaW6xCPTR2dV0=
Subject key identifier:   7B:BF:39:E5:70:29:07:07:07:F7:FD:64:C6:C7:5A:A5:91:2A:AC:18
Authority key identifier: 21:D6:2F:8E:04:AF:4A:1D:2B:AC:A5:BE:93:64:FD:4C:F0:2D:D2:DB
Certificate issuer:       /CN=21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB
Certificate serial:       1F25A42480B4DFBE51FDB49F3B238386E7CE1E59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.mft
Manifest number:          0285
Signing time:             Sun 14 Apr 2024 19:40:56 +0000
Manifest this update:     Sun 14 Apr 2024 19:35:56 +0000
Manifest next update:     Mon 15 Apr 2024 20:48:56 +0000
Files and hashes:         1: 34352e3137392e32342e302f32322d3234203d3e20323639303633.roa (hash: K6vC20JFk1lkiS1RWjoH1jWPgd2dQ7L3Gg5NjIFnszw=)
                          2: 323830343a356565343a3a2f33322d3438203d3e20323639303633.roa (hash: fudLqiMqRZSPzupg1kvjFosZOrIiNPPuLZWedh1IyLI=)
                          3: 21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.crl (hash: LXhL/uWo6AEI2JJpi0McSrvK1nqcHOnM/OMi0HhUJTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:25:a4:24:80:b4:df:be:51:fd:b4:9f:3b:23:83:86:e7:ce:1e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB
        Validity
            Not Before: Apr 14 19:35:56 2024 GMT
            Not After : Apr 15 20:48:56 2024 GMT
        Subject: CN=7BBF39E57029070707F7FD64C6C75AA5912AAC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:77:a9:71:75:7a:33:22:62:3b:ce:1e:34:
                    c8:0c:5a:55:06:4b:ef:ff:52:47:b0:b5:94:9a:8c:
                    57:57:09:63:dc:68:f3:0b:7c:30:54:84:49:c4:0e:
                    fd:33:ef:d7:e4:ea:5f:7b:23:f2:76:7f:46:de:1a:
                    0d:f3:37:00:fe:2f:5d:ff:1a:b3:dc:ce:9c:f0:b7:
                    d2:d9:a8:f1:0c:a4:8c:4c:49:78:95:8e:f2:8f:13:
                    ab:88:47:6e:ee:74:9e:9c:94:bb:c2:6f:53:da:ce:
                    5b:14:e3:d2:93:e6:6d:68:78:fa:b2:4f:54:9c:cb:
                    7b:20:d0:c6:61:86:fc:3f:75:20:1f:81:98:0e:4b:
                    9e:29:00:f1:c6:25:83:89:15:b2:0e:98:bf:4a:7c:
                    d2:0b:24:90:7d:c1:87:3b:85:bc:f4:2e:43:e9:a9:
                    6a:2c:27:c8:8e:9a:a3:de:94:d3:1c:6b:e6:6f:b4:
                    13:66:fe:28:6b:6e:a9:67:26:96:c9:21:10:3f:02:
                    6b:a5:bf:e7:65:f6:03:62:9c:4e:1d:05:0c:93:59:
                    5c:b8:ee:c0:e0:6c:29:dd:79:23:22:7a:e9:6d:5e:
                    27:0a:32:96:b8:ff:94:fe:cf:77:00:65:af:ad:6c:
                    21:f8:36:b1:71:0e:03:64:65:0a:5b:ce:e6:a8:cc:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:39:E5:70:29:07:07:07:F7:FD:64:C6:C7:5A:A5:91:2A:AC:18
            X509v3 Authority Key Identifier:
                keyid:21:D6:2F:8E:04:AF:4A:1D:2B:AC:A5:BE:93:64:FD:4C:F0:2D:D2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:80:ec:ce:f4:cf:2c:38:ef:ab:c2:11:1d:4c:66:23:b2:f0:
         73:f4:64:a3:24:e6:80:8e:77:7c:90:37:98:ee:0d:35:97:f8:
         e6:dd:8b:4e:be:29:3e:d3:56:8f:b0:40:60:73:21:fc:4f:8d:
         1c:5f:14:f0:2f:55:17:c4:a7:1e:c1:17:7a:a5:4a:83:80:e6:
         06:e4:17:23:e0:0d:bf:87:dd:d6:68:0e:ad:11:3a:35:4f:74:
         63:e6:3d:3f:16:ab:ea:de:d2:99:cb:09:df:71:82:d2:76:c4:
         7b:2d:bc:da:5c:cf:cd:1d:ff:72:6d:2e:f6:54:d1:63:9c:42:
         f8:e1:de:47:c3:3e:f5:85:41:39:18:59:de:96:4e:42:49:d1:
         ba:60:b2:42:a2:af:c4:6c:36:1c:4e:df:dc:f7:03:5e:13:81:
         90:6c:eb:91:a4:06:e3:37:7b:8e:84:97:cd:f9:76:a6:2c:d8:
         8d:f4:5a:f8:d5:da:72:ab:b7:5f:f4:ee:a2:8e:30:3e:33:7e:
         1a:cd:a8:d5:30:41:53:47:f2:46:d7:d6:49:4b:6b:ba:fa:b3:
         95:1c:be:34:ee:c6:42:84:df:f7:19:56:1d:d2:7d:56:98:78:
         87:bb:ac:35:98:4e:a6:25:aa:d0:de:d0:36:e1:b7:a1:7c:22:
         9b:91:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----