Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/361C966452230F42267602589EAC8A38BAD379F2.mft
File:                     361C966452230F42267602589EAC8A38BAD379F2.mft (raw, json)
Hash identifier:          c0KcSrYeaT8QjLkNg7HirqOEDR4oJRbtMERqbImhQyw=
Subject key identifier:   6B:E0:5C:D4:46:44:DB:21:4E:FD:F6:26:3D:F0:7A:C2:CE:EE:1E:DF
Authority key identifier: 36:1C:96:64:52:23:0F:42:26:76:02:58:9E:AC:8A:38:BA:D3:79:F2
Certificate issuer:       /CN=361C966452230F42267602589EAC8A38BAD379F2
Certificate serial:       59B1443C1AB28741C8B1D820D05D9B52F1279596
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/361C966452230F42267602589EAC8A38BAD379F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/361C966452230F42267602589EAC8A38BAD379F2.mft
Manifest number:          0223
Signing time:             Sun 14 Apr 2024 19:44:17 +0000
Manifest this update:     Sun 14 Apr 2024 19:39:17 +0000
Manifest next update:     Mon 15 Apr 2024 23:30:17 +0000
Files and hashes:         1: 361C966452230F42267602589EAC8A38BAD379F2.crl (hash: 4cn6AmPt/BftteWE7obPxrz7rKr6iPzwDCYFacwDAZM=)
                          2: 323830343a363934303a3a2f33322d313238203d3e20323730323538.roa (hash: frZIvYDTxPgjuR69QQIubOzJc8wAF+fEUuAKDSWlWaE=)
                          3: 34352e3139312e31322e302f32322d3332203d3e20323730323538.roa (hash: fDyXgIcdigWNilb7ksBXXM5MI7Ene1nFhMtaMPzhfik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b1:44:3c:1a:b2:87:41:c8:b1:d8:20:d0:5d:9b:52:f1:27:95:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C966452230F42267602589EAC8A38BAD379F2
        Validity
            Not Before: Apr 14 19:39:17 2024 GMT
            Not After : Apr 15 23:30:17 2024 GMT
        Subject: CN=6BE05CD44644DB214EFDF6263DF07AC2CEEE1EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:98:ab:f6:c0:84:6b:c5:31:29:39:fb:8e:
                    5c:db:6d:fc:40:e1:bd:f6:f2:56:5c:74:91:69:a3:
                    33:b5:6f:fb:f9:96:18:44:31:ff:58:be:6b:a3:85:
                    c1:7c:9c:65:30:16:d2:87:ad:97:c6:80:a6:74:82:
                    a1:f2:00:01:57:6f:df:6f:0b:b0:32:3a:b3:6d:74:
                    e6:9b:19:f3:02:44:f0:11:24:b2:3d:3d:c8:a7:92:
                    33:f1:e7:e7:a1:80:b2:bd:cf:f7:c1:1c:c2:e2:3e:
                    7f:bc:c7:18:87:26:16:8a:76:89:f0:9f:a6:05:41:
                    53:2d:bf:a5:93:82:6d:28:18:83:1d:33:87:c0:83:
                    88:26:a0:03:1e:55:71:11:1a:50:e8:ce:e5:2b:3d:
                    88:ec:44:a4:81:09:72:80:46:eb:04:e0:c3:cb:bb:
                    75:97:63:f4:b5:a7:50:ea:ac:f2:8d:ee:3a:f0:00:
                    df:e5:e6:74:42:38:02:09:d6:9c:eb:b5:1b:20:3f:
                    a8:fb:93:f1:e4:56:75:60:c1:24:c9:f9:1f:3a:4a:
                    72:a9:93:0b:64:25:9d:e3:25:28:b0:69:4c:28:55:
                    14:95:b5:d5:35:c7:2b:d0:ea:cc:8a:6a:63:b0:cb:
                    95:6b:a9:76:3c:77:71:75:a1:59:f3:ad:26:07:bd:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E0:5C:D4:46:44:DB:21:4E:FD:F6:26:3D:F0:7A:C2:CE:EE:1E:DF
            X509v3 Authority Key Identifier:
                keyid:36:1C:96:64:52:23:0F:42:26:76:02:58:9E:AC:8A:38:BA:D3:79:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/361C966452230F42267602589EAC8A38BAD379F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/361C966452230F42267602589EAC8A38BAD379F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/361C966452230F42267602589EAC8A38BAD379F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:a7:4d:1b:d7:e9:fb:8e:da:2b:d4:dc:7c:07:a7:b8:f7:
         70:ac:75:25:77:16:69:77:34:e8:e1:80:ca:ef:06:3e:be:ed:
         c4:4c:79:63:9c:90:7e:30:33:ae:32:38:3c:48:30:04:f8:42:
         01:8c:2a:90:13:dc:91:d3:a7:01:b1:fd:d3:8b:c2:f8:3d:0e:
         b9:8e:8d:a4:d2:2f:3b:88:4e:c6:10:f8:4f:5f:d5:54:ad:fa:
         79:52:ef:5a:e6:46:aa:60:f1:82:3f:af:95:b0:a9:2e:6a:fb:
         5e:8a:10:b7:db:be:db:01:df:af:49:3a:73:78:b3:6c:cd:36:
         26:4b:2a:56:b5:b7:73:a9:70:1f:19:6f:c5:90:15:15:02:64:
         c9:4f:b3:ad:82:e9:f1:23:6c:b3:03:3e:05:89:f0:0d:c8:61:
         d8:af:7a:48:8d:b6:a9:6e:88:67:4f:a3:6e:d8:f0:33:f6:e6:
         4c:3b:6e:25:43:c8:a8:2f:b1:b3:6e:67:6b:c0:1a:34:fc:09:
         1c:9e:15:8a:be:53:ff:29:91:62:47:aa:c7:a0:35:39:b2:2e:
         4f:cb:7f:09:9d:02:9c:c2:4b:14:ef:e9:4f:34:1b:87:be:31:
         2b:03:9e:87:ab:ee:2e:b2:4a:26:78:99:1f:dd:d2:e1:36:d7:
         0e:f0:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----