Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/4E78B7306C877278F785A7687C3E8BE6338F7A91.mft
File:                     4E78B7306C877278F785A7687C3E8BE6338F7A91.mft (raw, json)
Hash identifier:          FjM4qIJO6Ly8JbrkYUf9Q7j1qBve4eAp8BDMavkIVNE=
Subject key identifier:   4E:6A:21:F6:2A:8B:0F:76:E0:9A:91:5E:C8:43:03:A6:B5:5B:F3:11
Authority key identifier: 4E:78:B7:30:6C:87:72:78:F7:85:A7:68:7C:3E:8B:E6:33:8F:7A:91
Certificate issuer:       /CN=4E78B7306C877278F785A7687C3E8BE6338F7A91
Certificate serial:       422029379C5073054B59B7E96B943C5985642F12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E78B7306C877278F785A7687C3E8BE6338F7A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/4E78B7306C877278F785A7687C3E8BE6338F7A91.mft
Manifest number:          3D
Signing time:             Sat 18 May 2024 06:21:02 +0000
Manifest this update:     Sat 18 May 2024 06:16:02 +0000
Manifest next update:     Sun 19 May 2024 09:39:02 +0000
Files and hashes:         1: 34352e3138362e3135362e302f32322d3234203d3e20323639343939.roa (hash: b2uBwJ9ol7+2ZeQefJuVe4qXPs6kEbdWHsQiLzT/BxA=)
                          2: 4E78B7306C877278F785A7687C3E8BE6338F7A91.crl (hash: QHPqj9vQ3jXyIwu1APZ3cEZbplBMPJZ58dhsNb4JlAg=)
                          3: 323830343a363538633a3a2f33322d3430203d3e20323639343939.roa (hash: JPhxO5Dgu35WiEkNVtiOLSjFpC0pTJKDugWn7ydLxtA=)
                          4: 323830343a363538633a323030303a3a2f34382d3438203d3e20323639343939.roa (hash: 24uB0R6mPSv7ENn/vPGfBnjX+dWr9xBdgsuJ3WHdLlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:20:29:37:9c:50:73:05:4b:59:b7:e9:6b:94:3c:59:85:64:2f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E78B7306C877278F785A7687C3E8BE6338F7A91
        Validity
            Not Before: May 18 06:16:02 2024 GMT
            Not After : May 19 09:39:02 2024 GMT
        Subject: CN=4E6A21F62A8B0F76E09A915EC84303A6B55BF311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:a9:b0:f6:9d:da:1f:4d:a6:37:1a:a2:cc:
                    09:78:5f:2a:81:27:a7:92:92:d2:aa:74:32:99:f7:
                    f5:a4:30:05:e0:f7:f7:28:83:5f:bf:3b:85:cb:fc:
                    e1:10:2c:a2:45:93:a3:31:8e:d7:02:fc:6d:4c:6c:
                    f2:2e:e8:84:8e:07:e4:e2:ee:a7:13:bc:1a:2b:6f:
                    ed:fb:5a:1a:30:84:21:2c:e7:55:f9:f3:f1:2f:a2:
                    af:70:e9:c9:26:04:da:22:72:b4:e1:0c:34:54:52:
                    e9:d5:a0:90:ff:78:ec:79:58:91:e4:dc:48:a3:7b:
                    6c:95:b6:a3:67:77:e1:d8:9e:1c:b0:75:d2:17:c1:
                    ac:6b:e8:df:a9:99:0c:cd:be:3d:f4:3f:19:7f:b2:
                    72:1f:1e:3f:80:4c:08:86:3c:ce:76:7a:72:2d:4b:
                    8e:35:35:ad:69:27:86:dd:8c:9d:41:24:16:51:08:
                    c2:f7:67:1a:a0:94:dd:f1:4b:5b:f2:6e:8b:ca:ee:
                    a4:20:c2:dc:9b:96:fe:f7:1d:c0:b1:8f:3d:08:48:
                    a6:60:71:5d:46:35:f2:97:b6:93:94:cd:97:5a:30:
                    39:28:26:29:7b:fb:7d:89:cf:36:78:46:aa:25:70:
                    07:79:26:13:7f:e4:d1:b2:35:46:51:b1:b0:c0:41:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6A:21:F6:2A:8B:0F:76:E0:9A:91:5E:C8:43:03:A6:B5:5B:F3:11
            X509v3 Authority Key Identifier:
                keyid:4E:78:B7:30:6C:87:72:78:F7:85:A7:68:7C:3E:8B:E6:33:8F:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/4E78B7306C877278F785A7687C3E8BE6338F7A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E78B7306C877278F785A7687C3E8BE6338F7A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/4E78B7306C877278F785A7687C3E8BE6338F7A91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:79:58:4f:1f:3e:f6:d0:34:d6:aa:f1:24:74:f0:de:97:21:
         d9:56:54:d0:16:a7:5c:71:64:1a:fc:3f:aa:fa:72:cb:f7:d9:
         52:df:cc:fb:42:46:bf:4f:dd:c9:f9:07:d5:1d:bd:33:79:5f:
         27:35:0a:9f:ac:cb:1b:ff:00:96:36:2b:95:88:6d:17:a6:50:
         97:b5:30:c6:92:89:df:e3:b8:ed:de:5c:13:6f:9a:32:7c:f6:
         67:ab:c4:cb:51:f4:93:06:16:cc:7a:a7:65:e8:19:d2:ce:8b:
         c6:55:fb:97:57:c1:06:a4:db:31:90:12:be:b0:78:19:37:84:
         10:e9:73:d4:ce:67:46:4d:a1:7c:89:68:d7:c9:62:60:09:e3:
         f9:68:fa:9f:96:83:42:16:44:18:44:8f:45:6f:bb:80:e8:8a:
         b1:f5:4c:4f:8d:07:28:d0:e0:cc:a3:f2:ff:dc:04:a5:2b:f7:
         00:f3:8a:76:f5:90:9d:3a:a8:50:57:8f:0a:e1:5b:cb:e2:7f:
         ec:ad:1f:d1:b8:b0:a5:17:2e:e5:9f:c9:6c:11:73:9c:f6:78:
         fa:68:ff:18:0a:95:db:d1:40:78:13:84:07:0e:aa:d5:51:e9:
         e0:36:ec:fe:5a:c9:8b:09:3f:3b:09:f5:eb:01:dd:d7:86:60:
         3e:19:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----