Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.mft
File:                     72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.mft (raw, json)
Hash identifier:          lnhV8swYjOpdhY0KB1mXMMLX9sDVS2DW8ppvwJa54I8=
Subject key identifier:   FF:B8:FB:26:4D:33:91:36:EE:21:B9:AF:72:6D:80:A3:BF:4D:5E:F1
Authority key identifier: 72:ED:E5:79:83:FD:A3:5F:B5:50:77:EB:3C:D5:9C:7F:D7:BF:98:55
Certificate issuer:       /CN=72EDE57983FDA35FB55077EB3CD59C7FD7BF9855
Certificate serial:       4B8E8A4F0683DBF64BAF756D0D7DE8A8BFEB0C30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.mft
Manifest number:          30
Signing time:             Mon 15 Apr 2024 02:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 02:15:38 +0000
Manifest next update:     Tue 16 Apr 2024 03:23:38 +0000
Files and hashes:         1: 72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.crl (hash: 4vTGyyMrbe63dk5hb1KPKrMeerNMBqrghwLzc5aFc0M=)
                          2: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: AdC2xJnYb/PPgCFbNw7RD8IBWsGshKGsCxFDkUUkCNk=)
                          3: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: ZPQ2YdDi3GieD/ey8JJGr+m2Zd0fg80qayhToKZ+qXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8e:8a:4f:06:83:db:f6:4b:af:75:6d:0d:7d:e8:a8:bf:eb:0c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72EDE57983FDA35FB55077EB3CD59C7FD7BF9855
        Validity
            Not Before: Apr 15 02:15:38 2024 GMT
            Not After : Apr 16 03:23:38 2024 GMT
        Subject: CN=FFB8FB264D339136EE21B9AF726D80A3BF4D5EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:b3:85:cd:7e:6d:ed:fb:e1:57:f5:49:ee:
                    44:12:dc:af:7f:d8:31:02:13:b5:4d:7a:b4:96:25:
                    52:87:0c:43:51:04:98:7f:85:45:e7:64:af:a5:57:
                    60:bf:86:19:f3:75:16:18:65:1f:8e:57:73:fd:62:
                    e0:09:08:b6:e4:89:89:e8:37:aa:5d:62:94:e3:50:
                    67:6e:79:3a:b1:c9:fa:70:ca:e6:1c:e3:4c:8b:7f:
                    c3:d5:77:82:ee:52:43:0a:5e:4d:91:52:43:bc:99:
                    0c:cf:04:b2:17:bf:e4:65:d0:e9:71:26:89:52:69:
                    8c:38:b1:90:6f:0e:1e:15:79:4a:e6:8b:fd:3e:d2:
                    80:ce:dc:64:7b:6d:c3:61:85:f2:6e:9f:f4:17:02:
                    c0:09:24:c2:d0:c1:0e:29:94:87:82:ca:ae:c5:18:
                    69:25:4c:d5:0e:9e:2e:f2:1e:e2:1f:84:ec:bc:2b:
                    dc:0e:4e:f3:71:50:e9:5e:d6:57:34:e1:51:40:b9:
                    62:1b:93:66:7d:02:34:1f:b6:51:7e:de:d3:46:e9:
                    d4:9a:66:48:0f:26:0e:65:0b:9a:2c:ac:1c:60:0f:
                    c8:ad:76:1b:d9:5e:de:6c:ac:55:7c:62:15:37:b8:
                    63:b3:78:33:db:09:e9:d6:2b:fe:01:1c:c4:b8:d1:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:FB:26:4D:33:91:36:EE:21:B9:AF:72:6D:80:A3:BF:4D:5E:F1
            X509v3 Authority Key Identifier:
                keyid:72:ED:E5:79:83:FD:A3:5F:B5:50:77:EB:3C:D5:9C:7F:D7:BF:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/0/72EDE57983FDA35FB55077EB3CD59C7FD7BF9855.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:77:ee:64:a6:7f:70:b7:95:1e:db:7d:71:04:37:e2:65:
         ac:30:c4:ad:8f:67:f7:50:34:4a:59:23:4f:54:2f:03:1d:56:
         e1:5a:b4:b9:ab:2c:42:eb:3c:87:d0:0f:7f:80:72:1d:61:59:
         da:b7:28:e2:96:28:2e:4e:d9:91:17:40:21:fc:70:03:8c:4e:
         f2:43:66:75:4f:e7:df:9c:c4:20:ff:99:58:4c:f8:06:de:ce:
         f9:ec:b3:dd:90:5b:36:64:03:34:af:b8:cd:22:b1:fb:b4:1c:
         87:7f:10:c3:a0:f6:b9:2f:88:c2:bb:1f:ca:ea:ca:be:28:f9:
         8c:b1:40:7e:58:1d:59:5e:56:7b:b9:48:e0:91:60:fc:9c:87:
         4a:2e:9d:29:ff:3a:ce:32:75:5a:6e:6b:4d:bc:17:46:b8:65:
         36:aa:a3:1f:3a:00:d9:6e:4a:3c:f8:c8:dd:a8:f6:fc:1e:99:
         32:50:a4:41:67:55:15:7f:fe:96:a9:75:e9:41:ac:d1:3f:cb:
         2b:7e:8f:3b:5a:2e:91:20:1c:80:b1:6a:be:94:a2:ca:24:61:
         30:d5:b6:46:ec:f1:5b:9c:e7:61:22:2f:30:b4:fc:08:0c:70:
         1a:27:41:45:2a:17:1b:1f:f8:bc:84:89:3f:b2:63:00:4f:65:
         8f:d4:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----