Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.mft
File:                     E1473CEA323A14AC92D6243F4D77A3EB18EB0429.mft (raw, json)
Hash identifier:          53tTjTpKXMgSy1AGeyoqfSy5rPpo+NYiUNIz3LGGZIg=
Subject key identifier:   4E:CB:7F:8A:8B:89:05:BF:37:BF:73:D5:ED:89:88:D2:84:8D:80:A0
Authority key identifier: E1:47:3C:EA:32:3A:14:AC:92:D6:24:3F:4D:77:A3:EB:18:EB:04:29
Certificate issuer:       /CN=E1473CEA323A14AC92D6243F4D77A3EB18EB0429
Certificate serial:       192197659647863C564DE190638829F31AD64ABD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.mft
Manifest number:          01AF
Signing time:             Sun 14 Apr 2024 22:06:54 +0000
Manifest this update:     Sun 14 Apr 2024 22:01:54 +0000
Manifest next update:     Tue 16 Apr 2024 00:58:54 +0000
Files and hashes:         1: E1473CEA323A14AC92D6243F4D77A3EB18EB0429.crl (hash: 0tKpjA0vIo6k1bIDu7yPRnWf2klZu4yWoavzOn4tgt4=)
                          2: 34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (hash: R0mTMPmT39+/Q1gYFSEmJto+IFTeuQd0ZzDEjEuwBdg=)
                          3: 323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (hash: PH/1gBcU6xY+oFgqhtescTUA0m2tnTQicZWBD/drTFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:97:65:96:47:86:3c:56:4d:e1:90:63:88:29:f3:1a:d6:4a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1473CEA323A14AC92D6243F4D77A3EB18EB0429
        Validity
            Not Before: Apr 14 22:01:54 2024 GMT
            Not After : Apr 16 00:58:54 2024 GMT
        Subject: CN=4ECB7F8A8B8905BF37BF73D5ED8988D2848D80A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:ac:ef:45:bf:be:2d:e9:57:ef:c9:73:e5:
                    ff:c3:a3:cb:8a:bc:a0:f1:33:48:ab:50:18:f4:5b:
                    d2:78:cb:8a:ac:a5:99:5e:61:10:b6:5c:4f:8c:34:
                    9a:a6:e2:24:6c:0b:01:f0:57:9a:c1:a9:8d:13:40:
                    2f:a3:58:61:23:4b:79:3d:37:84:cb:0f:ba:21:a5:
                    9d:69:3b:f1:a1:75:e8:69:41:04:9f:44:1b:e7:e5:
                    69:a8:34:19:9c:a9:21:d1:c6:f6:81:47:39:02:94:
                    f7:50:8c:0a:37:50:b0:bc:54:7b:28:e6:cb:1e:2c:
                    2c:56:10:fa:86:15:7d:5d:90:0c:49:fd:c7:74:99:
                    ae:0b:fa:ee:85:a6:91:57:9b:c2:36:7b:37:1c:95:
                    29:2a:46:a6:28:54:57:02:c2:4e:09:6c:ce:b8:1a:
                    c4:e4:c6:79:d7:2b:60:01:15:7f:d7:fb:09:19:fe:
                    2e:25:3d:83:f9:09:00:e8:74:db:52:25:e5:ac:00:
                    83:15:67:d4:81:da:9a:59:53:50:e1:1b:6f:b4:bc:
                    44:09:e9:2d:ce:74:27:27:86:c9:6f:9c:72:e6:4a:
                    92:49:a3:98:24:aa:73:22:5c:1e:73:78:ed:87:2b:
                    45:8c:7f:1d:d1:af:6f:e2:a2:b2:e9:49:55:81:f0:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CB:7F:8A:8B:89:05:BF:37:BF:73:D5:ED:89:88:D2:84:8D:80:A0
            X509v3 Authority Key Identifier:
                keyid:E1:47:3C:EA:32:3A:14:AC:92:D6:24:3F:4D:77:A3:EB:18:EB:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:63:de:b4:96:16:76:d9:b0:69:65:38:d5:a4:a0:26:f3:
         c6:b0:74:8b:53:47:e5:1f:30:c9:1a:bb:52:41:8b:c9:45:16:
         9f:54:ad:54:f6:01:78:c9:a5:87:cd:a3:4c:da:05:04:a0:78:
         78:a5:5a:e3:fb:fd:0b:cb:19:e3:c3:f4:37:02:99:d7:92:bb:
         61:e1:c5:ca:29:49:97:7d:54:cd:ba:ec:32:9a:f9:e3:fc:1a:
         c6:1e:10:73:8e:19:dd:90:3e:20:b8:3a:84:98:62:25:f8:a1:
         94:07:7d:52:67:26:2a:58:85:b7:13:2b:94:ae:58:c9:7d:a3:
         d3:f6:12:eb:28:71:59:ee:3a:4c:20:ab:78:38:07:46:cb:50:
         65:8f:8a:a3:f5:d9:cc:ae:2d:98:ce:20:fa:ef:5b:99:2c:f3:
         78:82:9f:a0:fa:8b:13:e9:a7:d6:b3:78:b6:8c:20:09:48:85:
         86:06:1a:2b:d9:6b:60:4e:a8:73:6a:17:47:9c:aa:f4:07:08:
         20:39:06:7f:21:ca:b5:97:cc:eb:69:f3:77:57:c4:5d:5e:f8:
         f0:31:76:3b:bd:fc:04:ef:4b:79:7d:3a:f5:92:8b:0b:02:c7:
         b6:f5:4e:9d:83:e6:18:53:32:a6:0c:6e:c7:d6:88:1b:96:df:
         8d:49:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----