Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.mft
File:                     C45BE1EABA367C0B81A07848E5BDE00DAED3160E.mft (raw, json)
Hash identifier:          3L7NsHL1rk/JGuquhVpe4hw8yo+1yW/G8KPKrGtOf5w=
Subject key identifier:   CD:2E:2E:02:7D:47:B2:EE:DB:6C:34:AC:6D:31:4D:1E:F5:B1:8D:A6
Authority key identifier: C4:5B:E1:EA:BA:36:7C:0B:81:A0:78:48:E5:BD:E0:0D:AE:D3:16:0E
Certificate issuer:       /CN=C45BE1EABA367C0B81A07848E5BDE00DAED3160E
Certificate serial:       49AB02DE5BC4B074FC640E1C16109A360741F60C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.mft
Manifest number:          3A
Signing time:             Thu 16 May 2024 13:41:56 +0000
Manifest this update:     Thu 16 May 2024 13:36:56 +0000
Manifest next update:     Fri 17 May 2024 16:23:56 +0000
Files and hashes:         1: 323830343a336262343a3a2f33322d3438203d3e20323636313636.roa (hash: 65Otm86Ofy365u7XxbNH9BSVq/dfoNH5gNPGX5twN4g=)
                          2: C45BE1EABA367C0B81A07848E5BDE00DAED3160E.crl (hash: JdpN0ROW7IYlkpHMuPLvMc1lxP8QhlZRFsy7xJyvWL0=)
                          3: 37322e34342e32302e302f32322d3234203d3e20323636313636.roa (hash: Q3jzY8DmrODu2YMkrOKfboTixmj3JCrKtb881rKdBU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ab:02:de:5b:c4:b0:74:fc:64:0e:1c:16:10:9a:36:07:41:f6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45BE1EABA367C0B81A07848E5BDE00DAED3160E
        Validity
            Not Before: May 16 13:36:56 2024 GMT
            Not After : May 17 16:23:56 2024 GMT
        Subject: CN=CD2E2E027D47B2EEDB6C34AC6D314D1EF5B18DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fd:3b:7b:35:9d:a7:b4:22:50:87:99:99:92:
                    f2:1a:be:d7:40:8f:86:64:ae:ab:50:c5:ce:28:38:
                    23:70:c9:ed:59:ea:2f:24:a6:0a:3b:59:38:95:81:
                    99:0a:c5:7f:fa:58:09:94:cc:52:fb:a7:f5:d9:76:
                    d8:bd:35:ad:9e:63:43:84:03:fa:33:7e:be:8f:8f:
                    7b:02:46:e0:01:9d:87:75:ac:d2:8d:b0:d2:75:99:
                    82:95:86:9b:ec:35:5a:17:2f:5f:e1:fc:7f:52:dc:
                    03:34:03:08:54:95:8a:08:10:7d:f1:8f:ec:a6:f3:
                    83:69:98:cc:28:02:8b:cb:19:5a:a0:64:a4:dc:ae:
                    65:f8:ed:be:58:68:30:92:4a:61:e8:75:f7:8a:cc:
                    74:de:be:de:a8:80:53:e0:4e:5b:25:21:fa:49:8e:
                    8a:7c:65:79:3b:21:3c:fa:bf:16:49:03:88:5c:3f:
                    ec:42:be:e7:15:0d:e8:06:e6:16:1b:30:8c:be:9e:
                    c2:ee:f4:89:46:47:17:26:03:ca:7a:fc:db:37:5e:
                    1f:40:69:f6:c3:93:96:b3:bb:de:53:e6:d7:d0:93:
                    04:a5:62:20:51:c4:7a:37:a5:88:a0:6e:e6:c3:e9:
                    fa:2f:78:c8:f1:15:a8:a1:a1:87:e5:66:c7:83:93:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:2E:02:7D:47:B2:EE:DB:6C:34:AC:6D:31:4D:1E:F5:B1:8D:A6
            X509v3 Authority Key Identifier:
                keyid:C4:5B:E1:EA:BA:36:7C:0B:81:A0:78:48:E5:BD:E0:0D:AE:D3:16:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/1/C45BE1EABA367C0B81A07848E5BDE00DAED3160E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e2:77:7f:e8:4d:4d:cb:9a:67:27:71:08:67:ec:00:5f:8a:
         65:90:52:a7:51:99:3e:e1:88:bf:4c:1b:89:3c:df:d2:db:ac:
         95:b3:d7:a4:c4:9a:68:96:ee:d3:02:5e:af:0d:5d:fd:2f:e5:
         cd:25:77:a8:13:55:94:ad:ab:14:f7:8a:02:23:07:2a:2f:3e:
         7e:c2:17:ad:22:d4:b4:6c:e1:9e:03:06:0b:4c:fc:43:2f:fc:
         74:c6:41:e3:0f:f6:bd:5c:3c:bd:5e:2a:6a:10:b4:28:c8:a8:
         4d:90:eb:5b:b3:c3:53:80:c3:57:46:e2:1c:af:90:23:2e:3a:
         b4:4b:92:d4:16:fb:39:b2:47:c8:03:69:18:59:bb:cd:06:aa:
         6a:dd:16:c7:39:95:22:09:b3:83:87:44:d4:f1:aa:f0:e7:d2:
         8f:79:58:c3:e6:5f:fb:36:4f:f2:73:0b:e4:28:a6:e0:ae:94:
         49:db:b8:3a:ec:a8:87:67:8a:f2:c6:7e:82:0a:d5:b4:70:f7:
         e8:60:24:04:de:b7:a6:d2:df:c1:1a:f7:47:22:2c:69:96:5c:
         31:5e:a9:3d:18:b8:7d:83:9d:81:ed:24:7d:f5:d4:f2:91:64:
         df:d5:30:f3:50:66:87:df:27:23:6e:b4:f5:b7:08:01:f7:a3:
         60:09:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----