Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.mft
File:                     72D950483459BB286E83221CC667C2CA6132DB5C.mft (raw, json)
Hash identifier:          nMvX/Y/8nLePgo5VlkRCkxKbr345ccUNW/lqLZyg2c8=
Subject key identifier:   39:6A:13:21:77:92:78:8A:50:4F:C3:CD:B8:CA:BF:C1:B2:F1:F2:EE
Authority key identifier: 72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C
Certificate issuer:       /CN=72D950483459BB286E83221CC667C2CA6132DB5C
Certificate serial:       340CAB3C1C9857AFD2E829C9923B50E292CE42C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.mft
Manifest number:          9F
Signing time:             Sun 14 Apr 2024 19:11:40 +0000
Manifest this update:     Sun 14 Apr 2024 19:06:40 +0000
Manifest next update:     Mon 15 Apr 2024 20:20:40 +0000
Files and hashes:         1: 34352e3138372e39362e302f32322d3234203d3e20323639343632.roa (hash: znzZyL3ieuk+oebiXYVlLpopzn2YMz/PXELhpkl2gAU=)
                          2: 323830343a363530303a3a2f33322d3334203d3e20323639343632.roa (hash: umVAU8hm3WMckaJc3w3f1fTvDJumdOGqVK/o3LF2/kk=)
                          3: 72D950483459BB286E83221CC667C2CA6132DB5C.crl (hash: hJcTCvcedVTt5kqJDbwr1dEDADwYneT4MeMoEwzApaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0c:ab:3c:1c:98:57:af:d2:e8:29:c9:92:3b:50:e2:92:ce:42:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D950483459BB286E83221CC667C2CA6132DB5C
        Validity
            Not Before: Apr 14 19:06:40 2024 GMT
            Not After : Apr 15 20:20:40 2024 GMT
        Subject: CN=396A13217792788A504FC3CDB8CABFC1B2F1F2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:eb:38:70:be:6f:64:a8:09:e2:28:36:0a:
                    49:26:40:01:82:bc:f8:9c:17:93:23:7e:49:a0:9f:
                    53:6d:ec:37:8c:e6:bc:8b:c1:47:72:8c:f6:e8:1a:
                    d1:9d:c7:81:b5:2d:c5:58:b5:30:e4:0b:88:8e:ea:
                    e8:c7:32:f7:d4:58:f8:f5:41:3f:1f:4f:a4:1c:e3:
                    a3:23:c8:05:8f:a5:38:f3:d2:b9:6c:14:cb:34:f9:
                    31:d2:5d:6e:66:27:61:0a:71:90:55:93:c5:5f:43:
                    54:e8:d8:df:cd:57:2b:05:26:8d:4e:19:29:82:13:
                    ed:0e:9f:b4:f0:21:6e:e4:de:f9:59:f8:53:ac:62:
                    e3:c4:92:47:07:09:d7:e1:85:9d:1f:3b:70:b8:0a:
                    e3:89:26:1c:57:48:0e:e0:40:78:d1:84:bd:0f:f8:
                    9a:15:48:3e:56:ba:bf:31:7d:2f:eb:a8:41:a9:a5:
                    7a:d6:a2:1a:6c:58:3f:33:55:ed:d1:8c:61:fe:ce:
                    35:9a:26:f7:a1:77:30:c0:7b:71:1f:d2:c6:a1:e5:
                    38:59:72:68:e9:8a:2c:b4:7a:2e:a3:b8:26:b3:bc:
                    fe:53:89:18:b8:7c:d5:f2:46:24:65:18:6b:6f:08:
                    79:d6:88:cb:89:00:4d:53:ae:bb:b8:c8:10:cf:ee:
                    09:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:13:21:77:92:78:8A:50:4F:C3:CD:B8:CA:BF:C1:B2:F1:F2:EE
            X509v3 Authority Key Identifier:
                keyid:72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:ee:f7:83:34:36:86:60:60:fd:8c:d6:68:fc:72:d7:ff:
         8c:0c:ad:78:5b:5c:e3:cd:8a:0b:f6:94:29:8c:5a:ca:e3:5a:
         68:ff:36:0a:4b:a3:f3:fa:1f:24:a7:48:33:01:f2:53:5a:2d:
         3a:4c:4e:ff:2e:2a:fe:e7:ba:44:5d:9d:59:5c:a2:88:3d:06:
         41:6d:90:25:20:d5:a2:47:34:65:4a:0a:e2:ab:31:72:92:f1:
         65:52:01:86:b6:fc:d3:3c:d6:7d:61:94:73:f4:e2:df:39:d9:
         4d:f2:dd:12:1b:af:8b:e4:5f:60:15:e9:2a:52:51:8e:31:f2:
         f6:bf:93:73:12:0b:1f:7a:9f:1f:b2:9c:fb:00:ec:70:49:62:
         0e:de:0b:02:8d:3c:eb:0c:73:0a:fb:c8:f3:99:fc:80:32:aa:
         ff:67:4a:30:1b:43:f3:20:ef:9f:67:1e:9f:d8:e3:2d:2b:3e:
         c8:15:01:3d:83:bc:52:69:f7:d6:99:92:13:11:4e:5b:05:98:
         3e:ff:01:0d:48:25:be:44:09:a7:b4:bf:58:ac:4c:9a:0f:04:
         36:11:af:4d:94:db:c1:cb:f2:b4:74:9d:79:57:83:0f:2e:f5:
         f6:54:4b:08:eb:47:5d:8e:74:16:99:af:7b:85:59:64:b6:31:
         f7:88:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----