Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/310192A521EAB47DAAC874614ADECC0ED41466A5.mft
File:                     310192A521EAB47DAAC874614ADECC0ED41466A5.mft (raw, json)
Hash identifier:          raWPOhMuJGBXFbC1zs3mRCcihgHQCkP2K6UnKL2UDFA=
Subject key identifier:   D9:70:9D:31:F2:36:20:7B:6A:3F:9D:13:33:BD:46:C6:B9:45:E9:AA
Authority key identifier: 31:01:92:A5:21:EA:B4:7D:AA:C8:74:61:4A:DE:CC:0E:D4:14:66:A5
Certificate issuer:       /CN=310192A521EAB47DAAC874614ADECC0ED41466A5
Certificate serial:       32EE23B27B6321BB5FFCC44F36367F90CA86E50C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310192A521EAB47DAAC874614ADECC0ED41466A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/310192A521EAB47DAAC874614ADECC0ED41466A5.mft
Manifest number:          01D7
Signing time:             Mon 15 Apr 2024 06:59:30 +0000
Manifest this update:     Mon 15 Apr 2024 06:54:30 +0000
Manifest next update:     Tue 16 Apr 2024 09:50:30 +0000
Files and hashes:         1: 3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa (hash: dUtiWohuvQmObMHIf3+2XancFSOU62sg3rIGyUluLck=)
                          2: 323830343a323661383a3a2f33322d3336203d3e20323633383437.roa (hash: eKRpUfL7DGxn4ZSXoHfKoDw9aEo4NleGv10oZmp2haU=)
                          3: 310192A521EAB47DAAC874614ADECC0ED41466A5.crl (hash: YJYMaXimbJczOfRbjMzMmVmP/3AAaAhOWjWUfc71Tvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ee:23:b2:7b:63:21:bb:5f:fc:c4:4f:36:36:7f:90:ca:86:e5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310192A521EAB47DAAC874614ADECC0ED41466A5
        Validity
            Not Before: Apr 15 06:54:30 2024 GMT
            Not After : Apr 16 09:50:30 2024 GMT
        Subject: CN=D9709D31F236207B6A3F9D1333BD46C6B945E9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:01:df:1b:9e:0a:de:dc:02:b1:20:cf:a7:
                    58:1d:ea:a2:cb:af:f0:24:2e:4e:8a:cf:d7:b5:9a:
                    06:43:b0:6a:26:57:e6:43:b1:79:a8:76:13:de:bf:
                    b4:a1:58:a5:05:6f:2d:57:b3:35:fd:2a:ec:b4:8e:
                    56:7a:b6:f7:3e:5a:00:71:60:50:10:1d:43:b3:a2:
                    93:3d:c1:ee:db:80:59:f8:84:1e:52:e2:ae:38:ef:
                    e0:a6:3e:13:ed:5f:da:34:58:3f:ee:e2:68:c1:5c:
                    2b:73:1f:16:cf:d5:6a:97:d6:7e:2c:b3:d7:71:fc:
                    91:f9:9f:02:e6:de:94:1e:01:6a:ec:dc:50:25:e9:
                    90:6a:09:0b:6b:a4:d4:94:4c:91:ce:d1:fa:ff:54:
                    3e:2a:9b:8e:38:a0:b7:f1:e1:ec:b3:4c:00:03:2d:
                    be:fa:0e:8b:4a:bc:01:d8:06:73:6a:8a:82:eb:f2:
                    0e:1e:d3:3d:af:ef:23:0f:16:9a:49:4e:e5:db:6f:
                    08:bf:1c:27:2f:6d:03:e4:fe:cb:60:cd:86:23:3e:
                    b5:4a:18:9e:a2:fa:5c:c8:94:98:d3:97:48:39:69:
                    ee:0c:ff:dc:5d:e4:11:9a:92:c7:42:25:b7:a6:7a:
                    4c:ff:0e:26:54:60:81:d5:0b:4c:af:09:8a:fe:f7:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:9D:31:F2:36:20:7B:6A:3F:9D:13:33:BD:46:C6:B9:45:E9:AA
            X509v3 Authority Key Identifier:
                keyid:31:01:92:A5:21:EA:B4:7D:AA:C8:74:61:4A:DE:CC:0E:D4:14:66:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/310192A521EAB47DAAC874614ADECC0ED41466A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310192A521EAB47DAAC874614ADECC0ED41466A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/310192A521EAB47DAAC874614ADECC0ED41466A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:5f:4c:d0:eb:8f:e1:ec:ce:d8:35:81:d6:1b:ff:bc:73:
         30:35:c8:4c:12:bc:86:83:1a:34:46:d0:ac:09:e4:fc:08:ce:
         38:f5:f2:58:d9:61:3d:3e:e8:2c:1a:7b:fb:b9:ca:a8:a5:79:
         17:58:98:b7:3a:c0:06:46:09:5b:dc:80:ea:83:15:18:c4:4c:
         08:c8:e7:59:a7:7a:2b:f1:1e:8e:90:0c:e8:68:dc:af:4e:2e:
         8c:4b:5a:93:28:2c:fd:73:04:e0:22:81:06:dd:43:1b:df:ab:
         0e:7c:79:b4:59:67:22:d1:e8:3d:94:4d:0f:81:be:17:9c:ab:
         4c:ef:0f:77:78:65:31:81:a4:da:00:ae:d3:89:03:58:6e:49:
         3a:5f:e1:bd:f2:80:c9:47:e8:30:ea:b3:78:8f:ee:5d:55:65:
         81:8b:1a:be:9d:bc:51:ce:6b:16:05:d2:81:57:e3:f1:cc:01:
         c0:9d:bd:50:4c:4c:e3:9f:7a:76:1e:28:52:cf:eb:47:67:c8:
         e9:2d:02:0f:3f:9c:64:76:4e:d3:1a:a4:ee:5b:ef:52:2d:f3:
         ac:e6:74:df:0c:31:af:12:0e:3b:bd:a6:d3:60:7b:7b:42:31:
         d1:ae:8c:a3:75:c5:e2:ba:05:58:ca:cf:74:d9:b2:46:5f:9f:
         0c:41:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----