Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.mft
File:                     95014102BD8657004DEB7C9626B734A3EEAB7ECB.mft (raw, json)
Hash identifier:          RHuVEepSX0kkloPubAz0H3kGzNoh8ylcN0qiJN8f8z4=
Subject key identifier:   03:16:7E:8F:02:84:83:E8:F6:A7:6F:21:22:D1:A5:A1:28:F1:9B:44
Authority key identifier: 95:01:41:02:BD:86:57:00:4D:EB:7C:96:26:B7:34:A3:EE:AB:7E:CB
Certificate issuer:       /CN=95014102BD8657004DEB7C9626B734A3EEAB7ECB
Certificate serial:       7668CD2FC6F151AA32F7D71F53B1A5C93513F01D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.mft
Manifest number:          035C
Signing time:             Mon 15 Apr 2024 03:59:13 +0000
Manifest this update:     Mon 15 Apr 2024 03:54:13 +0000
Manifest next update:     Tue 16 Apr 2024 07:11:13 +0000
Files and hashes:         1: 323830343a383766633a3a2f33322d3438203d3e20323732373434.roa (hash: JrWjJXp8XnkynLKAHb6hkC6hQhtuDUcGlUYoPe++EKo=)
                          2: 95014102BD8657004DEB7C9626B734A3EEAB7ECB.crl (hash: l/DpNrFeUS8QNWHUo7rxlFgHk+r9/aP+mZIL6WIRbQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:68:cd:2f:c6:f1:51:aa:32:f7:d7:1f:53:b1:a5:c9:35:13:f0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95014102BD8657004DEB7C9626B734A3EEAB7ECB
        Validity
            Not Before: Apr 15 03:54:13 2024 GMT
            Not After : Apr 16 07:11:13 2024 GMT
        Subject: CN=03167E8F028483E8F6A76F2122D1A5A128F19B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:61:60:82:89:f5:0d:b8:5c:7c:4f:73:34:
                    a7:93:16:f9:a3:11:ff:ea:cf:ce:4e:21:44:ba:80:
                    b0:a7:9d:18:7f:48:11:58:93:84:83:de:d3:88:8e:
                    89:8d:a7:f3:35:a9:69:3f:fc:58:ed:df:5b:09:86:
                    9e:7e:75:f1:83:1a:91:97:f4:ba:9f:b8:20:b1:eb:
                    ee:77:c1:24:57:30:31:13:de:82:b5:50:b0:f6:b7:
                    88:74:81:1d:59:03:29:6f:a5:29:0c:6e:38:e1:33:
                    85:23:54:57:f6:d3:a4:e6:49:3c:85:f3:ad:c6:d1:
                    d5:ad:b9:75:05:33:8c:f6:03:61:14:6d:90:99:b7:
                    ff:c1:8e:21:38:0c:f7:9b:53:6d:c0:be:25:64:55:
                    3f:85:f3:60:59:5b:45:b8:d8:17:5c:bc:3d:5a:76:
                    86:f2:93:5b:08:1b:ff:66:fc:66:d7:78:7e:95:c7:
                    1a:19:c9:f2:ba:be:7c:92:6e:23:a0:b6:5b:86:ca:
                    29:0e:0c:a1:ce:31:df:bf:0c:81:2e:cf:fa:5f:ed:
                    8f:0e:d2:a4:e8:13:e1:8f:5f:c7:23:1f:4e:7e:1b:
                    ce:ee:3f:a8:c9:53:e3:27:d1:03:86:7f:fd:71:26:
                    96:4d:d0:da:59:cf:67:d0:dd:cd:9f:98:14:a2:83:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:7E:8F:02:84:83:E8:F6:A7:6F:21:22:D1:A5:A1:28:F1:9B:44
            X509v3 Authority Key Identifier:
                keyid:95:01:41:02:BD:86:57:00:4D:EB:7C:96:26:B7:34:A3:EE:AB:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/95014102BD8657004DEB7C9626B734A3EEAB7ECB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:24:91:25:43:46:a6:26:36:32:e6:7e:ac:b7:ff:c6:ca:
         86:a5:9c:ac:49:ff:fd:40:55:b2:eb:60:0a:52:a6:42:62:36:
         fc:64:4d:89:36:56:6a:a2:56:f7:50:82:5c:54:61:60:97:bd:
         9e:a3:aa:dc:46:0c:71:a0:53:c6:49:df:0e:9a:6b:c2:a1:1a:
         2f:61:c1:e0:c8:c9:5c:48:17:82:50:1a:f3:f0:47:18:69:ad:
         32:21:3c:23:8c:95:99:98:34:85:c3:0f:ed:29:00:35:5a:df:
         6c:9f:c0:e7:e8:46:e1:39:ad:86:09:22:39:ba:b5:64:3b:8d:
         dd:fb:c8:e2:3a:44:84:5f:84:d9:55:8b:c7:0b:4b:0d:98:6d:
         ee:d7:33:44:d6:7b:83:c6:1f:35:f1:26:ad:15:2d:4c:10:63:
         3c:cb:c1:2b:a9:5a:ac:4f:b1:9c:0b:5c:f1:b4:89:00:80:0e:
         8d:61:3c:6d:cf:42:cd:3b:80:9d:8f:b5:b0:78:57:18:d8:bf:
         16:3d:89:36:f5:1c:8e:c8:aa:18:3d:f4:1b:67:b0:58:1f:7e:
         53:03:a8:bc:16:94:5c:c2:f6:d7:98:48:be:08:ed:8b:cc:df:
         37:cc:ce:c9:d6:a2:42:1d:1d:20:80:1d:56:07:12:92:38:61:
         1f:cc:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----