Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.mft
File:                     F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.mft (raw, json)
Hash identifier:          Z0gU4mrNBPYc49PAMo/oM9gN3tn5TwM2ej28Fqueib0=
Subject key identifier:   2C:79:E8:BC:57:47:61:AF:81:0D:97:A3:F0:3D:A8:15:AB:D3:D7:D2
Authority key identifier: F7:7D:44:AD:A0:9B:F6:0F:BD:C7:F7:3E:05:48:FE:1B:D3:4F:44:73
Certificate issuer:       /CN=F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473
Certificate serial:       40C3CC2200580C8EF0C8FD18CED9CA0F38B20369
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.mft
Manifest number:          2D
Signing time:             Mon 15 Apr 2024 11:23:34 +0000
Manifest this update:     Mon 15 Apr 2024 11:18:34 +0000
Manifest next update:     Tue 16 Apr 2024 15:13:34 +0000
Files and hashes:         1: 3137392e36332e3134302e302f32322d3332203d3e20323731363330.roa (hash: Nq077yJi1b7z0tmgmndg08yFTfKJyERkss2GPLccjHM=)
                          2: F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.crl (hash: nCJW82gJRUpS6fH0ql/Z91ZR0GK2/SVjbasI5/MyII8=)
                          3: 323830343a376538383a3a2f33322d313238203d3e20323731363330.roa (hash: OXJ9z+DtA6ZOd+l2Q5o9m1H5WHgfJq/eqY0fcn1xbz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c3:cc:22:00:58:0c:8e:f0:c8:fd:18:ce:d9:ca:0f:38:b2:03:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473
        Validity
            Not Before: Apr 15 11:18:34 2024 GMT
            Not After : Apr 16 15:13:34 2024 GMT
        Subject: CN=2C79E8BC574761AF810D97A3F03DA815ABD3D7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:10:f4:7e:f1:d4:a2:61:c9:da:3c:e8:ae:
                    a2:c2:9f:65:31:bf:47:ec:e9:2e:4e:f4:d0:dc:b3:
                    e4:b8:d6:4e:9e:c3:a8:00:cc:39:ab:db:b5:c1:94:
                    85:85:08:95:95:c2:31:74:20:21:1f:15:2e:e5:9a:
                    b1:c7:ee:44:8f:da:f4:95:95:30:a9:78:d0:27:7c:
                    af:45:a2:44:f5:7b:c8:f5:ac:99:f9:c3:08:f3:5f:
                    c9:fb:a7:d7:35:f5:b0:9c:b3:67:6b:a2:22:71:dd:
                    71:af:13:fa:98:12:1e:2c:94:db:8f:65:b7:0d:d0:
                    0a:a4:b8:09:f0:f9:a8:da:51:cb:da:03:cc:af:d5:
                    62:5f:51:f6:48:59:71:b0:94:d0:5e:de:11:88:6a:
                    ec:ec:99:26:4a:02:bd:dc:f7:dc:d3:0d:ec:f5:1b:
                    58:ab:4d:37:19:8f:66:10:50:ae:e6:d5:39:9b:9a:
                    39:1f:85:41:2c:d7:1e:5d:ca:fb:6b:a6:25:50:0c:
                    0d:49:f4:9e:03:9b:c0:3a:0c:ea:d4:38:5d:dd:35:
                    a0:9e:78:19:6c:1c:48:67:0a:20:53:69:5f:5d:5b:
                    a0:25:fb:bf:49:99:3d:01:c6:11:6f:df:01:5a:6c:
                    54:fc:c9:23:cb:bb:9f:77:90:a6:d8:4f:30:cf:90:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:E8:BC:57:47:61:AF:81:0D:97:A3:F0:3D:A8:15:AB:D3:D7:D2
            X509v3 Authority Key Identifier:
                keyid:F7:7D:44:AD:A0:9B:F6:0F:BD:C7:F7:3E:05:48:FE:1B:D3:4F:44:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/F77D44ADA09BF60FBDC7F73E0548FE1BD34F4473.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:df:84:a5:99:30:20:5d:40:95:2e:52:23:d2:c3:29:99:29:
         07:99:52:a8:de:50:41:e1:50:73:dd:33:7b:c3:04:b0:b6:44:
         ee:47:f1:c8:7e:6e:24:cf:c2:7a:07:06:24:b5:71:14:8f:39:
         69:9f:3b:95:5f:5c:d5:d0:ed:50:87:97:59:06:b3:41:88:de:
         58:7a:40:a1:07:8e:17:5d:a3:07:fd:10:f9:73:00:7a:14:99:
         56:6e:34:c5:1b:23:2f:fe:84:59:0b:76:01:b2:9a:32:21:03:
         3f:45:3a:57:db:fc:0a:98:ae:8a:ae:b2:40:1b:58:81:50:f0:
         dc:9d:8b:7b:fd:0e:96:be:23:e1:4f:5d:46:df:c6:b5:90:8f:
         b8:52:e9:1e:06:21:95:95:f6:6d:ff:d3:eb:f4:7a:1c:01:52:
         ef:72:ec:2b:6f:db:8c:d3:40:1a:f8:00:96:da:e3:28:46:f6:
         d5:db:42:e0:f4:25:ee:d9:5c:b6:3d:98:ee:e0:14:43:bd:5b:
         ad:c1:58:0d:8a:bd:2c:2a:05:c3:dd:41:4b:6d:80:a7:de:1b:
         fd:eb:1f:3d:b8:af:3d:bd:58:8d:1b:26:07:79:a0:82:f7:80:
         e0:28:bd:ac:30:fd:2c:94:34:ba:b7:7c:51:57:4c:a7:49:a6:
         09:9c:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----