Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.mft
File:                     4342F208064EBCB011C73985AA522F27EF39E196.mft (raw, json)
Hash identifier:          KkaHpNVg3KZ4E5/1SP/AGEbI1Fi5TfSSvgnDuUniw2Y=
Subject key identifier:   E3:9D:49:02:3C:C9:71:F2:4C:34:92:B9:8D:41:F8:8C:C7:D0:B0:1B
Authority key identifier: 43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
Certificate issuer:       /CN=4342F208064EBCB011C73985AA522F27EF39E196
Certificate serial:       6B970B003DC2A125C72E782F0CE86AFC3061364E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.mft
Manifest number:          CB
Signing time:             Tue 03 Sep 2024 04:34:48 +0000
Manifest this update:     Tue 03 Sep 2024 04:29:48 +0000
Manifest next update:     Wed 04 Sep 2024 04:48:48 +0000
Files and hashes:         1: 4342F208064EBCB011C73985AA522F27EF39E196.crl (hash: hvUgJtBD/uNEqHjC0BfnMZ86rnvkE2OMnG8+qJP7Pqg=)
                          2: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (hash: iLUGhaPcZ4GvlROHJe5zJApWn77Ql29GkfzVuCFYtZY=)
                          3: 323830343a353461383a3a2f33322d3336203d3e20323638363633.roa (hash: uF7ffjz129UB5VBZntwTXmpfUcb5+4qJDGiswZTM+m4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:97:0b:00:3d:c2:a1:25:c7:2e:78:2f:0c:e8:6a:fc:30:61:36:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4342F208064EBCB011C73985AA522F27EF39E196
        Validity
            Not Before: Sep  3 04:29:48 2024 GMT
            Not After : Sep  4 04:48:48 2024 GMT
        Subject: CN=E39D49023CC971F24C3492B98D41F88CC7D0B01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:e4:ff:d1:8b:a1:dd:ee:03:65:3a:35:72:
                    d3:75:bc:56:ed:4a:26:ed:44:6e:b0:01:ce:0a:09:
                    f5:7c:8d:e7:bf:30:e8:a3:6b:46:b5:44:70:5d:57:
                    a5:5b:79:15:94:aa:0e:8a:b0:e8:1d:4d:31:52:4a:
                    a1:fb:8b:7a:ba:b6:f9:a8:65:41:6e:8d:32:d7:a2:
                    bd:22:49:42:19:cf:cc:7b:a7:c9:6d:92:e4:6d:81:
                    a2:d2:b0:58:9e:f5:12:05:9c:47:e6:81:6c:49:b4:
                    98:ec:67:93:d0:f3:d0:a9:0b:ee:bf:46:b1:81:8b:
                    ea:4e:da:f0:88:26:87:1d:ce:1b:83:dc:ef:ea:b7:
                    63:17:95:13:2b:c7:9d:da:de:8a:78:7d:2a:f5:38:
                    01:85:db:8e:80:44:3a:2e:0e:d6:96:5b:32:4e:65:
                    df:e4:04:92:ca:c4:8a:d9:90:03:a4:bc:fa:1b:8e:
                    93:c1:93:f0:c3:aa:23:41:21:9e:83:b8:a6:8f:04:
                    d3:98:13:6f:ac:f9:79:bb:ba:61:81:d9:ed:cf:ca:
                    3c:90:ae:56:b3:7f:78:c6:78:d8:f2:df:9e:3b:2e:
                    c3:fd:5e:b3:7c:40:de:df:fe:c9:cf:31:05:7f:7e:
                    b2:73:82:10:bf:09:e6:0d:5f:b4:7e:1f:5a:fa:df:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9D:49:02:3C:C9:71:F2:4C:34:92:B9:8D:41:F8:8C:C7:D0:B0:1B
            X509v3 Authority Key Identifier:
                keyid:43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:37:55:02:f1:a7:97:dd:d4:15:d8:ec:06:cf:3b:b7:e5:
         80:e2:ea:41:0d:c5:56:11:c3:b9:53:55:db:64:20:d7:dd:9c:
         40:f3:74:8e:d4:66:9e:2c:53:51:2d:0f:ab:58:98:bf:8d:c9:
         32:30:fa:07:56:59:59:40:f5:fe:fa:dd:c4:5f:39:46:ad:6c:
         5a:cc:2d:45:25:2b:9f:a9:cd:80:ce:e1:cc:5c:5d:e1:76:7f:
         ef:15:af:d2:29:24:67:cc:3b:ae:3f:a1:3e:d4:11:e6:3b:da:
         d0:ed:86:85:24:6c:6e:f3:82:fd:b9:f7:ec:8e:2e:b8:50:b4:
         1c:5b:54:80:b7:35:e9:64:2c:6c:41:03:15:8e:dd:b3:fb:fa:
         66:d5:84:d5:f1:f4:9a:fe:4e:0a:ff:66:76:c7:1c:16:d9:63:
         de:ad:91:1c:df:fc:32:6b:f9:c6:c7:d5:eb:b3:f0:8a:14:89:
         b7:6e:90:c9:6c:6c:b9:a4:8c:e7:62:99:30:e6:a2:3e:4b:73:
         5d:85:c3:dc:45:8b:51:97:9a:c4:ff:97:55:ec:12:5a:92:de:
         3b:bb:f9:73:18:e9:90:e2:79:57:33:9b:f2:4c:88:58:80:d2:
         fe:04:2b:d7:0b:57:54:84:ef:8c:bd:b0:fc:da:8b:03:de:4a:
         27:3f:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----