Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.mft
File:                     A8C8557DD5953EB8299531CE4E9861DE6FB5E004.mft (raw, json)
Hash identifier:          uU2INw2mv7+e6yEyNkd0qoakbINGR21yMwXQCqVqlkw=
Subject key identifier:   5F:B5:0D:C7:8F:30:AE:91:7D:B3:55:A9:6D:0A:C8:F2:4E:E1:95:6B
Authority key identifier: A8:C8:55:7D:D5:95:3E:B8:29:95:31:CE:4E:98:61:DE:6F:B5:E0:04
Certificate issuer:       /CN=A8C8557DD5953EB8299531CE4E9861DE6FB5E004
Certificate serial:       5A36900F5685695834468EFEA11BDA129F1C6954
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.mft
Manifest number:          010C
Signing time:             Sun 14 Apr 2024 23:31:59 +0000
Manifest this update:     Sun 14 Apr 2024 23:26:59 +0000
Manifest next update:     Tue 16 Apr 2024 03:18:59 +0000
Files and hashes:         1: 323830343a336431343a3a2f33322d3438203d3e20323636323532.roa (hash: f0XnaEiyvyY92iU1K9w/0cnw4udAAa0mjD0uzQ6CJ+c=)
                          2: A8C8557DD5953EB8299531CE4E9861DE6FB5E004.crl (hash: qqHUs7nQkOQyvhEe2zvRSdeqG2DfAhKemdjaGDPQqQA=)
                          3: 3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa (hash: U3neDNKNXiw9Sguf1hWPfxTlSEROhb/OR2+PVfiWsn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:36:90:0f:56:85:69:58:34:46:8e:fe:a1:1b:da:12:9f:1c:69:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C8557DD5953EB8299531CE4E9861DE6FB5E004
        Validity
            Not Before: Apr 14 23:26:59 2024 GMT
            Not After : Apr 16 03:18:59 2024 GMT
        Subject: CN=5FB50DC78F30AE917DB355A96D0AC8F24EE1956B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:39:02:88:7e:f6:8f:a0:64:60:38:59:b5:
                    32:21:98:71:c3:a8:09:91:f7:1a:c8:11:fc:53:8c:
                    af:4d:d2:e3:a3:65:54:c9:df:4d:95:d5:a9:2f:70:
                    c6:7b:c9:38:6a:25:9a:24:5f:66:0a:5c:ec:de:63:
                    71:fc:fa:01:12:0a:de:b4:d1:5c:31:7b:65:ec:7d:
                    a3:11:bc:32:e7:09:38:55:e3:58:bd:83:16:32:1b:
                    27:2b:57:02:c0:72:4a:d1:4a:de:51:af:b0:24:3b:
                    b1:27:28:dc:72:52:84:91:1a:87:5c:b9:71:f3:77:
                    a5:d3:48:fe:5c:a3:b0:07:ac:bb:3b:26:7b:f3:1f:
                    67:84:09:19:32:89:99:2d:ed:e1:0a:c4:00:db:dd:
                    df:da:36:f3:87:bd:ad:13:9e:41:96:64:c3:00:3a:
                    75:9f:ef:c9:9e:ca:08:5c:ff:8d:6b:26:0f:ee:44:
                    ba:83:f8:65:a1:bf:7d:22:82:63:67:d0:d6:96:07:
                    fe:70:88:b8:ef:82:27:e1:79:e7:e1:0b:27:1c:d6:
                    bd:0c:53:3f:2a:d2:25:15:a4:02:4f:5a:13:ef:cc:
                    5c:8d:45:6e:da:8d:b7:d7:d3:9a:7c:6b:a6:10:fd:
                    b4:94:16:e2:ac:f2:1e:67:35:09:be:aa:30:26:58:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:0D:C7:8F:30:AE:91:7D:B3:55:A9:6D:0A:C8:F2:4E:E1:95:6B
            X509v3 Authority Key Identifier:
                keyid:A8:C8:55:7D:D5:95:3E:B8:29:95:31:CE:4E:98:61:DE:6F:B5:E0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:01:94:5f:6e:a2:ab:68:06:c1:ec:00:0b:08:82:31:69:39:
         93:21:c4:84:79:6f:75:d1:e7:ee:cd:98:8a:c5:b6:ee:04:97:
         64:4a:ae:fc:27:84:60:8d:3a:72:a8:a3:42:3a:fa:47:be:4d:
         e8:0f:c4:a5:23:e7:32:dd:ac:4d:bc:56:12:c5:d1:3d:05:fa:
         44:05:f9:86:5d:85:89:c4:4e:a9:8e:12:ed:e3:7d:e6:f5:2b:
         cb:b7:1b:fa:3f:7c:51:ac:f1:b8:1e:3e:c8:d9:8b:18:e0:cb:
         8f:98:fd:38:11:28:de:0e:5d:d5:1f:e9:1d:ba:fa:54:45:cd:
         0e:56:53:4a:8c:b9:5f:74:8e:8a:2a:2a:e9:d6:9e:b1:57:21:
         5d:b6:3f:c8:1a:71:33:92:cd:62:3b:a5:bd:5b:58:bf:da:23:
         c6:b1:4d:7e:eb:12:74:e3:08:bb:f9:42:67:66:fa:a5:43:2f:
         c6:04:2e:d5:53:52:be:45:96:29:b0:7b:c8:6b:09:23:47:0a:
         4d:82:22:9d:83:45:91:4a:7f:d1:69:0b:db:11:79:95:f5:b7:
         0f:68:1a:57:1d:83:53:1c:77:de:f9:2a:c5:66:7e:2d:9a:e9:
         e8:97:0d:5e:59:83:6e:f6:07:75:c6:1e:cb:b0:79:d0:b4:25:
         87:19:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----