Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.mft
File:                     314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.mft (raw, json)
Hash identifier:          Ca71VFfnJ4jOiW4eJbRYPUlVgtJkpcH9AbLgcPwxN/Y=
Subject key identifier:   54:E3:19:F1:78:37:ED:5A:A8:3B:27:6F:2E:AA:93:D2:84:86:AD:FE
Authority key identifier: 31:4B:0E:DD:AD:AD:CE:90:80:D6:2B:FA:8D:EA:DE:24:97:E1:D9:B0
Certificate issuer:       /CN=314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0
Certificate serial:       526BF974286EEB1E49B8F1E04313453AC3790C81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.mft
Manifest number:          8D
Signing time:             Tue 09 Jul 2024 10:36:29 +0000
Manifest this update:     Tue 09 Jul 2024 10:31:29 +0000
Manifest next update:     Wed 10 Jul 2024 13:24:29 +0000
Files and hashes:         1: 3133312e3130302e3134382e302f32322d3234203d3e203631363333.roa (hash: aSIH5zWyk73pbC4BLaSjrLW+6nzArgfCRkOJNRvSXsA=)
                          2: 314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.crl (hash: +WgCQH9CNDItVac7pxrJTdb/HQi0Fi9XwnRQS79f6Yc=)
                          3: 323830343a316330343a3a2f33322d3438203d3e203631363333.roa (hash: atYMtyda2OIQb6Kt+9Y0dHQOyV7Ph7mN80pVZJLqARw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:f9:74:28:6e:eb:1e:49:b8:f1:e0:43:13:45:3a:c3:79:0c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0
        Validity
            Not Before: Jul  9 10:31:29 2024 GMT
            Not After : Jul 10 13:24:29 2024 GMT
        Subject: CN=54E319F17837ED5AA83B276F2EAA93D28486ADFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:c0:01:a1:72:11:53:f3:4f:48:bc:9a:f7:
                    2f:a1:39:d6:a4:89:57:eb:4f:61:eb:19:93:23:e4:
                    a5:7a:68:08:ac:cb:a7:b4:85:57:ee:b5:89:48:64:
                    d9:c0:c1:6b:23:68:ad:62:64:a7:ca:04:4c:55:df:
                    e5:fb:b7:ed:76:99:e4:65:7a:ff:a0:90:2f:cc:ac:
                    72:89:f6:2f:ca:54:08:a3:38:c8:24:47:63:74:1d:
                    f2:52:ae:a8:80:f6:58:6c:4d:ca:71:81:88:b1:63:
                    22:6e:30:22:ae:58:fa:da:c8:fd:a8:96:4a:ca:5c:
                    6e:0c:87:5b:8a:9d:4a:a7:4f:89:dc:08:42:8c:53:
                    fa:b2:75:c4:02:d7:86:0c:cc:a3:65:79:57:c6:6a:
                    4c:94:2b:61:a3:17:c2:b6:05:2c:18:48:be:2b:d3:
                    2b:ba:be:b3:ee:ea:94:04:96:15:85:96:63:01:28:
                    10:dc:6d:95:8b:46:51:0b:1d:19:06:d1:5d:b9:8a:
                    93:dd:cd:1b:89:96:a3:b3:58:11:8e:30:5a:0b:78:
                    69:e7:89:f8:57:47:c6:7a:a9:d0:f9:f0:7a:d7:47:
                    05:8a:6e:8c:cb:cf:be:57:9b:bc:20:90:55:04:59:
                    14:2d:e1:38:fa:bf:be:bc:26:07:77:21:8b:f0:b8:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E3:19:F1:78:37:ED:5A:A8:3B:27:6F:2E:AA:93:D2:84:86:AD:FE
            X509v3 Authority Key Identifier:
                keyid:31:4B:0E:DD:AD:AD:CE:90:80:D6:2B:FA:8D:EA:DE:24:97:E1:D9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:06:c0:ae:d2:7d:dd:46:24:b3:ad:36:e8:82:0f:0a:df:2f:
         15:24:d0:33:e4:e2:ed:79:a7:3e:41:de:04:4c:fc:d6:b3:60:
         a0:3c:db:37:38:96:cb:67:32:a6:6c:13:5c:67:08:bf:f3:1d:
         e6:cc:84:03:f5:a4:64:07:d0:a8:77:0c:68:c9:82:af:d5:a0:
         98:ba:0c:1e:32:cd:d9:f7:d2:c6:83:7a:63:7b:19:ec:c8:09:
         43:a7:ac:dc:df:5d:2b:78:63:69:42:4b:14:1f:8d:62:e9:8e:
         2f:10:96:8d:1f:ba:6b:7e:55:a7:2a:b6:70:fa:8c:22:42:cb:
         d6:1d:9e:74:3f:47:61:eb:f9:b8:43:db:7e:83:a0:94:e0:e8:
         d4:15:0b:99:62:df:27:5f:d3:df:be:58:a9:d7:41:cb:e8:0f:
         23:a4:4e:0b:7e:21:e4:f4:d5:53:fd:34:d2:53:e9:c4:eb:ad:
         12:c7:19:3f:23:ef:24:3d:4a:5c:35:db:7a:01:51:da:db:37:
         27:4c:4d:3e:d1:f5:25:8a:5f:a6:92:5b:ce:3c:33:3e:69:45:
         02:1d:c6:d2:ba:93:ba:b7:75:0f:72:9c:f6:18:e7:5a:69:2e:
         09:c9:bf:0b:e9:7c:3f:3f:46:20:3f:de:8c:e6:55:39:3a:36:
         ab:73:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----