Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.mft
File:                     DD48AB95A13E517717CB98E2E8F3B9E739F8913F.mft (raw, json)
Hash identifier:          rmPqqQRJzLNbIq/ap0OcbvID5OR9mjnj0sPU23Phag0=
Subject key identifier:   C3:3B:91:78:B0:26:F2:7A:2B:3E:BC:08:3F:B8:1E:90:E4:C2:6E:00
Authority key identifier: DD:48:AB:95:A1:3E:51:77:17:CB:98:E2:E8:F3:B9:E7:39:F8:91:3F
Certificate issuer:       /CN=DD48AB95A13E517717CB98E2E8F3B9E739F8913F
Certificate serial:       241372613EF68F0EB5B7EA7C4070C13809715598
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.mft
Manifest number:          039E
Signing time:             Mon 15 Apr 2024 10:23:06 +0000
Manifest this update:     Mon 15 Apr 2024 10:18:06 +0000
Manifest next update:     Tue 16 Apr 2024 12:44:06 +0000
Files and hashes:         1: DD48AB95A13E517717CB98E2E8F3B9E739F8913F.crl (hash: 1IdaCZI4x/O/8WnEq015g1P3UizycY+OFEGqHBfeWog=)
                          2: 3138362e3233332e32342e302f32322d3234203d3e20323730373830.roa (hash: 9wd6fyBHEg0/DN8v2lf+Fkpy4+exh5+CMuZcqcoekNQ=)
                          3: 323830343a373134633a3a2f33322d3438203d3e20323730373830.roa (hash: JkJxieH6ZXESXgxW7K7cbONoVQeWzn/F6ILs+p5+pf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:13:72:61:3e:f6:8f:0e:b5:b7:ea:7c:40:70:c1:38:09:71:55:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD48AB95A13E517717CB98E2E8F3B9E739F8913F
        Validity
            Not Before: Apr 15 10:18:06 2024 GMT
            Not After : Apr 16 12:44:06 2024 GMT
        Subject: CN=C33B9178B026F27A2B3EBC083FB81E90E4C26E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:c2:05:4e:e0:70:07:84:da:ac:f7:8e:8f:
                    c4:53:57:83:49:dd:8f:6f:82:52:8b:85:a1:b4:d5:
                    80:0d:c0:30:2f:a5:06:d7:b7:1b:e5:4d:7b:53:fc:
                    a6:39:2d:30:2a:c2:34:89:2b:4e:3a:04:80:3a:73:
                    33:fa:9d:1f:d0:a3:e5:5b:fe:0d:c4:70:87:fb:16:
                    21:78:18:13:b1:de:09:2f:40:9d:cb:b9:05:31:7c:
                    97:d5:36:4c:83:cc:53:e6:f0:f7:f2:8b:ad:42:e4:
                    ee:cf:f6:fb:45:99:4d:de:2a:60:20:b9:a9:dc:13:
                    47:f5:5e:c6:7c:52:11:41:15:db:b3:75:22:b1:f7:
                    d6:52:08:80:1c:91:d4:39:e0:16:80:8c:3c:f7:2e:
                    12:c4:14:d0:b2:74:7d:a2:23:5b:65:eb:cb:43:52:
                    49:84:4f:ba:12:1e:c7:f7:66:78:3f:35:e5:92:af:
                    50:d4:0a:69:87:7e:dd:f9:7f:3d:19:7b:85:cd:d7:
                    3d:14:b5:32:cc:9e:49:e9:c1:66:d2:9b:01:68:47:
                    90:05:e9:d1:43:d4:38:55:dd:2b:30:0e:d6:f9:e0:
                    be:e8:30:3e:78:33:4c:33:d1:de:44:19:d6:b7:30:
                    6f:9f:1b:82:ad:d7:d6:aa:8c:10:bc:8e:05:4d:c8:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:91:78:B0:26:F2:7A:2B:3E:BC:08:3F:B8:1E:90:E4:C2:6E:00
            X509v3 Authority Key Identifier:
                keyid:DD:48:AB:95:A1:3E:51:77:17:CB:98:E2:E8:F3:B9:E7:39:F8:91:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:a2:07:55:86:f4:ee:4f:b4:1b:cc:7b:5b:a4:15:49:1a:
         39:13:4b:2d:36:f8:cd:bf:c0:eb:97:93:a1:53:03:29:d7:e5:
         73:67:79:55:98:66:ab:d2:69:67:21:c7:d8:30:3c:5c:00:2c:
         83:4f:f2:11:a1:b5:aa:76:ba:b3:1f:ef:49:45:16:47:79:3d:
         0e:33:44:79:cb:88:e5:4b:01:c7:05:1f:90:d6:b4:23:0f:33:
         c6:04:b6:7e:2c:a1:c8:c5:9a:06:a5:06:4f:bb:9f:d9:0d:5f:
         4e:b4:29:55:80:33:94:88:a1:87:7e:7c:1a:19:bd:09:d9:9f:
         e7:d8:da:9b:e3:5e:f0:01:09:dd:0f:2c:70:0b:d8:30:08:e2:
         33:0a:f7:f3:5c:50:d8:1e:5f:82:8b:e0:fb:9c:f0:43:0b:31:
         cc:1d:76:91:db:71:9d:9d:9b:dc:63:88:37:46:90:d2:a1:03:
         19:cb:d9:04:26:01:22:23:90:f6:c0:f5:9e:20:64:e1:94:aa:
         34:17:79:65:5b:11:80:d2:05:f9:09:9c:18:0f:6c:9b:c3:d0:
         a5:6e:ae:e6:eb:7c:1f:a1:ca:95:9a:21:88:76:a4:76:44:d2:
         51:b9:d3:e2:f5:2f:f3:57:b9:be:ac:dc:07:03:64:d8:49:a0:
         bc:3b:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----