Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.mft
File:                     A25FBDEB2FC42754CA1D76897E6D66E147B856E4.mft (raw, json)
Hash identifier:          hvGTuNcmNt4EEMpIQeLSADr8qghrZoub3OgQdf6/PAo=
Subject key identifier:   EC:09:D4:58:D6:A4:A3:3A:F2:85:F9:22:F5:6F:12:CC:0B:DA:1F:9E
Authority key identifier: A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4
Certificate issuer:       /CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
Certificate serial:       39FD346036A3F42EBB61AD34C33BDA79529AAF78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.mft
Manifest number:          12
Signing time:             Sun 14 Apr 2024 23:23:49 +0000
Manifest this update:     Sun 14 Apr 2024 23:18:49 +0000
Manifest next update:     Tue 16 Apr 2024 00:49:49 +0000
Files and hashes:         1: 3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa (hash: C/f70Bf/ONU1AwyGHhpnGRHRslOb1j71L1hdxFw3g2Y=)
                          2: 323830343a373734633a3a2f33322d313238203d3e20323731313639.roa (hash: vUE6bUfx/ro8HkWu6RCqOSdDePd9Skn7U6GTfR1eagw=)
                          3: A25FBDEB2FC42754CA1D76897E6D66E147B856E4.crl (hash: HdPyfRVPUtCYvqI3msVgUIYpAHjsejLZpPSE8N/Hqi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fd:34:60:36:a3:f4:2e:bb:61:ad:34:c3:3b:da:79:52:9a:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
        Validity
            Not Before: Apr 14 23:18:49 2024 GMT
            Not After : Apr 16 00:49:49 2024 GMT
        Subject: CN=EC09D458D6A4A33AF285F922F56F12CC0BDA1F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:ec:51:00:c2:7a:f7:e9:20:04:eb:d4:74:
                    9b:08:1a:a4:3b:f8:d3:83:9c:3e:93:67:bc:a0:c2:
                    af:25:04:82:d6:12:63:6e:12:7a:14:c7:e4:80:82:
                    7a:70:82:9c:5c:a6:b4:2a:b0:6e:99:63:dc:60:17:
                    90:1a:67:5b:fc:3f:7f:dc:89:99:67:9f:d2:0a:94:
                    e0:68:28:a4:4c:5a:bb:20:a3:f1:2c:60:91:d6:a4:
                    f4:0c:6b:f5:36:77:80:c5:e5:d7:66:23:52:91:ff:
                    76:7a:84:83:d6:ab:8e:c4:7a:3d:8c:66:a4:17:51:
                    48:ea:c0:30:6c:f7:8e:92:af:9b:73:2d:f3:f6:8b:
                    4b:2c:7d:e0:49:cd:d7:79:a7:19:73:82:cc:92:3d:
                    9a:6a:16:1c:9f:e0:ff:f0:f6:dc:54:f3:c9:bc:4c:
                    b9:99:d7:92:ad:2e:00:08:83:0f:00:c9:92:78:57:
                    86:db:7a:eb:67:d6:20:6e:e3:06:64:f5:44:de:ae:
                    f2:ca:32:33:27:18:14:b4:b9:8a:9a:47:99:93:d7:
                    6a:3e:65:84:91:89:e7:f8:75:43:9f:31:8f:64:c3:
                    ef:54:88:b0:d0:62:ec:6b:5b:89:8e:4c:64:ad:1f:
                    20:5a:f0:99:a9:85:0d:53:ca:f2:9c:46:8e:20:c1:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:D4:58:D6:A4:A3:3A:F2:85:F9:22:F5:6F:12:CC:0B:DA:1F:9E
            X509v3 Authority Key Identifier:
                keyid:A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:f1:8b:4c:7c:35:be:54:db:11:00:24:a6:6e:00:26:cd:
         bb:51:97:d1:1e:db:1e:84:cb:9b:3d:c7:7f:c2:7a:a8:37:0d:
         86:ac:78:a4:85:3d:90:64:c5:bb:dd:ae:6b:22:78:1a:78:4d:
         f9:55:f9:ee:6d:9b:5b:dd:71:46:85:f0:8d:0c:5e:20:63:98:
         6b:a8:21:eb:6a:d1:f5:b7:49:c5:a8:21:fd:c4:4d:89:0c:27:
         3c:64:b9:24:58:f1:7b:40:65:b6:cf:64:c0:8c:fa:d7:c9:ee:
         8f:24:e7:95:5f:30:bc:d4:a1:68:13:6f:a9:d2:4a:5c:06:ff:
         f3:d9:4c:5b:2b:a5:20:4c:88:c7:48:fd:f1:3b:5d:b0:df:b6:
         bb:2a:e3:2e:f2:bb:90:77:4e:1b:2e:a1:e5:ad:b1:af:04:1e:
         30:03:a2:71:ee:74:9a:b5:69:78:91:c4:3d:42:61:2c:ff:89:
         d2:f6:e6:f2:00:16:9d:b0:73:e5:e0:e5:7a:87:ac:53:3e:35:
         a5:14:6d:05:87:82:03:3b:08:5e:64:1f:5f:fa:44:b7:e4:45:
         55:dc:d0:ae:7e:fb:69:6a:65:13:a8:30:00:09:2d:14:57:18:
         cd:26:75:33:61:4a:9c:c2:c3:e3:bc:ff:cc:e3:e5:1c:74:a4:
         06:21:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----