Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/090143127CBEDB52EA1848A31952B3D95EA9647C.mft
File:                     090143127CBEDB52EA1848A31952B3D95EA9647C.mft (raw, json)
Hash identifier:          XesEnQ/dIt7nS+8qksTN4OAbh6l8fUNi6FGF9ETH/p0=
Subject key identifier:   C4:E1:A1:F3:78:9B:80:47:5F:92:89:2E:79:9A:82:21:17:18:F3:57
Authority key identifier: 09:01:43:12:7C:BE:DB:52:EA:18:48:A3:19:52:B3:D9:5E:A9:64:7C
Certificate issuer:       /CN=090143127CBEDB52EA1848A31952B3D95EA9647C
Certificate serial:       4CACA2685E6DE900310D72772E3276BD8F3EDBA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/090143127CBEDB52EA1848A31952B3D95EA9647C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/090143127CBEDB52EA1848A31952B3D95EA9647C.mft
Manifest number:          0217
Signing time:             Sun 14 Apr 2024 22:48:52 +0000
Manifest this update:     Sun 14 Apr 2024 22:43:52 +0000
Manifest next update:     Mon 15 Apr 2024 23:59:52 +0000
Files and hashes:         1: 34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa (hash: 5EpDpSvoAKTwteBFWm0mAh/3QYh7I1RcwdJgF2sWFFk=)
                          2: 090143127CBEDB52EA1848A31952B3D95EA9647C.crl (hash: zBNHafOAy5XS/ZqogEyIdzvUNkT1wh9zjl8CRnlxLHU=)
                          3: 323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (hash: shq3g4uH+pUTbCoe7ttkwvcU6Z1/zwgg32S/R9bU9Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ac:a2:68:5e:6d:e9:00:31:0d:72:77:2e:32:76:bd:8f:3e:db:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090143127CBEDB52EA1848A31952B3D95EA9647C
        Validity
            Not Before: Apr 14 22:43:52 2024 GMT
            Not After : Apr 15 23:59:52 2024 GMT
        Subject: CN=C4E1A1F3789B80475F92892E799A82211718F357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:e9:a9:60:b0:3e:e3:33:02:cb:26:9a:24:
                    29:bc:a7:f3:03:df:3b:2a:4a:36:16:69:8c:89:5c:
                    71:ea:9a:ef:da:89:74:1f:0d:57:55:47:55:af:e2:
                    7f:26:eb:46:5f:84:ae:86:54:93:c0:79:1a:46:08:
                    a0:fe:e2:fe:f8:2b:ec:86:83:94:84:e2:cd:17:8a:
                    81:56:12:2f:ba:67:49:90:95:d1:56:65:f5:f1:b6:
                    75:95:c5:41:94:a6:57:79:24:91:61:59:d8:25:be:
                    49:f5:87:8e:5a:f5:60:16:46:e4:fb:75:1f:07:42:
                    f5:ab:dd:fe:4e:45:66:43:a5:93:ed:1f:9d:c0:b5:
                    e2:6b:46:c5:b8:0b:6e:4b:57:01:61:a3:1a:21:c9:
                    16:dc:17:31:e7:cc:09:b6:04:e0:b2:87:58:21:cd:
                    84:27:fd:91:65:c7:ec:9d:d3:00:8e:ac:49:1d:37:
                    d4:c4:19:f5:e2:a3:6e:57:68:5d:34:42:f7:9b:db:
                    89:2e:dc:4f:d9:b0:29:1b:e1:19:38:85:12:e0:4d:
                    7c:49:df:ff:e9:66:d1:20:9c:64:a6:f3:9a:7c:43:
                    2f:9e:ef:07:8f:a3:49:d9:66:3a:51:7d:df:da:79:
                    60:fc:b3:3e:db:30:05:cb:41:e4:ed:d9:3f:17:a3:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E1:A1:F3:78:9B:80:47:5F:92:89:2E:79:9A:82:21:17:18:F3:57
            X509v3 Authority Key Identifier:
                keyid:09:01:43:12:7C:BE:DB:52:EA:18:48:A3:19:52:B3:D9:5E:A9:64:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/090143127CBEDB52EA1848A31952B3D95EA9647C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/090143127CBEDB52EA1848A31952B3D95EA9647C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/0/090143127CBEDB52EA1848A31952B3D95EA9647C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:fe:28:b9:5e:32:cf:b8:f4:e1:ac:ad:bb:db:dc:34:f7:
         5a:a3:1c:8e:57:3b:3b:0d:47:1b:62:16:5c:75:a6:2a:6a:eb:
         c4:3d:be:38:de:b1:9f:4c:3f:a2:90:35:f7:60:c8:ea:c6:28:
         dc:86:9e:f8:5a:6a:64:62:58:bf:44:5f:e1:a4:b1:ca:3f:6d:
         3a:ed:8a:9f:a6:b1:f0:10:1e:a0:90:cb:8e:04:8d:df:cb:30:
         27:0a:8b:5e:30:5f:17:c7:d4:b4:ca:22:45:33:8b:cb:9b:c5:
         4e:a8:26:e1:0c:64:a2:af:16:d6:46:48:67:3a:cb:86:9a:29:
         cc:bc:be:90:1d:ea:cf:c7:8a:5e:35:62:7a:99:6c:4b:63:16:
         47:35:ce:76:4c:6a:da:d6:36:78:4b:9e:45:e7:ca:e0:ba:d1:
         41:70:70:97:62:6c:f5:b7:94:e3:44:df:e6:19:84:0f:e3:a3:
         db:f7:ac:b6:1a:06:f9:c0:9b:f6:8b:58:26:40:8f:f4:0f:df:
         9a:54:9a:50:00:e0:16:8e:6f:29:5b:59:24:b3:8a:d0:61:e0:
         7b:37:85:da:4f:f8:c3:dd:c8:11:fd:aa:06:7c:5c:6b:b9:59:
         13:e8:a6:c0:4d:3f:7e:83:30:6b:94:01:d0:6f:d5:84:06:ae:
         15:87:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----