Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.mft
File:                     DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.mft (raw, json)
Hash identifier:          pOLpwt6Z2xMUgERM9LLoWJ3Q7HKDoCZX5ZvwZBA6xGs=
Subject key identifier:   F5:6C:D3:1F:EE:F5:01:A6:DA:74:0C:15:A8:A3:63:45:C5:13:29:95
Authority key identifier: DA:5D:A3:FD:DD:F8:D0:B5:0A:29:BF:49:5F:F7:94:1F:D5:C2:C7:B6
Certificate issuer:       /CN=DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6
Certificate serial:       309A5A2113DE9D54EA4CABC375FC9C425B783E3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.mft
Manifest number:          62
Signing time:             Mon 17 Jun 2024 11:44:03 +0000
Manifest this update:     Mon 17 Jun 2024 11:39:03 +0000
Manifest next update:     Tue 18 Jun 2024 14:32:03 +0000
Files and hashes:         1: DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.crl (hash: J83nL40IOoO2OZKJVnWH3dKtH7AbvMO2kmW5KKBDoaY=)
                          2: 3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa (hash: phsvpNHNBpp0GochHdfw+L0YHvXRa8M0zEisVF3hjM0=)
                          3: 323830343a343139383a3a2f33322d3336203d3e20323637343433.roa (hash: fgoY9yMNHpC6AMBO4hSWYtt8ZRhMEsqias3Z5dzbwNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9a:5a:21:13:de:9d:54:ea:4c:ab:c3:75:fc:9c:42:5b:78:3e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6
        Validity
            Not Before: Jun 17 11:39:03 2024 GMT
            Not After : Jun 18 14:32:03 2024 GMT
        Subject: CN=F56CD31FEEF501A6DA740C15A8A36345C5132995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:78:13:4c:ae:03:ba:cb:b5:b1:db:e8:a0:
                    d0:d2:68:d1:9b:ab:f3:54:db:f0:92:c6:9a:4a:4b:
                    ee:e9:2e:5b:87:42:48:2b:74:1d:76:4d:ea:5b:e4:
                    65:89:cd:78:05:b5:f3:f4:da:e2:3d:59:cf:f3:14:
                    70:c1:a5:f5:4f:02:82:b9:d1:3b:8f:00:fa:60:78:
                    47:6d:ef:47:21:18:ed:6a:c2:b8:74:04:28:01:31:
                    f8:1b:6f:ad:04:73:92:9b:55:67:43:b3:02:00:b7:
                    29:e2:4b:cf:f0:8e:cc:bd:be:72:a2:fb:e3:ef:e8:
                    00:06:2e:e4:31:f2:98:42:c5:d4:0f:db:01:8a:99:
                    2c:d7:9a:d0:37:8a:96:f2:82:70:bd:00:3b:5c:82:
                    a2:ee:66:2f:96:48:87:8f:14:ec:66:d8:95:32:25:
                    fe:c8:17:3c:0e:69:ea:a2:40:f8:86:51:8c:0c:e7:
                    58:af:77:5f:35:f2:81:52:bf:3a:0c:d2:1a:91:52:
                    24:f9:fe:44:e2:8a:35:8f:9b:55:9b:80:ca:1c:5a:
                    96:0e:14:bb:03:43:ad:5a:2e:67:cb:3c:20:43:a3:
                    f8:d7:34:e5:51:ac:b4:de:8b:2e:fe:07:75:5d:1b:
                    e0:de:85:dd:ff:1b:f2:5c:5b:ce:ff:7a:c4:d6:f9:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6C:D3:1F:EE:F5:01:A6:DA:74:0C:15:A8:A3:63:45:C5:13:29:95
            X509v3 Authority Key Identifier:
                keyid:DA:5D:A3:FD:DD:F8:D0:B5:0A:29:BF:49:5F:F7:94:1F:D5:C2:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/1/DA5DA3FDDDF8D0B50A29BF495FF7941FD5C2C7B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:07:89:96:5a:d6:50:a0:14:54:d4:b6:2a:b7:56:39:dc:
         12:49:1a:cb:a0:53:c6:87:98:b4:f0:b1:c1:19:c4:f0:0e:fd:
         73:02:e3:e7:24:80:94:a0:54:09:33:47:1c:14:b0:82:b3:73:
         60:d2:e1:55:2a:5b:ef:20:ec:c6:58:d9:2d:60:74:fc:4b:d8:
         1c:ff:78:df:3d:03:e6:00:2e:4e:11:39:30:17:9c:95:07:fb:
         be:2c:f5:79:e1:e0:da:a4:67:0b:9d:4d:e2:31:f2:9c:e5:28:
         c1:2b:0d:8e:c9:02:5c:ab:25:6b:d7:b8:22:ef:42:e7:4b:28:
         b7:a9:e4:97:5a:2c:e4:27:41:32:88:b4:ee:96:3e:6a:d4:3f:
         3f:db:cb:f0:db:2c:e1:99:96:ce:a7:68:4c:8c:f4:9c:d1:ac:
         0a:a5:b8:ed:e0:ab:d3:2e:d0:5f:65:4f:41:70:8a:0b:12:b6:
         eb:4f:5c:24:81:c9:9d:7e:09:01:24:00:00:9d:2a:d7:ab:47:
         67:47:6f:45:b6:d1:c9:5c:b2:cc:b9:3d:13:61:d8:84:dc:74:
         8b:fa:b2:58:10:18:35:0e:9e:e0:33:3d:41:a2:a1:09:3d:7a:
         a2:43:19:9b:db:cc:03:e5:95:5a:80:ef:ee:d4:43:83:f0:ca:
         28:d1:ec:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----