Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/C3A846BD47B3028F6CA20C2382346700F68779F6.mft
File:                     C3A846BD47B3028F6CA20C2382346700F68779F6.mft (raw, json)
Hash identifier:          TQTdhbk5e/YH9X8RgBja/QnGQpwuJNrTB2B594A9PyI=
Subject key identifier:   BF:4B:6B:6E:3C:CA:81:94:F5:4F:FD:45:A2:CD:AF:F8:34:30:27:D3
Authority key identifier: C3:A8:46:BD:47:B3:02:8F:6C:A2:0C:23:82:34:67:00:F6:87:79:F6
Certificate issuer:       /CN=C3A846BD47B3028F6CA20C2382346700F68779F6
Certificate serial:       0EFFFF4E89FCD02CA6DEFF287A9559A881A91A63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3A846BD47B3028F6CA20C2382346700F68779F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/C3A846BD47B3028F6CA20C2382346700F68779F6.mft
Manifest number:          4E
Signing time:             Mon 15 Apr 2024 01:40:27 +0000
Manifest this update:     Mon 15 Apr 2024 01:35:27 +0000
Manifest next update:     Tue 16 Apr 2024 02:41:27 +0000
Files and hashes:         1: 323830343a3531343a3a2f33322d3438203d3e20323632343930.roa (hash: R3fpqC6yZisNM4cjm1/9mfmQrBrTHsXp2hA1iYk8XXA=)
                          2: C3A846BD47B3028F6CA20C2382346700F68779F6.crl (hash: CnKbFSmtXRo2+teswNBfjFOrgSgpii5cUE4RC0TYlCQ=)
                          3: 3137372e36362e38302e302f32312d3234203d3e20323632343930.roa (hash: pkUW0BOoEropvXWWkShoDKsAiBgQQLw6Z0GpwBPZDQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ff:ff:4e:89:fc:d0:2c:a6:de:ff:28:7a:95:59:a8:81:a9:1a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A846BD47B3028F6CA20C2382346700F68779F6
        Validity
            Not Before: Apr 15 01:35:27 2024 GMT
            Not After : Apr 16 02:41:27 2024 GMT
        Subject: CN=BF4B6B6E3CCA8194F54FFD45A2CDAFF8343027D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:ae:57:d2:54:dd:53:b8:fe:e1:c8:6c:4e:
                    14:11:ea:0f:5d:60:e3:c8:c5:4d:c2:81:b5:12:09:
                    5d:68:3e:32:d6:87:a3:8e:c8:71:ed:48:1c:7e:a6:
                    a7:ec:bc:88:2a:fa:10:d0:ff:f4:33:5c:82:8b:43:
                    10:fa:c1:10:ca:c0:94:a7:56:6e:10:43:a3:8b:a7:
                    71:c5:85:9c:01:7e:f4:46:d5:b7:4b:9c:d5:f5:eb:
                    8d:ab:56:55:2d:cc:87:89:a1:46:05:71:9b:66:17:
                    1e:f7:ba:56:3f:2a:22:2e:8e:07:7e:f5:cf:91:fe:
                    bc:61:50:48:68:0e:47:e0:91:5f:d4:45:7f:b1:1f:
                    22:55:cc:b0:e6:c7:5f:fd:8f:08:2c:be:61:a0:7e:
                    94:b8:b7:a3:91:e4:3f:2a:f1:a3:a3:93:12:e9:cb:
                    1e:8d:42:7d:ca:e2:e1:a4:ff:87:92:a9:d2:71:46:
                    48:95:0f:db:d2:ce:0a:21:0d:5b:4f:d2:7f:95:bf:
                    94:f7:c1:0e:b4:14:3f:c5:eb:fb:ec:de:05:bb:93:
                    03:b2:ae:71:88:51:31:1e:2a:03:00:14:b3:53:6c:
                    2a:e1:a4:7a:98:12:f2:d0:0a:10:1f:33:4f:03:10:
                    6b:3d:0e:ce:74:0c:3b:b6:0e:89:d5:02:7e:b8:10:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4B:6B:6E:3C:CA:81:94:F5:4F:FD:45:A2:CD:AF:F8:34:30:27:D3
            X509v3 Authority Key Identifier:
                keyid:C3:A8:46:BD:47:B3:02:8F:6C:A2:0C:23:82:34:67:00:F6:87:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/C3A846BD47B3028F6CA20C2382346700F68779F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3A846BD47B3028F6CA20C2382346700F68779F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/C3A846BD47B3028F6CA20C2382346700F68779F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:36:c9:c1:3a:22:01:41:6c:ca:e4:f4:1a:b6:e4:0d:26:
         67:da:80:5a:1c:63:7f:a6:94:fd:23:c0:7e:0c:95:8c:34:62:
         80:70:ef:10:07:1a:81:4e:01:87:82:54:ad:b9:f9:c6:93:16:
         2a:53:a0:06:1b:2d:d9:16:f0:ab:dc:2a:b1:ea:66:ce:4d:09:
         27:13:7b:c9:9c:00:e2:3e:09:2d:ff:db:68:9c:d0:2d:81:26:
         26:02:ea:25:28:0d:d0:8d:41:27:63:63:49:40:c1:32:d7:a0:
         77:e9:a6:82:f8:28:53:d8:38:01:bc:02:b7:49:2b:92:fd:49:
         6b:54:ce:bc:5d:f7:a6:ba:91:83:c5:75:ad:19:76:62:57:60:
         ae:b0:b3:e2:e0:70:24:9c:c6:9c:aa:cb:e7:04:d5:13:7e:cf:
         12:f8:96:83:a3:97:e9:30:3d:b2:f7:53:1b:e2:c9:d3:a8:6f:
         1e:be:0f:d4:e1:ab:59:3b:b9:99:0a:d3:c5:fc:f7:5f:cc:46:
         f5:bf:f5:55:29:03:ab:81:70:89:41:e8:d1:2b:ad:88:ab:d4:
         9f:f3:f9:6b:74:d7:94:51:96:33:59:81:0c:d3:ac:8e:c5:bd:
         eb:ef:c1:ce:b9:46:30:29:ef:31:87:e3:84:6e:fc:dd:f9:66:
         b8:d2:94:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----