Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.mft
File:                     1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.mft (raw, json)
Hash identifier:          o4DfJq4uY9LTUzd6g4BcvAvv/lIqo7kFD2BnFqYxbpo=
Subject key identifier:   CB:94:CF:0E:44:59:F2:6E:2D:78:A4:44:90:CB:7C:24:BD:AB:77:8C
Authority key identifier: 1B:DF:FD:C9:E6:2C:A5:8F:E7:D6:BC:AB:0C:4F:21:8A:40:0A:5D:56
Certificate issuer:       /CN=1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56
Certificate serial:       48E78216257799FC1C6C33277DCE76B47BDD9992
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.mft
Manifest number:          27
Signing time:             Sat 18 May 2024 11:34:45 +0000
Manifest this update:     Sat 18 May 2024 11:29:45 +0000
Manifest next update:     Sun 19 May 2024 13:23:45 +0000
Files and hashes:         1: 323830343a353635343a3a2f33322d313238203d3e20323637393931.roa (hash: lON5fdv726wu9ABHai8iHfrJ74q+CNo/yZJzw5IohA8=)
                          2: 34352e3136372e35322e302f32322d3332203d3e20323637393931.roa (hash: Y0SrXglHeZO0CMnP60ngwW5+ytvY+DTBc4NZ4RkA6Gs=)
                          3: 1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.crl (hash: GJVO2AWMWFf1ku1ZwMgbhotpNNFcTSswdYSOyQ6EbQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e7:82:16:25:77:99:fc:1c:6c:33:27:7d:ce:76:b4:7b:dd:99:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56
        Validity
            Not Before: May 18 11:29:45 2024 GMT
            Not After : May 19 13:23:45 2024 GMT
        Subject: CN=CB94CF0E4459F26E2D78A44490CB7C24BDAB778C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:cd:13:70:df:a6:cc:e8:db:22:31:cc:05:
                    b5:c9:bc:2c:2b:f7:7b:f7:73:15:b2:8b:c6:e1:a8:
                    d2:bf:2f:34:de:fc:e9:fc:3c:c0:7c:13:9b:42:f6:
                    9d:ce:1c:f1:7e:07:6a:df:59:fb:1f:65:b2:32:1e:
                    0f:c0:4d:10:9c:93:9d:a6:e1:c8:23:28:65:d4:a0:
                    fc:fa:31:c0:dd:10:a4:3d:89:5a:1b:de:2a:e6:cb:
                    e4:a6:7d:57:e7:c4:dd:4f:62:14:df:04:1d:ac:fe:
                    ca:9f:45:6d:63:86:1e:e1:c0:40:3d:d7:49:35:26:
                    52:f4:80:97:aa:27:56:67:4d:47:b9:5f:e0:c0:b3:
                    0d:de:92:83:ec:fb:0a:69:f8:75:85:c8:e3:d8:32:
                    c9:1d:cc:ec:2c:8c:d8:7c:27:38:e2:47:af:83:14:
                    8c:84:83:9c:61:72:ba:4d:51:69:40:34:d5:97:a9:
                    4f:bd:9d:30:98:4d:2e:f0:13:ed:63:a3:02:01:3b:
                    5d:48:9b:04:94:f4:56:2f:b6:95:7a:8f:c3:81:c0:
                    ce:fb:e4:63:3c:39:c8:b5:0a:b0:eb:f0:dd:89:ff:
                    91:28:d6:18:4f:80:04:8f:ed:dc:e2:54:0c:7d:e5:
                    68:a2:ba:dd:31:9f:00:4f:0f:7d:5c:f8:c8:20:d7:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:CF:0E:44:59:F2:6E:2D:78:A4:44:90:CB:7C:24:BD:AB:77:8C
            X509v3 Authority Key Identifier:
                keyid:1B:DF:FD:C9:E6:2C:A5:8F:E7:D6:BC:AB:0C:4F:21:8A:40:0A:5D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/1BDFFDC9E62CA58FE7D6BCAB0C4F218A400A5D56.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:86:73:be:89:ea:a5:9f:92:98:f5:db:f8:5d:df:c2:31:ef:
         77:55:f0:45:63:ff:d0:8e:3f:b0:e0:4a:a1:99:17:5e:e7:0d:
         03:73:55:19:59:84:fa:31:aa:19:af:64:1b:b9:d5:fd:4a:79:
         b1:e6:f4:4f:71:ad:be:b7:92:e2:27:ed:b0:b8:e0:ed:63:77:
         3f:9e:59:4c:f5:a0:e5:8e:1d:19:24:4e:59:1e:26:bb:1e:ee:
         7a:ed:7e:87:fd:b6:63:e9:85:b6:34:fd:16:72:9f:d6:b0:aa:
         8b:a4:e2:3d:8b:24:73:f5:30:ef:9a:53:af:b1:19:50:50:2f:
         ff:1a:7a:1a:bc:64:11:1f:85:3b:76:c3:e1:65:a1:17:f6:fd:
         90:de:62:ed:1e:91:5b:9c:43:3a:09:5e:ca:68:a9:44:4c:d1:
         d0:07:dc:8d:95:39:43:67:09:60:8b:51:97:55:1a:60:60:20:
         0d:f0:d3:e0:d5:09:9d:16:57:15:34:37:33:0f:ef:e1:35:cd:
         83:7f:cb:49:ab:d7:bd:df:63:60:ff:58:fd:52:4b:68:06:69:
         d3:19:57:09:6c:f1:b8:f6:5f:48:ba:75:55:8e:f3:c5:2d:63:
         77:d8:52:99:1c:a2:f7:9b:d2:a5:19:12:c8:99:98:db:24:96:
         20:62:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----