Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.mft
File:                     1CA20D5CBA9102939860AEADFEF368323D206454.mft (raw, json)
Hash identifier:          kplhNdltNBz6Lhcop2s00A74xloaRnxM4V+C4QS/zi8=
Subject key identifier:   C2:11:13:56:FC:4F:4F:FF:2B:29:A4:99:14:E3:19:14:78:DD:23:91
Authority key identifier: 1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54
Certificate issuer:       /CN=1CA20D5CBA9102939860AEADFEF368323D206454
Certificate serial:       768C91ACB822F298DE3E940DF3572A840A7395F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.mft
Manifest number:          1E
Signing time:             Thu 15 Aug 2024 21:05:12 +0000
Manifest this update:     Thu 15 Aug 2024 21:00:12 +0000
Manifest next update:     Fri 16 Aug 2024 22:51:12 +0000
Files and hashes:         1: 1CA20D5CBA9102939860AEADFEF368323D206454.crl (hash: rezLJt/oa6mOw3vV9QJ1rwIVWI7znLeO4Xy1lA1idtg=)
                          2: 323830343a313831383a3a2f33322d3438203d3e20323632363537.roa (hash: oUHYnfT3TBuENN4DthOJbPUA9HmEC7Rg/2kco/y4S3Q=)
                          3: 3230302e372e302e302f32322d3234203d3e20323632363537.roa (hash: HGiSiOTQ1tw9FOXgdb7Bmch64WsuDOAWYJ9jCv0lKrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8c:91:ac:b8:22:f2:98:de:3e:94:0d:f3:57:2a:84:0a:73:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CA20D5CBA9102939860AEADFEF368323D206454
        Validity
            Not Before: Aug 15 21:00:12 2024 GMT
            Not After : Aug 16 22:51:12 2024 GMT
        Subject: CN=C2111356FC4F4FFF2B29A49914E3191478DD2391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:00:63:6b:54:98:35:88:77:2f:ea:eb:16:
                    58:3f:02:b1:ea:02:cf:65:68:02:e3:5b:68:6a:6c:
                    79:89:ba:7f:2e:34:02:e5:fd:8c:ed:22:13:d5:d2:
                    37:f4:63:e9:b3:a2:e2:47:14:f1:19:9c:d7:0c:40:
                    88:f3:d3:0a:55:ac:e3:5f:cd:ff:4d:4c:1f:cb:ff:
                    38:1a:03:f1:d8:6b:b9:8d:be:51:6b:10:ec:8a:3a:
                    b1:57:6e:36:6d:a3:b4:66:5b:af:66:7d:49:3f:8d:
                    c4:fd:96:ff:bf:42:9b:16:cd:4f:17:25:2e:0c:3a:
                    54:1e:9c:d4:2f:a4:5f:af:5b:fd:2d:33:0e:83:09:
                    11:c1:1b:7f:b6:5b:fd:e8:62:b4:73:57:61:a9:07:
                    86:0f:50:da:b4:da:3d:55:9c:2d:6c:2a:d2:51:12:
                    bf:b5:fe:0f:21:25:97:5c:85:14:b1:1e:31:b0:87:
                    10:a9:7f:42:1e:cd:e7:fb:2e:e7:48:70:5b:17:6d:
                    7b:9e:e9:f5:72:96:eb:3c:15:49:d7:fb:0e:60:8c:
                    32:b4:6f:81:56:a3:a7:cd:22:f6:c6:96:3f:24:3f:
                    60:c1:1c:d7:12:38:57:0d:66:62:57:e1:e2:ab:23:
                    3c:98:b3:c9:f7:59:84:f6:4e:21:ba:af:4f:17:76:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:11:13:56:FC:4F:4F:FF:2B:29:A4:99:14:E3:19:14:78:DD:23:91
            X509v3 Authority Key Identifier:
                keyid:1C:A2:0D:5C:BA:91:02:93:98:60:AE:AD:FE:F3:68:32:3D:20:64:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CA20D5CBA9102939860AEADFEF368323D206454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/1CA20D5CBA9102939860AEADFEF368323D206454.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:65:9a:19:14:80:f4:be:97:4c:80:7b:9d:43:a2:1a:95:
         74:67:ac:5c:01:1f:c3:cc:04:48:a0:ef:3f:3d:05:ce:29:63:
         9f:bf:63:25:96:13:16:24:0b:8d:5e:81:f6:bf:af:af:ce:96:
         79:5b:1e:b6:f4:69:dc:15:d8:bf:01:0d:30:9f:0b:1f:a1:f0:
         14:a0:ea:c1:67:11:c1:ef:58:f8:72:9b:7b:f4:f2:c3:53:9e:
         ac:a5:d3:be:e2:4f:c3:56:b1:10:74:4b:75:cc:b9:4f:ae:56:
         cb:f5:59:79:cc:7f:d3:72:41:c6:c2:66:47:e3:27:f7:5c:fb:
         3f:1e:27:f3:24:07:4a:5a:3e:52:d4:fa:9d:4e:7b:9a:55:0e:
         29:06:98:97:01:32:fb:22:d3:23:fb:a6:db:90:8b:6e:a4:83:
         4b:5f:3c:8a:d8:40:f1:4b:72:4c:d2:d1:74:ff:26:53:e0:f3:
         09:bc:9f:3e:46:b3:fe:cc:fa:ac:98:1b:ad:74:0d:a2:c1:c3:
         d8:1f:1f:d3:6d:b5:1f:ab:b3:93:17:5f:4c:05:a4:e2:49:45:
         8c:22:30:c1:dd:91:c2:43:70:b0:21:30:15:92:ec:a2:e0:da:
         20:00:3d:08:7d:be:15:fe:14:12:d4:0f:e2:4e:66:bf:b1:8e:
         63:16:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----