Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.mft
File:                     C3976C839B0ABBABE40425B1CDA010B8DF73E96B.mft (raw, json)
Hash identifier:          uC36Fv1uSWbjSP/ci0Tg3po9h64g7P18GTqoVtjl2eA=
Subject key identifier:   A1:70:36:55:AC:5E:0B:E0:62:E6:EC:FC:27:28:21:3A:7A:6A:F3:8A
Authority key identifier: C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B
Certificate issuer:       /CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
Certificate serial:       1477159511E81BF2AE42FC14529C310C853C9F63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.mft
Manifest number:          011D
Signing time:             Sun 14 Apr 2024 23:42:02 +0000
Manifest this update:     Sun 14 Apr 2024 23:37:02 +0000
Manifest next update:     Tue 16 Apr 2024 01:21:02 +0000
Files and hashes:         1: C3976C839B0ABBABE40425B1CDA010B8DF73E96B.crl (hash: YBv71uIcNWa4cT/f8JbEwS/lzOZsVZZl2mEsvGxz2s4=)
                          2: 323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (hash: yO6ODVCzzIbgHDRO6O8jLPf1ibdCrJziXFTzBc/cJ50=)
                          3: 3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (hash: Y9SDvt91fUW4LfjHPKKQ57kNvg8BMY0oQYYpSTmIXxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:15:95:11:e8:1b:f2:ae:42:fc:14:52:9c:31:0c:85:3c:9f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
        Validity
            Not Before: Apr 14 23:37:02 2024 GMT
            Not After : Apr 16 01:21:02 2024 GMT
        Subject: CN=A1703655AC5E0BE062E6ECFC2728213A7A6AF38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:54:b9:de:8b:57:85:ee:1d:fe:86:7e:d4:
                    a0:2e:75:33:5f:ed:52:2d:30:08:05:1c:4e:a5:25:
                    c4:21:0a:f2:19:58:3c:c5:ce:18:ef:ab:87:05:ae:
                    f8:e5:1d:39:69:61:9e:16:42:15:4c:ae:30:eb:d2:
                    21:b2:99:0b:90:31:a6:71:5d:e6:58:70:03:d5:dd:
                    d6:b3:b5:02:48:5b:20:5c:96:f8:78:5d:44:1d:27:
                    fe:27:2a:38:a6:ce:11:be:f0:3a:ce:54:30:2d:7e:
                    cf:37:a3:93:d7:44:b1:45:b6:fe:fc:2e:11:7b:0b:
                    c3:77:1e:94:59:94:20:9b:c1:5f:35:1a:ce:2d:ef:
                    43:7a:cf:5c:6c:a8:df:d0:98:89:a2:03:e4:40:ef:
                    b3:22:e3:fb:c6:75:98:c7:95:d3:37:51:da:ba:bb:
                    0b:37:21:8f:2e:42:5f:67:a9:d5:bd:1c:ac:6a:52:
                    3c:55:76:76:51:b1:1b:41:52:35:3a:f9:a6:db:b4:
                    07:23:1a:d9:f1:a7:82:37:89:4f:9e:07:e4:5f:ee:
                    32:01:e8:8a:6a:f0:b3:4e:55:fc:3b:0e:28:14:09:
                    c8:d7:18:18:6f:37:d5:69:88:07:37:45:9c:9e:04:
                    db:8f:60:19:f1:7e:ae:a8:c2:70:18:1c:ae:2b:b5:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:70:36:55:AC:5E:0B:E0:62:E6:EC:FC:27:28:21:3A:7A:6A:F3:8A
            X509v3 Authority Key Identifier:
                keyid:C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:28:8c:8a:97:3b:06:27:19:15:d1:f3:51:5c:42:98:90:
         5d:39:67:40:5c:fa:fb:5b:aa:dc:a0:94:1a:77:b1:e5:8c:0c:
         b4:79:f8:60:b7:c7:e1:0e:bd:7e:06:db:3d:78:b7:79:6a:f8:
         0e:13:8d:f3:72:31:09:1c:b5:48:66:8c:ab:61:ab:73:34:5c:
         54:bd:aa:43:a1:52:91:0d:b5:91:12:37:e9:4c:5b:9b:fd:fa:
         85:05:23:0f:e2:9d:c3:32:09:c2:53:da:bc:15:23:99:e8:67:
         a8:7b:17:b6:25:d0:ae:2c:42:90:cc:86:dc:97:31:f5:fd:58:
         27:44:c6:78:fa:55:39:e8:05:c8:f9:87:6f:88:9c:63:67:26:
         f1:e9:6b:a4:26:76:e3:ad:fa:9d:b6:ea:53:d6:9f:a5:ed:b9:
         da:7a:e8:ed:eb:04:ca:94:ee:c2:4f:34:a1:9a:04:e6:e0:29:
         ac:44:94:bb:4e:aa:67:8a:1c:7d:8a:c5:e8:19:18:c2:c6:d2:
         2a:d3:2b:53:1f:1b:bd:3f:7e:3b:d5:1b:97:86:0c:0b:b6:19:
         6b:a5:c0:b5:9c:3b:9d:d4:30:58:b7:93:9d:ff:cc:01:ca:c0:
         b3:99:64:63:e1:cb:11:b5:56:63:e0:56:4f:b8:4a:aa:4e:fc:
         9e:fb:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----