Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.mft
File:                     528249EC56CB215F518F4451571769ECE2BB8915.mft (raw, json)
Hash identifier:          oNhgO6B9tdtqHmvK6KJIabV9jdQDoWyN1EcZ53uv8ZM=
Subject key identifier:   A3:49:C2:ED:98:2E:8F:12:58:B2:4F:89:8C:44:E4:2A:9C:13:DE:74
Authority key identifier: 52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15
Certificate issuer:       /CN=528249EC56CB215F518F4451571769ECE2BB8915
Certificate serial:       2E016B848110A63D164257E9947B04B1FD4995F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.mft
Manifest number:          EF
Signing time:             Sun 14 Apr 2024 20:01:23 +0000
Manifest this update:     Sun 14 Apr 2024 19:56:23 +0000
Manifest next update:     Mon 15 Apr 2024 20:57:23 +0000
Files and hashes:         1: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (hash: HMmupWcn498/+Dcu8YTW0ykXUQc9p5KwFWUTnseG6UQ=)
                          2: 528249EC56CB215F518F4451571769ECE2BB8915.crl (hash: gp1rypcW4Fw1vmd//Dd2t9SmyeRQXRgjCCkRK8cPWL8=)
                          3: 323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (hash: lUjiRM9z5j8KBGWhRq9nVMNi9CH4PElSmdsA7UojpK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:01:6b:84:81:10:a6:3d:16:42:57:e9:94:7b:04:b1:fd:49:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528249EC56CB215F518F4451571769ECE2BB8915
        Validity
            Not Before: Apr 14 19:56:23 2024 GMT
            Not After : Apr 15 20:57:23 2024 GMT
        Subject: CN=A349C2ED982E8F1258B24F898C44E42A9C13DE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:fe:13:30:06:57:b0:75:9d:bc:74:8e:29:
                    3a:cb:20:75:a0:e3:91:c6:e7:76:7a:3d:87:08:5f:
                    6f:de:ff:ee:0c:9a:f2:de:28:f5:d8:84:01:d6:cc:
                    d9:63:7b:bc:95:a1:5c:cb:44:c8:87:34:9c:be:c0:
                    51:24:ef:a5:1e:a1:fd:ca:7b:1c:5a:44:34:74:b5:
                    f7:d3:fd:4a:75:2d:62:65:af:1d:63:7a:8d:7b:0e:
                    f0:93:80:88:0c:38:b1:37:88:51:3f:e7:75:83:7b:
                    8f:2a:42:3b:34:47:8f:70:aa:93:79:71:32:5e:c2:
                    d7:ea:91:6d:1d:6f:d4:b2:52:d4:69:f5:85:8f:f2:
                    1d:bd:aa:7f:88:a6:b5:4d:04:df:46:f1:66:b8:98:
                    61:8e:e7:69:89:0c:51:2d:84:dd:82:f4:ff:c6:fa:
                    86:a2:dc:2c:96:2e:27:62:f5:77:5a:a6:2e:56:5a:
                    cc:36:ba:a2:da:78:70:87:b0:fe:26:e8:90:90:21:
                    93:00:9a:68:80:0e:da:a5:03:03:02:0e:c5:ab:a4:
                    8f:6d:8b:e0:17:f5:0d:b0:05:cb:08:fb:49:3a:a0:
                    62:4c:e5:13:0c:fe:7c:2e:7e:ff:1e:de:70:9d:07:
                    3f:cf:f9:9b:4b:41:b5:3d:4a:e4:6f:98:41:c3:39:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:49:C2:ED:98:2E:8F:12:58:B2:4F:89:8C:44:E4:2A:9C:13:DE:74
            X509v3 Authority Key Identifier:
                keyid:52:82:49:EC:56:CB:21:5F:51:8F:44:51:57:17:69:EC:E2:BB:89:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/528249EC56CB215F518F4451571769ECE2BB8915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/0/528249EC56CB215F518F4451571769ECE2BB8915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:68:ff:94:ea:37:d2:91:4f:b7:79:ec:c0:be:e6:6a:b5:42:
         40:87:f8:f2:1f:46:8a:e8:0d:f8:26:7c:cd:e5:26:b6:5d:06:
         1f:fa:74:5c:c2:e4:06:98:5f:25:40:89:6b:85:33:13:d6:fa:
         09:9c:95:f2:37:f0:0d:16:c9:da:78:1e:53:0c:15:88:cf:da:
         3f:a8:e5:c8:50:45:42:f6:68:96:7a:a2:88:65:17:6e:34:ee:
         59:18:8d:8f:52:82:19:dc:39:cf:d8:9a:e2:d8:29:96:93:9f:
         77:9d:c8:2b:2f:d8:b6:f5:1c:0f:a6:ee:6d:7d:69:8a:ab:87:
         19:4d:70:d6:a7:7b:a6:93:c4:8e:2d:a3:06:f4:95:44:06:fe:
         2c:9b:96:a6:0e:d5:0e:35:d6:53:ac:38:a6:5b:d3:68:05:35:
         84:e0:59:cf:96:b3:8d:52:4e:fe:34:2b:d1:69:32:d7:13:e3:
         7a:a5:a0:87:96:a0:26:12:4a:12:71:83:3a:90:fd:89:43:49:
         82:c3:c7:12:83:54:68:ef:a6:24:2c:2c:06:a8:9d:8e:c0:52:
         b4:a0:fb:f4:ae:b0:a7:35:12:19:0c:dc:b0:5c:59:41:e0:30:
         36:8c:19:9e:eb:b5:e7:f1:e9:51:c4:d1:78:f8:a1:6a:bd:6c:
         aa:0d:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----