Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.mft
File:                     CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.mft (raw, json)
Hash identifier:          vXflTSxu5EnBnUL+L6y8d7ogX8Ji6dBObpoq89FXHnI=
Subject key identifier:   D1:65:44:2A:EF:72:AD:22:CF:D5:50:8D:16:7C:7E:0D:C3:1A:4C:EE
Authority key identifier: CA:16:6B:FF:C8:8F:E3:9C:DB:C0:37:FB:B0:A3:8C:02:5D:B2:E7:CA
Certificate issuer:       /CN=CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA
Certificate serial:       50C9B3DA2E0CA5A684A015B7D748975CACC54596
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.mft
Manifest number:          52
Signing time:             Wed 20 Mar 2024 19:36:59 +0000
Manifest this update:     Wed 20 Mar 2024 19:31:59 +0000
Manifest next update:     Thu 21 Mar 2024 22:21:59 +0000
Files and hashes:         1: CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.crl (hash: qmyKpo9GdwoTLO+vJxeYc/ZOHLeHrtrGyj0BQmCuP14=)
                          2: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: Brd9glo1Z/RJCnaJMWBpq+8dzIv+eiX8Lxwieuz0Pi4=)
                          3: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: +w/wJLyO7Ukm4pXyY9TLyLPS7I+Zc6FJQiTs+OCvp68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c9:b3:da:2e:0c:a5:a6:84:a0:15:b7:d7:48:97:5c:ac:c5:45:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA
        Validity
            Not Before: Mar 20 19:31:59 2024 GMT
            Not After : Mar 21 22:21:59 2024 GMT
        Subject: CN=D165442AEF72AD22CFD5508D167C7E0DC31A4CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:75:36:a8:e9:46:4c:cb:83:71:81:d5:8c:
                    e2:c6:ac:a2:39:53:04:c8:23:57:6d:ca:d2:d9:4c:
                    cf:dc:48:b0:3b:01:e2:74:5b:a2:83:1e:cd:93:c6:
                    f7:fe:67:bb:9e:59:7c:ff:77:6d:e0:6f:91:1c:42:
                    a7:95:f7:96:10:db:cf:d8:82:82:b6:40:a4:5b:74:
                    80:10:d4:5b:de:98:82:d4:fe:bf:d1:5b:d4:0c:a7:
                    b9:58:87:14:b9:3c:fc:73:b5:83:a7:4e:f0:7f:eb:
                    17:c3:6c:33:71:3e:1f:e5:46:e9:2c:15:a3:99:67:
                    52:1c:6e:ef:f4:be:8e:76:af:73:d4:6d:6d:95:91:
                    64:0c:95:4b:f7:ad:7a:44:82:7d:65:dc:f4:18:ed:
                    30:86:45:db:9b:9f:03:48:59:c8:0e:ad:9b:05:32:
                    78:38:c2:2d:ff:38:76:60:ef:ad:fa:b7:3b:9f:34:
                    ea:07:a2:f3:bd:e9:c5:78:c2:3c:81:98:43:10:96:
                    a2:78:5f:ca:22:5c:23:65:52:81:2c:83:86:aa:e1:
                    ee:d5:a4:da:3d:a9:b5:8c:78:ad:8b:c2:9a:ca:1b:
                    63:e2:a0:84:e8:97:e8:ba:13:8d:34:ce:bc:ca:4f:
                    bf:bb:d8:c3:a2:5e:32:cc:a5:43:11:e8:40:1b:c0:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:44:2A:EF:72:AD:22:CF:D5:50:8D:16:7C:7E:0D:C3:1A:4C:EE
            X509v3 Authority Key Identifier:
                keyid:CA:16:6B:FF:C8:8F:E3:9C:DB:C0:37:FB:B0:A3:8C:02:5D:B2:E7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:75:c7:6f:61:3b:6c:0a:41:1a:42:f5:44:41:4b:6b:35:
         84:66:cb:3a:bb:ed:f0:29:88:1b:88:66:6c:aa:93:7c:74:52:
         10:3b:7b:fb:63:e6:14:f2:55:ad:af:91:06:8b:1c:8f:62:50:
         9d:52:92:f1:bf:14:de:85:16:2b:1c:c9:78:7e:5d:a2:b9:d1:
         23:56:a5:d5:b0:1f:1f:5f:1e:57:93:ac:23:49:81:f3:26:92:
         6b:0e:c1:f8:21:ec:97:78:97:e5:4d:76:af:b9:b8:d8:5c:74:
         2c:70:ab:bf:51:51:e5:1b:3a:63:50:41:cb:fc:00:81:2c:cc:
         a5:df:bf:f4:d6:48:d2:46:a6:09:d8:60:e9:f4:aa:e8:8b:c9:
         36:0e:11:6e:50:4a:98:34:6c:f3:e4:d4:f1:13:0b:f0:a8:bb:
         0c:aa:0b:1a:0d:9e:ee:47:a0:3c:68:e8:f3:e6:2e:df:97:45:
         cf:55:e6:c4:22:11:11:aa:f0:26:c5:93:2e:e0:11:d0:1b:07:
         6a:d2:86:bb:69:01:49:0d:9a:99:4b:80:e5:96:03:ec:7f:fc:
         8b:c5:bf:c2:55:20:6e:8d:e8:13:44:6a:99:70:75:c2:77:80:
         1e:68:11:35:9b:6a:e1:64:33:3a:28:e4:85:5c:01:ad:9b:8d:
         08:e8:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----