Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.mft
File:                     E8D860B422ECC27B0FE4672C6254D3D122E15F60.mft (raw, json)
Hash identifier:          iUMUuOA8WgqFe3muQH3Y6EFz6PSqCK8K6kxbgRKrgxc=
Subject key identifier:   BA:40:30:49:CB:E4:FE:EE:22:61:1E:70:14:E4:43:FC:A0:8E:83:88
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       3B8D7D8F285E1F300202791EB52964C332FA23B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.mft
Manifest number:          5C
Signing time:             Mon 15 Apr 2024 06:48:39 +0000
Manifest this update:     Mon 15 Apr 2024 06:43:39 +0000
Manifest next update:     Tue 16 Apr 2024 09:57:39 +0000
Files and hashes:         1: 34352e3233322e35362e302f32322d3234203d3e20323637323439.roa (hash: bDfD1pUSsOf975e23N7Y6S7TCfABEHbbA46NWHkgq9s=)
                          2: E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl (hash: 4/DtEK3utAAlgy6OQRmN5+OM3TxFlTFFmGwGi84G0O8=)
                          3: 323830343a346139303a3a2f33322d3438203d3e20323637323439.roa (hash: 8qEZy/IHvuMsB0dE30Xc26Sczqi3HuL9f9mPj8GjEjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:7d:8f:28:5e:1f:30:02:02:79:1e:b5:29:64:c3:32:fa:23:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Apr 15 06:43:39 2024 GMT
            Not After : Apr 16 09:57:39 2024 GMT
        Subject: CN=BA403049CBE4FEEE22611E7014E443FCA08E8388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:c7:93:d5:a3:c2:5c:be:bc:e9:69:0f:00:
                    1b:d4:f6:2b:70:a0:77:da:27:75:aa:23:80:f8:c0:
                    60:71:58:f0:5a:1f:af:f6:a7:51:a0:9f:ba:a0:67:
                    4f:d9:8a:ab:7a:38:ee:ad:67:f6:b2:58:8e:bf:f3:
                    99:b0:51:8e:49:c8:55:c3:ee:af:02:4b:b6:7f:18:
                    60:ae:22:f9:da:33:00:dc:4e:80:2a:a7:89:f8:28:
                    dd:1b:5d:0d:4d:6b:c9:84:7c:e6:fa:67:10:c4:0c:
                    75:d1:c8:03:41:a5:66:de:e9:8f:ed:59:2c:5b:91:
                    27:4f:f7:e8:2d:17:31:15:0d:e2:46:30:02:63:8a:
                    d8:76:0f:d1:23:eb:74:20:dc:24:a4:6b:09:c2:9a:
                    a7:74:a6:e4:f3:6e:64:bf:e8:3d:20:ca:a9:e4:38:
                    39:7a:0d:6b:72:ff:04:a3:83:e7:1f:c9:be:a1:44:
                    0a:95:e5:15:6b:31:a8:7a:1b:51:94:dd:ea:a9:05:
                    66:f2:e1:a7:0e:9f:f8:13:a1:64:a3:c2:c4:df:fd:
                    cc:c6:dd:2d:38:e5:2f:6d:46:aa:e8:14:e1:d3:01:
                    7b:1b:a0:94:3b:b3:e8:82:84:2b:28:c0:ee:3d:b3:
                    93:ea:83:7f:fd:e1:c7:9a:95:78:5c:87:12:6a:e8:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:40:30:49:CB:E4:FE:EE:22:61:1E:70:14:E4:43:FC:A0:8E:83:88
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:0c:bf:51:4c:65:e7:b0:4e:87:f0:38:b7:f9:c1:fd:13:
         63:74:d2:c4:3f:4d:42:d2:7f:26:b5:bf:98:7f:2a:74:cb:61:
         05:31:98:08:7a:b4:0c:ca:23:09:a6:07:4b:87:72:17:27:3a:
         cd:04:02:cc:00:27:2f:8d:a4:81:83:76:a6:00:9e:ce:ca:cc:
         97:97:ac:6d:a7:6a:cf:2a:ea:41:6e:97:85:55:12:29:b1:cb:
         99:01:ac:76:99:8a:a0:d2:c3:4f:42:e5:80:35:5c:bf:73:f9:
         14:c9:de:9e:ec:d8:e3:2c:17:a2:09:d6:12:2d:9c:60:16:6e:
         3e:9c:1c:5f:97:60:05:15:a8:bd:4e:0c:90:50:ab:c0:14:ab:
         6c:79:df:5e:78:33:81:7b:bd:70:c8:70:1e:5b:9c:cf:17:d9:
         ad:7c:18:9f:c4:32:97:d9:30:93:22:28:0e:a3:7e:71:3c:29:
         07:ec:38:3c:e1:a7:7b:e2:3e:a1:a2:b3:9b:7b:20:64:9f:9c:
         5b:11:89:4c:9d:c1:b8:88:5d:f4:53:b6:45:a6:09:bd:89:ae:
         93:e6:d4:ad:f0:1b:1b:74:9b:b1:e7:9c:ec:e0:1e:67:5c:d7:
         c1:4f:d1:79:4b:0b:a8:d5:73:58:72:09:4c:a2:3f:76:a0:47:
         d1:a5:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----