Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/382DF13B0C7EDD404840F25896963169119BE7E9.mft
File:                     382DF13B0C7EDD404840F25896963169119BE7E9.mft (raw, json)
Hash identifier:          xBZowQV32sJi2f7xW46wi4hh8jcQVE2kRb0r7iNkcbA=
Subject key identifier:   DB:19:7B:DE:15:EB:86:73:DF:E4:0B:BF:EB:23:34:36:BA:9D:A9:04
Authority key identifier: 38:2D:F1:3B:0C:7E:DD:40:48:40:F2:58:96:96:31:69:11:9B:E7:E9
Certificate issuer:       /CN=382DF13B0C7EDD404840F25896963169119BE7E9
Certificate serial:       049EF23747A9D054E0F8F29248B78EF686933F17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/382DF13B0C7EDD404840F25896963169119BE7E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/382DF13B0C7EDD404840F25896963169119BE7E9.mft
Manifest number:          18
Signing time:             Thu 28 Mar 2024 18:55:42 +0000
Manifest this update:     Thu 28 Mar 2024 18:50:42 +0000
Manifest next update:     Fri 29 Mar 2024 22:53:42 +0000
Files and hashes:         1: 323830343a363537303a3a2f33322d3336203d3e20323639343930.roa (hash: Ff1kPuIAditvbWIP7o7zlFIZ4EKhE0YlxfYF8b4dXv8=)
                          2: 382DF13B0C7EDD404840F25896963169119BE7E9.crl (hash: 6CEaoPK8LEJa8f34WCrmukglhDlxZTTQE0okVb2qAL8=)
                          3: 34352e3138372e3234302e302f32322d3234203d3e20323639343930.roa (hash: NEGJMW2eR2Jw/ReHvb5CxvFkaCXud6DIIDUaOuKYQ4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9e:f2:37:47:a9:d0:54:e0:f8:f2:92:48:b7:8e:f6:86:93:3f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=382DF13B0C7EDD404840F25896963169119BE7E9
        Validity
            Not Before: Mar 28 18:50:42 2024 GMT
            Not After : Mar 29 22:53:42 2024 GMT
        Subject: CN=DB197BDE15EB8673DFE40BBFEB233436BA9DA904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:b5:19:75:b7:e8:33:07:ee:0a:2b:6a:44:
                    20:35:07:34:51:6a:9e:86:72:f6:b0:e9:24:ea:42:
                    1b:54:05:66:bd:c1:e6:2a:9d:8a:d1:3b:86:ac:5f:
                    b3:70:39:90:24:31:87:4b:da:1c:8b:4f:e2:70:fb:
                    d8:f3:2b:66:77:4f:ca:8c:f1:b8:e4:90:28:f7:13:
                    49:33:b2:9f:49:1e:59:52:20:a0:0a:e4:9f:c2:55:
                    f3:8d:57:43:1a:b8:37:28:1f:1d:88:08:f8:d1:9b:
                    32:52:8e:53:73:cb:c9:f6:ea:de:0d:8e:63:66:26:
                    4c:00:df:cb:5b:b3:82:9a:87:30:10:95:6d:d4:22:
                    95:dd:9a:15:f6:d5:01:b7:4d:75:a0:c6:a5:1e:3f:
                    7e:fa:10:1b:79:1d:82:13:2a:21:5c:62:0c:e9:1d:
                    2c:b0:d7:0b:e8:1d:63:a2:39:33:75:c8:69:43:a2:
                    4f:6e:a5:f5:78:c4:15:9f:72:b2:a5:96:a8:27:bb:
                    8b:e7:46:86:fc:e5:e3:7c:ab:0a:58:31:2b:3b:a5:
                    d2:e5:a3:32:da:da:93:eb:ff:28:a3:85:c1:a3:bc:
                    eb:23:cb:39:88:76:95:b7:08:d2:50:63:46:86:ad:
                    96:a0:94:15:80:37:78:ac:fd:86:42:40:bf:2a:42:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:7B:DE:15:EB:86:73:DF:E4:0B:BF:EB:23:34:36:BA:9D:A9:04
            X509v3 Authority Key Identifier:
                keyid:38:2D:F1:3B:0C:7E:DD:40:48:40:F2:58:96:96:31:69:11:9B:E7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/382DF13B0C7EDD404840F25896963169119BE7E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/382DF13B0C7EDD404840F25896963169119BE7E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/382DF13B0C7EDD404840F25896963169119BE7E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fd:ad:e6:dc:2d:a5:82:e6:e2:40:ff:16:12:12:ba:a2:86:
         04:46:6d:70:9a:b4:03:f5:f9:05:26:28:92:80:dc:a2:06:68:
         39:4d:d1:2b:9e:68:97:4f:6c:6a:61:d5:e2:76:3f:89:f5:ab:
         e7:d3:89:25:c4:15:b3:a1:0b:4b:c0:12:50:b2:d1:35:e7:70:
         a4:85:f3:55:ee:63:3c:d6:fb:87:dc:51:ca:37:85:da:3a:4a:
         fc:02:91:e0:3b:4e:e2:43:11:b9:b4:fa:28:65:9e:95:29:b3:
         f7:02:8b:e6:ca:4a:9d:1d:7c:3c:38:8d:89:c9:4e:6a:09:e4:
         27:db:a4:1b:84:0f:c0:24:96:c8:d6:cf:42:ec:4b:3e:91:9e:
         fe:15:0f:ba:85:ab:4c:74:e1:75:16:e6:c7:76:f7:be:a6:f7:
         d0:65:f7:a6:d9:4e:e8:c6:91:77:0a:c8:15:0c:b3:e2:fb:c8:
         89:2a:81:26:00:cc:57:7f:40:17:eb:0d:c3:ac:5e:b1:fd:61:
         68:18:68:7d:13:bc:70:08:7e:c5:49:80:55:ca:e1:4c:f2:22:
         a8:c6:db:98:0c:92:c0:eb:e4:6b:41:7a:60:71:0e:32:5c:b4:
         7d:f2:ed:be:96:da:ae:a8:de:8c:c3:66:53:12:6f:cc:83:64:
         4e:2b:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----