Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.mft
File:                     E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.mft (raw, json)
Hash identifier:          GojPpmwI+f/bzR9NwjpfaNKLE2p1V8Tqqs2QxjB/D3U=
Subject key identifier:   E8:38:27:F3:30:15:31:A5:19:C6:AF:CF:32:9B:B1:C4:BA:CD:F1:9B
Authority key identifier: E2:AF:FE:2C:9E:5D:D7:9F:39:9B:4D:8B:67:93:9B:CA:AC:EA:61:CB
Certificate issuer:       /CN=E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB
Certificate serial:       4FF1B0457C3D959668CD13A1EE53FF3D91B07229
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.mft
Manifest number:          03AF
Signing time:             Mon 15 Apr 2024 03:51:46 +0000
Manifest this update:     Mon 15 Apr 2024 03:46:46 +0000
Manifest next update:     Tue 16 Apr 2024 05:55:46 +0000
Files and hashes:         1: 3137372e37322e33322e302f32312d3234203d3e20323632353430.roa (hash: kqwI7xMuZn5SqGMy5yT1jH7ICAQtm8Fp/6E8GB+9Mxg=)
                          2: E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.crl (hash: jO5gDdUUvMJYuGqlStgMR0tuMLPM1HBGl81wEQsozlo=)
                          3: 323830343a3563343a3a2f33322d3438203d3e20323632353430.roa (hash: FQtN0Phxiya3zMYc8YnT3r+13hDRToB8V3V6PiwL4p4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f1:b0:45:7c:3d:95:96:68:cd:13:a1:ee:53:ff:3d:91:b0:72:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB
        Validity
            Not Before: Apr 15 03:46:46 2024 GMT
            Not After : Apr 16 05:55:46 2024 GMT
        Subject: CN=E83827F3301531A519C6AFCF329BB1C4BACDF19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:a0:44:41:d5:a3:88:dd:be:e8:ea:f6:99:
                    74:63:97:d5:67:3d:f4:5b:a3:c7:92:fe:f1:64:6d:
                    1a:b9:69:61:e1:77:e5:bd:79:80:9f:13:ef:97:4e:
                    35:cb:95:e3:a5:95:12:8c:a5:98:fc:06:67:8b:60:
                    00:fe:de:fb:45:b4:c9:5f:ec:d9:01:61:e6:50:0d:
                    6a:62:e1:08:4e:2f:75:13:ff:16:a2:3f:0a:0b:2c:
                    93:de:4f:56:19:32:0a:a7:d6:37:51:cb:5f:f3:59:
                    56:0d:14:a9:ea:40:ca:80:4c:fb:53:59:c9:3c:b0:
                    86:3e:25:ed:8e:14:94:aa:c7:2b:50:51:1c:25:e3:
                    25:cf:28:a8:b6:4b:71:26:2a:49:8c:65:ee:e7:fe:
                    4f:b5:79:91:44:ba:94:c4:48:35:55:48:9c:44:30:
                    53:78:9d:55:cd:b5:97:6d:0a:ab:4a:37:99:7d:6a:
                    28:e1:53:fb:eb:3f:a0:0a:b3:53:69:14:c3:eb:d7:
                    e5:18:55:e9:2c:db:c1:71:97:49:71:69:f8:76:a2:
                    9c:f1:ad:8e:07:66:d7:ce:f6:35:7e:ec:97:3a:1c:
                    2b:52:bd:e3:60:8b:0d:0a:60:32:9a:1d:23:56:b5:
                    90:7d:0f:af:e8:35:f2:45:2d:ce:e5:04:4d:7d:b0:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:38:27:F3:30:15:31:A5:19:C6:AF:CF:32:9B:B1:C4:BA:CD:F1:9B
            X509v3 Authority Key Identifier:
                keyid:E2:AF:FE:2C:9E:5D:D7:9F:39:9B:4D:8B:67:93:9B:CA:AC:EA:61:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/0/E2AFFE2C9E5DD79F399B4D8B67939BCAACEA61CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:2d:88:c2:2e:e0:56:14:aa:5d:08:93:db:08:58:22:1a:
         d4:78:d9:42:f6:01:27:80:69:14:f3:9b:ad:3d:cc:ce:4d:3d:
         67:42:ec:62:03:d2:90:ce:b7:10:ed:d0:a5:2e:2c:d8:8a:81:
         70:c2:9e:e4:76:ba:a7:70:db:4f:7d:e0:4e:62:1f:9c:4c:2d:
         66:96:28:9a:53:e4:01:c7:a7:e8:b6:ec:63:bc:b0:92:be:7b:
         db:40:c0:6d:ab:93:43:be:41:f8:19:44:88:f4:a6:77:94:47:
         7c:ba:99:41:57:1b:40:8c:8c:4b:0c:85:6a:d7:03:fb:6d:98:
         85:88:3d:b3:d3:09:d8:a1:db:00:d5:f8:1e:9c:cf:0b:ed:a2:
         e0:20:86:16:07:6d:70:6a:19:65:49:43:78:0f:cf:8f:d8:7f:
         4a:f4:5d:b3:28:d5:04:cf:3a:1d:e5:d0:59:2e:1e:4b:ac:ee:
         a4:6e:2c:6b:61:f2:dc:08:3f:99:55:ec:f7:57:c3:59:7a:39:
         02:f8:91:d1:72:e4:40:7d:20:de:db:b9:5d:1d:81:4e:d7:39:
         cf:a2:1c:66:1a:8d:ac:a3:63:b1:5f:e7:f7:4c:3e:a2:01:4b:
         eb:36:c9:d3:38:88:6b:30:e1:45:fa:f3:88:85:ab:2f:43:6e:
         4e:28:f3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----