Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.mft
File:                     B8BF467E2A3B24283A1C2269E70AECA54DFA205B.mft (raw, json)
Hash identifier:          RHe8Nvj8cwGRoy1M4MOlJ1rUB1Nq55SsskJzpZjdVD0=
Subject key identifier:   FA:7E:AC:6C:C3:2D:25:41:3F:6D:73:CD:1E:6B:C8:F3:34:90:E1:E1
Authority key identifier: B8:BF:46:7E:2A:3B:24:28:3A:1C:22:69:E7:0A:EC:A5:4D:FA:20:5B
Certificate issuer:       /CN=B8BF467E2A3B24283A1C2269E70AECA54DFA205B
Certificate serial:       2407779279414AA2CA1F313A5951090DB445BB7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.mft
Manifest number:          012C
Signing time:             Sun 14 Apr 2024 23:20:38 +0000
Manifest this update:     Sun 14 Apr 2024 23:15:38 +0000
Manifest next update:     Tue 16 Apr 2024 02:04:38 +0000
Files and hashes:         1: 34352e3138332e39362e302f32342d3234203d3e20323639323739.roa (hash: KiLGfQue9J/seVaPOtqNB7VwTQkY3bHEI3DETYic5Qw=)
                          2: 34352e3138332e39362e302f32322d3232203d3e20323639323739.roa (hash: i7MUHw18tsxwyEzxYp0tX+v0qR0UJhKZZFjYW/TnyxE=)
                          3: 34352e3138332e39362e302f32332d3233203d3e20323639323739.roa (hash: sMj0KHrLcZEMD5IiuwoxjF1A7hqM8oyOsODBgj5zQJk=)
                          4: 34352e3138332e39382e302f32332d3233203d3e20323639323739.roa (hash: pQRheCnN2zeiPGl5cfaSyAncq5dMuGAys3+AMU7qGrA=)
                          5: B8BF467E2A3B24283A1C2269E70AECA54DFA205B.crl (hash: bal7L6vioQYwadZOpe7maH8BEU2KOeUo5kDBY6IiFW4=)
                          6: 34352e3138332e39372e302f32342d3234203d3e20323639323739.roa (hash: BT3FibkWehGs5ueTurFnV4oTjgABM0cteJrlS620NLM=)
                          7: 323830343a363232383a3a2f33322d3332203d3e20323639363436.roa (hash: 54iNt4pF57mlVTBHnWwqo2mCEKs4v7N+nDQK/saeTyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:77:92:79:41:4a:a2:ca:1f:31:3a:59:51:09:0d:b4:45:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF467E2A3B24283A1C2269E70AECA54DFA205B
        Validity
            Not Before: Apr 14 23:15:38 2024 GMT
            Not After : Apr 16 02:04:38 2024 GMT
        Subject: CN=FA7EAC6CC32D25413F6D73CD1E6BC8F33490E1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:55:dd:96:07:65:3b:b6:0b:7e:2a:ec:5b:
                    4d:f4:04:5e:e3:e1:62:7e:23:78:30:63:d3:89:6a:
                    18:11:51:74:b1:f9:73:5b:48:c1:e6:7f:a4:1f:89:
                    85:a1:59:75:2a:83:71:27:b1:5c:c0:f8:48:89:69:
                    4b:17:f8:4b:a5:7e:5b:59:3f:cf:c1:bb:08:35:bf:
                    9f:48:09:fb:1b:b6:1e:01:26:b2:d6:db:d9:38:07:
                    fc:44:ad:40:3a:0f:50:0c:c3:fc:9f:7a:4c:a3:72:
                    e0:7c:88:45:33:22:5d:43:a5:7a:30:00:24:31:b2:
                    03:16:3c:a8:5f:ee:7f:14:bf:36:10:c1:0e:32:70:
                    2b:ae:5f:a3:04:10:46:2e:7e:b1:01:0c:e5:7d:7c:
                    09:48:a4:a4:55:1a:63:80:2e:da:90:b0:e4:a4:3e:
                    a5:bb:ca:3a:8f:24:fb:e8:7c:b5:4b:25:72:b7:f9:
                    7e:4e:f8:04:87:26:aa:c4:ee:3f:28:f5:89:e8:97:
                    89:8e:1d:41:eb:52:6d:ef:35:98:01:52:75:c0:f1:
                    f8:44:86:df:f6:df:ce:a7:cf:52:2f:0e:e5:d3:95:
                    af:09:00:68:10:b5:57:37:6c:53:a2:cd:94:83:10:
                    c8:af:c4:b5:93:c0:a2:58:23:dd:fe:72:13:fe:e5:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7E:AC:6C:C3:2D:25:41:3F:6D:73:CD:1E:6B:C8:F3:34:90:E1:E1
            X509v3 Authority Key Identifier:
                keyid:B8:BF:46:7E:2A:3B:24:28:3A:1C:22:69:E7:0A:EC:A5:4D:FA:20:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/B8BF467E2A3B24283A1C2269E70AECA54DFA205B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:21:cb:97:e2:e8:b0:b0:1e:78:95:1d:67:46:30:86:6d:
         da:ff:bf:d9:ed:1b:b5:5c:02:00:0d:76:3a:c1:eb:e0:c5:24:
         06:d1:82:b2:89:a6:5f:d1:2a:66:80:ec:43:15:7a:9c:42:03:
         27:03:2f:10:56:e0:85:d5:b3:a7:5e:a6:fc:df:45:f0:64:0c:
         06:16:3c:31:23:71:28:a6:63:e4:71:c6:40:97:18:3a:9d:76:
         c8:71:a0:94:99:59:c2:b6:b5:58:68:f9:0d:df:17:4f:fe:f7:
         a1:6f:ee:d6:0a:b2:04:6c:a1:d0:b0:f0:75:4c:19:a4:31:81:
         5a:94:2e:e0:79:97:1f:c0:b5:42:8c:2a:5c:81:46:50:33:0c:
         77:75:dc:8d:ff:b9:3c:12:1c:76:84:8f:83:a2:d1:87:ee:06:
         d5:21:b4:11:bc:9c:2c:a4:5f:9b:b9:a5:e3:a8:56:9f:eb:13:
         90:04:67:39:e7:81:fe:78:e7:e5:2b:5c:45:6a:4a:e5:82:bb:
         b6:c6:a1:7d:12:54:58:0a:4b:fe:ac:90:62:c1:de:da:61:52:
         14:70:e0:64:6d:ca:99:69:1c:4b:a2:d9:21:9b:90:b3:7f:b9:
         0d:79:4d:17:46:bc:7c:24:41:ad:fc:60:b3:6c:3a:61:46:d1:
         bd:2f:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----