Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.mft
File:                     3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.mft (raw, json)
Hash identifier:          P0bIX5HfrhBQKP+DsgEe++JKhn99jc+J5DI1mRofZLk=
Subject key identifier:   B9:F0:DF:CB:41:05:B1:16:E4:E3:30:63:B9:57:C2:92:7C:CC:30:A4
Authority key identifier: 3E:A8:04:88:C4:1E:F0:84:65:D3:E9:5F:E2:F8:E1:10:A0:BA:5B:48
Certificate issuer:       /CN=3EA80488C41EF08465D3E95FE2F8E110A0BA5B48
Certificate serial:       7DBEC3582D6F1FB895B5B7DE23242A935AA94D83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.mft
Manifest number:          015D
Signing time:             Sun 18 Feb 2024 19:11:30 +0000
Manifest this update:     Sun 18 Feb 2024 19:06:30 +0000
Manifest next update:     Mon 19 Feb 2024 22:08:30 +0000
Files and hashes:         1: 3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.crl (hash: kFahLn8kSQs0G1o1cPRC4MbIQ8YJ0AIOwu4wdpxLe64=)
                          2: 323830343a383364633a3a2f33322d313238203d3e20323732323235.roa (hash: r1lI+Nxx835P5XOSTvR5gjpfgIojwm3NmkWuy+m5QJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:be:c3:58:2d:6f:1f:b8:95:b5:b7:de:23:24:2a:93:5a:a9:4d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA80488C41EF08465D3E95FE2F8E110A0BA5B48
        Validity
            Not Before: Feb 18 19:06:30 2024 GMT
            Not After : Feb 19 22:08:30 2024 GMT
        Subject: CN=B9F0DFCB4105B116E4E33063B957C2927CCC30A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:2a:4b:e8:a6:20:d7:e9:6c:5b:11:5a:bb:
                    69:9f:9e:d2:73:9c:a7:08:63:69:3b:af:76:ae:72:
                    cd:a7:38:d3:8f:3b:12:36:65:01:5b:ac:6f:7c:80:
                    a5:c8:14:c4:02:4c:90:41:a7:75:4e:58:21:70:d3:
                    90:62:e0:84:e3:18:30:3b:ca:33:e0:69:e3:78:71:
                    ed:57:f3:52:0e:fe:84:74:74:16:14:fc:e5:2d:8f:
                    44:ec:4a:7b:67:85:17:f5:5b:66:52:2d:cc:97:e3:
                    d2:de:c1:ee:7f:93:15:44:3e:a5:e1:1b:ec:80:6d:
                    b7:5c:2f:6e:b4:26:88:07:39:47:65:5a:a3:00:42:
                    27:37:a1:5c:f9:77:c6:23:eb:8f:88:ce:75:31:c6:
                    5b:d6:a5:5d:66:42:8b:1f:64:89:47:8e:d6:50:6d:
                    91:39:7b:0b:44:7c:ce:4e:65:05:a6:fd:0a:86:d7:
                    c3:0c:7f:e6:7b:de:7c:1d:25:ec:dd:bf:19:d5:c6:
                    ff:be:a3:ea:b5:cf:26:26:4d:b4:f3:4f:8b:90:d0:
                    6e:b7:c1:9b:40:78:da:3a:0c:c3:a3:71:25:b3:92:
                    36:46:93:74:24:d8:63:d5:62:56:c0:47:a8:d2:b9:
                    f3:9e:47:c5:78:02:ba:c5:db:38:66:bf:68:a1:83:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:DF:CB:41:05:B1:16:E4:E3:30:63:B9:57:C2:92:7C:CC:30:A4
            X509v3 Authority Key Identifier:
                keyid:3E:A8:04:88:C4:1E:F0:84:65:D3:E9:5F:E2:F8:E1:10:A0:BA:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:7a:00:66:d2:8c:d4:ff:a2:17:8b:6a:d0:e4:a0:a5:64:24:
         38:8c:27:df:29:d8:19:d0:59:13:31:f9:8c:42:43:4b:37:19:
         df:7f:2a:8f:4b:36:08:e0:a4:29:ac:82:7f:36:54:68:9e:9e:
         54:ca:e2:41:27:9f:2b:a4:3d:1a:64:0c:f6:bd:cb:f2:5f:51:
         ce:8e:02:ff:20:fe:42:46:cf:ca:e6:1f:9c:93:9b:47:6e:3d:
         54:f3:c5:97:8d:a9:92:60:55:cd:bf:6b:ca:78:56:06:97:8a:
         f7:8b:13:c4:17:5f:7b:de:4e:1e:3f:2b:1f:86:bd:32:2e:90:
         cb:b8:60:13:b6:cb:8d:65:83:51:cc:18:ce:09:3c:30:a5:38:
         15:5f:c8:df:d3:28:38:b7:2e:0b:b4:15:f8:86:26:12:ea:1c:
         68:54:9b:73:17:1a:bd:9f:9a:5b:11:df:e5:07:43:d8:45:77:
         d7:15:f8:f4:c7:02:18:f2:60:d2:b5:27:36:12:c8:67:d3:45:
         ab:ea:fe:6e:90:df:f5:5d:55:8e:35:48:e9:cb:a0:9b:c2:7d:
         60:62:c4:41:df:3f:d7:88:07:4d:34:9f:95:af:fe:2f:9c:d1:
         af:1a:09:48:9e:4c:bc:25:fb:46:dc:c5:7a:95:a4:95:71:6e:
         08:6c:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----