Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.mft
File:                     9A41EDBD9B15978F61FEB847929580F4B869A73F.mft (raw, json)
Hash identifier:          SO09c6GyHPI1enKw4TcMtqejLo85uhwtk/0fWeqKXeU=
Subject key identifier:   E0:F5:1F:59:08:41:7D:85:3C:F1:CA:2F:F0:ED:10:DC:66:6F:69:A3
Authority key identifier: 9A:41:ED:BD:9B:15:97:8F:61:FE:B8:47:92:95:80:F4:B8:69:A7:3F
Certificate issuer:       /CN=9A41EDBD9B15978F61FEB847929580F4B869A73F
Certificate serial:       A3316B176F4C90DE5C24BF6BE4A499256490CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.mft
Manifest number:          1D
Signing time:             Mon 11 Mar 2024 13:50:39 +0000
Manifest this update:     Mon 11 Mar 2024 13:45:39 +0000
Manifest next update:     Tue 12 Mar 2024 17:22:39 +0000
Files and hashes:         1: 3138362e3139342e302e302f32322d3332203d3e20323730383738.roa (hash: ecAmzF90s0DdJdvDB2aWnDz136hQW3WwywqwcGQddIM=)
                          2: 9A41EDBD9B15978F61FEB847929580F4B869A73F.crl (hash: kx6DbkN2ZBs0Eh9eS2IAJRQuIOmzMrFK21rifS3YTIw=)
                          3: 323830343a373264343a3a2f33322d313238203d3e20323730383738.roa (hash: z4mthjip3zdt2TVAqcPY1aVruZYnlFIz4Jfg0r6oCQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:31:6b:17:6f:4c:90:de:5c:24:bf:6b:e4:a4:99:25:64:90:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A41EDBD9B15978F61FEB847929580F4B869A73F
        Validity
            Not Before: Mar 11 13:45:39 2024 GMT
            Not After : Mar 12 17:22:39 2024 GMT
        Subject: CN=E0F51F5908417D853CF1CA2FF0ED10DC666F69A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:7c:63:58:0d:c0:94:f2:f5:5b:43:f8:0f:
                    63:97:7f:45:b5:18:fc:fc:48:b5:4e:c7:78:39:be:
                    cb:b2:4e:5a:1b:47:f2:89:e5:b2:07:04:2a:9f:75:
                    e7:2e:57:bf:4a:e1:7c:81:ae:bd:95:c5:96:ea:fe:
                    b6:02:72:e8:18:35:c9:4a:b4:d0:16:43:40:2f:09:
                    fd:8e:05:24:1a:37:a5:20:f3:a9:4e:5f:54:fb:88:
                    86:0f:62:04:2d:60:dd:62:06:5d:41:9f:40:0d:41:
                    e0:d4:74:de:36:70:48:1c:ca:7c:06:a8:15:28:b0:
                    d3:92:e6:13:f3:0d:71:78:4e:99:7e:bd:cf:53:fd:
                    a1:d6:ac:9d:83:01:c3:b2:d4:ac:65:b3:c1:6b:56:
                    05:2b:d7:01:e9:00:39:29:a0:3d:ba:56:a7:af:43:
                    84:eb:f5:8f:4b:90:f6:d0:e8:71:cd:5c:12:1e:00:
                    a1:cc:96:32:59:28:d1:e1:20:87:04:24:5e:6e:8e:
                    d8:d1:c4:9a:a5:ef:7c:97:4f:8a:37:ba:40:08:c0:
                    49:81:52:63:2f:6d:89:5b:56:fb:6f:2e:aa:c5:00:
                    90:58:19:f3:42:a9:e4:f5:0e:d0:e6:0f:c6:d9:86:
                    46:63:30:be:d9:aa:3c:dd:27:cd:9e:37:2e:5a:2a:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F5:1F:59:08:41:7D:85:3C:F1:CA:2F:F0:ED:10:DC:66:6F:69:A3
            X509v3 Authority Key Identifier:
                keyid:9A:41:ED:BD:9B:15:97:8F:61:FE:B8:47:92:95:80:F4:B8:69:A7:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/9A41EDBD9B15978F61FEB847929580F4B869A73F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:52:92:20:4b:9f:6e:0c:5a:14:c8:39:ef:8e:a4:86:9d:
         43:f8:3f:fd:0f:85:d8:28:31:c1:d1:37:20:bb:c6:46:10:cf:
         1f:15:07:8d:98:4e:51:ab:00:d6:d4:ab:ec:95:c7:b1:aa:d8:
         c0:35:97:96:71:4b:1c:c0:fc:95:58:e6:f2:78:36:42:6a:f5:
         09:68:45:e0:98:f8:76:72:83:86:bc:58:25:31:5c:c6:a1:3d:
         89:1a:6f:f2:2e:76:42:ea:e3:63:c6:10:21:41:e4:2f:6b:db:
         36:e9:23:58:eb:7e:24:5f:88:0c:2c:a0:33:cc:32:0b:d1:8a:
         f3:30:c5:86:cc:98:26:5f:8c:a5:25:b5:c8:43:b8:ca:5a:54:
         ed:ee:19:1d:a6:65:b2:fb:77:e6:62:7b:bd:61:64:74:ce:e7:
         0a:2e:43:e2:8b:16:65:2a:a6:c1:53:1c:05:a7:78:c3:c6:c5:
         d4:c9:77:9b:ed:b8:e1:2b:69:5e:1b:3b:7d:e8:69:8b:b6:e3:
         4c:ef:b0:1d:af:f9:c3:fa:10:54:dd:a8:30:8a:46:e8:d2:04:
         e4:83:37:d3:ce:5c:d2:6c:95:fb:e2:b8:64:ed:b1:78:d9:6f:
         86:5d:e4:ae:01:82:21:2b:61:f8:a6:34:cc:74:38:d1:19:52:
         e7:63:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----