Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.mft
File:                     5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.mft (raw, json)
Hash identifier:          NwNQc8KLmQyLJ9GZ9Fxsdg9fjME+3NR5CQ4YnvCtow8=
Subject key identifier:   E4:A5:B2:A8:D6:42:6D:D9:B3:98:93:FD:C8:AB:AA:8A:EF:93:CA:52
Authority key identifier: 5B:C9:A4:A7:6F:3F:26:D6:30:8F:79:23:AE:9C:F7:E1:00:89:62:D2
Certificate issuer:       /CN=5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2
Certificate serial:       27D801A3E1DFF3A17592EE36BBCAA5806D5B1F8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.mft
Manifest number:          0510
Signing time:             Mon 15 Apr 2024 01:24:06 +0000
Manifest this update:     Mon 15 Apr 2024 01:19:06 +0000
Manifest next update:     Tue 16 Apr 2024 05:23:06 +0000
Files and hashes:         1: 5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.crl (hash: d4uG5pKTMVVxOxUjMDrdWJvP3FNROd0KW2I7WhQJHEI=)
                          2: 3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa (hash: J/6oiYtOXD76n570172PxAZ9nUCu/or2z5wRv1hp7D4=)
                          3: 323830343a333534383a3a2f33322d3334203d3e20323636323739.roa (hash: k6sr51fZBd+f62I4TUqQfiAszaIGOy7qfd88KCBzTJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d8:01:a3:e1:df:f3:a1:75:92:ee:36:bb:ca:a5:80:6d:5b:1f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2
        Validity
            Not Before: Apr 15 01:19:06 2024 GMT
            Not After : Apr 16 05:23:06 2024 GMT
        Subject: CN=E4A5B2A8D6426DD9B39893FDC8ABAA8AEF93CA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:8f:30:0d:34:2b:f9:5d:bd:31:d5:f5:0a:
                    b4:57:99:05:94:23:e3:8d:79:05:5e:1d:24:41:20:
                    7b:6d:0c:27:9b:89:a0:45:40:ca:b6:63:15:49:ee:
                    8c:71:d7:3e:bf:92:85:97:74:8c:12:30:8f:59:4e:
                    06:0c:c8:12:69:95:fc:83:36:e5:8b:05:53:3f:36:
                    b9:0c:36:6c:cc:cf:e9:36:36:e0:a2:34:ba:a0:c5:
                    c6:65:b6:01:65:66:9a:99:0f:7e:98:ef:01:c8:17:
                    47:ab:8f:50:de:a8:fd:62:67:98:9a:ac:d3:a2:8d:
                    9a:d1:b9:3b:a2:4d:57:8c:61:89:65:9f:40:4c:10:
                    bc:71:af:68:72:dd:81:9e:00:41:92:01:ce:6d:5d:
                    61:66:0b:23:c1:38:56:68:48:53:e9:40:ce:8d:fe:
                    b9:78:3a:d4:43:0f:d9:fa:dd:92:4b:fa:cb:22:47:
                    dd:03:41:0b:fc:61:a6:d6:23:7c:b3:f5:c1:bc:c5:
                    c4:da:7f:22:cd:b7:ae:04:59:7b:1b:1c:9c:03:ac:
                    6b:82:b6:d1:ee:51:e9:6f:7a:cf:51:94:21:f1:ca:
                    0e:97:bd:45:e8:19:c8:54:4f:be:a9:0d:11:c5:d0:
                    6b:1e:91:cf:63:e0:d0:bc:8b:0f:3e:e1:b5:05:b5:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:B2:A8:D6:42:6D:D9:B3:98:93:FD:C8:AB:AA:8A:EF:93:CA:52
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A4:A7:6F:3F:26:D6:30:8F:79:23:AE:9C:F7:E1:00:89:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/5BC9A4A76F3F26D6308F7923AE9CF7E1008962D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:1b:be:ea:b9:af:75:d7:15:33:b1:f1:e8:ed:e3:59:c6:
         ff:11:83:a0:0e:49:5b:9e:4b:57:43:96:de:49:52:39:93:6e:
         63:14:38:98:0a:c0:a3:9b:68:be:81:9b:97:cf:0c:fe:a3:ec:
         33:e8:dc:81:52:79:34:fe:90:ac:e2:97:c4:b8:b5:20:3b:c3:
         27:44:58:ab:9a:0b:94:a1:57:68:8b:60:eb:e6:4b:8a:d7:7a:
         7c:80:6d:aa:87:e8:11:b6:c5:5e:f9:7a:9a:24:ce:ad:b7:19:
         4c:37:fc:f1:d0:6d:3d:83:1a:55:ea:0f:c5:e4:cc:2c:23:08:
         77:7a:05:c9:24:e5:73:50:49:60:c9:b8:38:a2:f6:f2:52:04:
         4a:27:0b:cc:cd:3f:68:96:48:7f:70:ec:ea:d0:3d:21:1e:50:
         cb:8e:24:83:6f:4d:aa:7e:86:ce:d7:a1:89:0d:ec:4e:53:59:
         e6:4a:4b:11:fb:a7:74:b8:f8:18:df:2e:33:f8:4e:4b:41:1b:
         c2:83:ba:1f:58:b4:0e:06:83:67:88:92:ac:1c:cc:8f:6b:b3:
         cc:4d:5b:5e:bd:03:ae:07:6d:43:a3:e9:50:d6:66:25:64:69:
         db:d2:c1:98:54:75:12:a4:57:de:a9:cc:3a:60:92:96:93:eb:
         ca:93:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----