Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.mft
File:                     E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.mft (raw, json)
Hash identifier:          3krezHLU2xSS70RXNw8wqBknC1YkhoDNYm7NZgsixrw=
Subject key identifier:   28:EA:46:07:15:39:47:BC:6A:2C:3A:25:95:5E:5C:81:55:DC:F4:12
Authority key identifier: E9:F0:E9:14:96:97:E2:04:B3:19:EC:D5:E4:7A:1C:12:DA:B4:6A:E1
Certificate issuer:       /CN=E9F0E9149697E204B319ECD5E47A1C12DAB46AE1
Certificate serial:       28BD268DD32F62F40246D7D10EA266CB6128E600
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.mft
Manifest number:          41
Signing time:             Mon 20 May 2024 21:04:38 +0000
Manifest this update:     Mon 20 May 2024 20:59:38 +0000
Manifest next update:     Tue 21 May 2024 23:11:38 +0000
Files and hashes:         1: 323830343a373634303a3a2f33322d3438203d3e20323731303939.roa (hash: hhRKgOi8R5vM+C16ZRyv6JLEYwtA/Wefledkbi0PF1U=)
                          2: E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.crl (hash: fxfN+2/u6yPSlt+NgN8ulWIVD7lKmq8auPGOIp2X72g=)
                          3: 3137392e34382e3230382e302f32322d3234203d3e20323731303939.roa (hash: UmtrLKfwugm8dZU6ALWRrUO/hpd4bIG5ZJKKZ8/eKoQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bd:26:8d:d3:2f:62:f4:02:46:d7:d1:0e:a2:66:cb:61:28:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F0E9149697E204B319ECD5E47A1C12DAB46AE1
        Validity
            Not Before: May 20 20:59:38 2024 GMT
            Not After : May 21 23:11:38 2024 GMT
        Subject: CN=28EA4607153947BC6A2C3A25955E5C8155DCF412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:72:44:1c:44:eb:36:12:95:87:dd:b2:b8:
                    e0:90:a2:c9:83:3c:b5:b4:59:10:33:09:ae:49:80:
                    64:22:68:8e:86:a1:bc:61:a4:57:8b:f6:96:07:85:
                    18:dd:da:f0:d4:1e:15:ce:30:0f:45:53:32:4e:7c:
                    d2:27:f5:30:34:5c:98:e3:a8:e3:53:db:31:bf:99:
                    43:39:69:e5:1a:df:7b:74:c4:e0:db:5d:14:c1:6e:
                    97:e5:a5:a0:d7:9b:4c:25:3b:d2:c2:75:ea:e8:e8:
                    16:8d:a8:65:94:1e:3e:be:62:ae:fb:7a:16:b3:21:
                    2a:ae:80:8e:2f:2f:db:26:8e:96:d6:3a:0d:55:41:
                    56:a1:bd:8a:25:7e:5f:d7:73:a1:36:3a:59:7c:1f:
                    0e:ab:41:c7:21:e3:2a:14:9c:1f:32:48:12:ae:f3:
                    6b:86:64:c2:be:21:d7:7d:8c:64:dc:7a:37:c7:17:
                    63:a3:1d:58:7e:a4:1e:54:75:94:bd:05:88:97:c6:
                    8b:5a:c0:12:d8:09:e9:a7:53:a5:fd:05:22:b1:b4:
                    20:fb:30:2b:f0:70:05:cb:d8:b8:bd:5d:10:8e:ff:
                    20:e4:28:a4:96:36:34:22:98:87:75:25:32:74:56:
                    59:4a:17:24:86:67:39:3e:fe:97:10:17:6b:af:49:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:46:07:15:39:47:BC:6A:2C:3A:25:95:5E:5C:81:55:DC:F4:12
            X509v3 Authority Key Identifier:
                keyid:E9:F0:E9:14:96:97:E2:04:B3:19:EC:D5:E4:7A:1C:12:DA:B4:6A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:4a:70:41:cf:34:15:ca:e8:16:f8:27:b7:19:c5:2c:d9:
         e6:ce:c3:28:40:2e:1b:ab:2c:30:fe:d5:b0:b2:c5:84:3c:b9:
         d9:04:e0:b5:2f:9c:79:26:8b:3f:12:ba:04:3a:3c:8a:fc:5b:
         5c:4c:83:8e:36:6a:ae:1b:7f:8d:75:d4:62:4c:2b:85:e3:e6:
         8b:2d:b0:20:04:4c:57:7f:7d:ae:97:c2:af:36:65:85:63:e8:
         dc:61:da:4e:e1:be:3d:eb:e9:92:0b:39:4b:92:06:63:4e:a2:
         a0:e5:fb:06:21:61:6a:8a:28:4a:0d:58:d3:8c:b6:bd:b3:ba:
         f8:b4:b3:67:32:81:d3:d0:84:61:fa:9b:59:9d:1d:da:79:ea:
         27:23:01:13:8a:b8:18:01:c5:8d:57:5b:f7:4a:f9:6f:71:79:
         b1:80:dd:fc:7f:3b:ec:55:06:73:5e:8f:f3:d3:01:0a:76:d3:
         82:14:24:7e:ff:47:25:db:8f:0c:b3:f6:be:64:4d:55:a0:a2:
         e6:21:98:6c:5f:9a:ed:4f:36:12:94:be:de:71:89:c9:4c:43:
         0b:ad:e2:f8:54:3d:0a:17:4a:9a:20:1d:87:a4:c0:5a:00:d4:
         e6:de:48:10:ce:ef:c4:7f:5d:cc:44:18:9a:99:4a:0d:73:1b:
         51:db:1c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----