Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C3D8D7FC22AA34140A96CCD7DC80987638847BC9.mft
File:                     C3D8D7FC22AA34140A96CCD7DC80987638847BC9.mft (raw, json)
Hash identifier:          66LL8EdwkHWvRP9pwgXNGrxSGQC9AVWNh6p0D/Quczs=
Subject key identifier:   CE:9A:F6:0C:67:8C:A0:27:16:08:7F:1A:BE:4F:E4:8E:D7:BD:76:F9
Authority key identifier: C3:D8:D7:FC:22:AA:34:14:0A:96:CC:D7:DC:80:98:76:38:84:7B:C9
Certificate issuer:       /CN=C3D8D7FC22AA34140A96CCD7DC80987638847BC9
Certificate serial:       6CA31F3488227FC79C9C02103DD2167350984588
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D8D7FC22AA34140A96CCD7DC80987638847BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C3D8D7FC22AA34140A96CCD7DC80987638847BC9.mft
Manifest number:          1B
Signing time:             Tue 15 Oct 2024 09:49:54 +0000
Manifest this update:     Tue 15 Oct 2024 09:44:54 +0000
Manifest next update:     Wed 16 Oct 2024 10:58:54 +0000
Files and hashes:         1: 3137302e38342e37362e302f32322d3234203d3e20323634393939.roa (hash: TkrWy/aA32K85F0xc8b24ox2Q1xX6rIAoA5gxMM//2g=)
                          2: 323830343a333133303a3a2f33322d3334203d3e20323634393939.roa (hash: y2nLDpO5iGza3IZGysu/6o8v8jC4KPWNk3gmsgI4lX8=)
                          3: C3D8D7FC22AA34140A96CCD7DC80987638847BC9.crl (hash: 5EXBmFbjgdTEIoBNCYglyWr+TUNakXSxRM3eNF6QDdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a3:1f:34:88:22:7f:c7:9c:9c:02:10:3d:d2:16:73:50:98:45:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D8D7FC22AA34140A96CCD7DC80987638847BC9
        Validity
            Not Before: Oct 15 09:44:54 2024 GMT
            Not After : Oct 16 10:58:54 2024 GMT
        Subject: CN=CE9AF60C678CA02716087F1ABE4FE48ED7BD76F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:41:9a:b4:14:b7:03:8b:ae:12:60:c0:3b:
                    8d:b2:0e:00:df:69:92:aa:d5:ce:d8:de:56:7f:20:
                    ee:15:b2:33:c7:86:0a:10:69:5f:36:4b:fb:1a:9c:
                    ac:8b:7c:ad:26:c4:d7:4b:09:f9:d6:92:79:83:56:
                    a9:56:7a:1a:4f:7a:a8:fd:2a:fe:e5:b6:ec:08:e4:
                    48:eb:9b:7b:69:81:28:1f:88:f5:bb:f2:44:39:ad:
                    7f:e7:8d:ff:79:f8:c7:50:8a:aa:de:02:39:de:d5:
                    ec:fe:81:1c:af:45:d6:1d:0c:5b:aa:b8:4b:77:25:
                    32:55:80:66:88:6e:a0:a9:12:8e:51:3a:51:ec:35:
                    61:f8:54:bf:c4:4b:4b:37:84:89:cb:e8:4b:ed:91:
                    13:9e:c5:8d:5e:53:80:7b:71:7a:04:95:90:7d:5d:
                    2c:a4:e3:32:62:61:0c:0d:c2:d6:2a:5a:a3:8f:25:
                    5c:17:43:31:d9:4b:9b:16:7f:22:d0:cd:79:e0:6f:
                    da:71:52:c9:53:0d:9d:8e:0c:a7:97:aa:21:8c:8c:
                    4a:dd:fa:57:a7:55:2c:90:38:1e:4a:81:5d:b0:70:
                    9b:c0:3f:11:dc:c4:c5:9f:80:df:b3:cb:e5:8c:3a:
                    ba:bb:bc:a8:83:ad:29:15:50:62:83:a6:94:6e:19:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9A:F6:0C:67:8C:A0:27:16:08:7F:1A:BE:4F:E4:8E:D7:BD:76:F9
            X509v3 Authority Key Identifier:
                keyid:C3:D8:D7:FC:22:AA:34:14:0A:96:CC:D7:DC:80:98:76:38:84:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C3D8D7FC22AA34140A96CCD7DC80987638847BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D8D7FC22AA34140A96CCD7DC80987638847BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C3D8D7FC22AA34140A96CCD7DC80987638847BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:f9:8e:24:a4:4e:d3:7f:2f:de:4c:cd:94:38:a5:6d:87:
         9b:b0:52:54:28:cf:0d:fa:ae:ba:be:48:03:69:72:5f:51:42:
         15:57:91:9e:94:cc:0f:54:16:d8:a4:db:92:75:9a:00:1b:f8:
         a0:d0:0e:19:a5:27:2a:f6:6c:f6:02:74:d9:7f:f9:aa:a8:dd:
         90:e4:5d:5e:d0:16:71:ba:c7:c4:0a:fc:cf:7e:25:c4:b1:17:
         a5:1c:9e:3a:88:a4:35:98:5b:b5:b1:45:c4:06:2b:c1:58:e0:
         54:8f:43:fb:d9:42:65:c4:0f:ef:8a:82:e4:ea:5b:02:7c:9a:
         fb:b3:ed:01:00:7d:8c:3e:4e:d3:9f:5d:2d:70:d9:57:68:c6:
         1c:23:67:c9:25:02:ce:2b:65:32:66:d9:a7:2d:c8:26:ca:0a:
         56:1f:ff:55:59:50:fc:91:a6:14:b0:91:0b:b6:06:72:14:a0:
         a5:9b:43:05:da:99:30:43:45:c8:4d:54:07:25:12:a4:0f:2b:
         29:a9:cc:c0:a2:88:78:aa:38:a6:e6:5f:a5:f4:16:c9:52:de:
         af:21:04:71:98:7f:c0:78:c7:ff:c9:51:e1:23:4e:07:ba:4e:
         b3:f7:3d:97:b2:33:69:51:46:9e:53:cb:7b:29:55:eb:bc:13:
         9f:7b:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----