Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.mft
File:                     0420919DF49DCE492D96B9E9D85B2FC4471B39D1.mft (raw, json)
Hash identifier:          ZKIfKGhfGpJwJFWg83vaiUvovcIvhjX8ymr7/SyRAE0=
Subject key identifier:   88:65:6A:77:DA:2B:3C:ED:6B:49:49:47:C6:49:1F:88:E8:A2:B4:D6
Authority key identifier: 04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1
Certificate issuer:       /CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
Certificate serial:       0420520E710F03EDB486A2866EFC89C66A32EDA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.mft
Manifest number:          0F
Signing time:             Wed 17 Apr 2024 08:24:07 +0000
Manifest this update:     Wed 17 Apr 2024 08:19:07 +0000
Manifest next update:     Thu 18 Apr 2024 11:48:07 +0000
Files and hashes:         1: 323830343a363635303a3a2f33322d3438203d3e20323639353438.roa (hash: dr5rV57NMu72UIw3jerJUPEKST3T3vKEaj2rWfazQ0Y=)
                          2: 0420919DF49DCE492D96B9E9D85B2FC4471B39D1.crl (hash: lmcpVDikCFCD7jDiZS0U7OOW0rzB3lNk9RmJJSo7DmU=)
                          3: 34352e3138392e31362e302f32322d3234203d3e20323639353438.roa (hash: X2Wlwu1G8/LV1o5tZMUWyVQtFSp8F26Ax3/cZtK+dZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:20:52:0e:71:0f:03:ed:b4:86:a2:86:6e:fc:89:c6:6a:32:ed:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0420919DF49DCE492D96B9E9D85B2FC4471B39D1
        Validity
            Not Before: Apr 17 08:19:07 2024 GMT
            Not After : Apr 18 11:48:07 2024 GMT
        Subject: CN=88656A77DA2B3CED6B494947C6491F88E8A2B4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:eb:e8:25:9f:1d:49:f1:cc:d4:34:1d:ec:
                    33:8e:79:ee:f0:69:ff:eb:bb:9e:e6:6e:eb:61:95:
                    da:27:67:55:4c:70:e3:65:37:d5:67:9f:59:ee:6d:
                    bb:1c:50:62:ad:c2:5f:fd:8e:82:f9:e0:8d:9a:72:
                    71:ff:34:96:02:75:42:94:eb:7e:d7:70:d8:b1:d0:
                    48:a8:b8:c8:2e:0d:85:fa:2a:7b:a5:a3:5d:dc:2b:
                    26:6e:c5:02:f6:52:39:2e:f9:cf:c1:b6:62:31:2f:
                    37:ec:7f:dc:3f:d2:0d:5f:25:f5:98:7f:b5:10:99:
                    12:a2:ea:a8:9c:d2:62:c8:c9:f7:a3:ca:0b:1c:66:
                    de:4a:19:47:d7:b0:5f:39:8d:1a:1b:8e:05:58:9d:
                    9d:59:c5:d0:77:95:ba:0b:b3:94:5a:ce:99:b7:c9:
                    42:b0:f6:c5:4c:da:6e:12:67:7d:e3:af:2b:c8:68:
                    4c:9d:71:3a:fc:75:63:f1:7b:f2:2b:62:02:88:c0:
                    59:e5:ed:ef:0b:ce:58:60:a4:e2:9c:6f:0c:6b:00:
                    db:59:39:13:a3:f3:3d:79:3a:3e:59:17:ee:8f:88:
                    e3:01:ae:e2:8a:5a:99:a3:01:22:95:6f:08:37:4b:
                    11:1d:b4:a7:e8:d4:b0:23:0d:3a:65:fe:aa:00:b3:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:65:6A:77:DA:2B:3C:ED:6B:49:49:47:C6:49:1F:88:E8:A2:B4:D6
            X509v3 Authority Key Identifier:
                keyid:04:20:91:9D:F4:9D:CE:49:2D:96:B9:E9:D8:5B:2F:C4:47:1B:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/1/0420919DF49DCE492D96B9E9D85B2FC4471B39D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:eb:74:db:85:e3:23:53:36:9d:1f:c7:6e:e0:de:e4:c1:ef:
         37:a4:4d:f1:3d:6f:d6:b5:e0:03:2b:fc:15:3b:24:48:5d:b8:
         d9:56:73:5e:0f:38:8b:16:c6:9e:96:36:2b:04:ee:b2:d9:3a:
         75:7f:13:44:cb:42:cf:db:bb:cd:de:9a:87:09:16:97:60:40:
         80:50:6e:9a:63:ef:45:e7:7e:3d:12:ee:45:78:34:45:1a:5a:
         45:3a:b3:18:03:d8:17:cf:ba:97:3b:26:f8:53:ea:61:8b:3a:
         99:c2:7c:94:c5:7c:ef:a8:49:bc:4f:28:e9:bb:86:c0:99:d3:
         de:d3:8b:20:fa:b6:62:7e:96:93:8d:bb:c7:64:16:5a:95:c1:
         bf:4d:4c:f7:7b:f6:44:fb:90:e5:48:73:e3:7d:b8:0b:9f:36:
         b0:7e:eb:fc:3e:08:bc:9a:e0:43:96:30:f0:7a:b1:01:98:44:
         7c:b3:9b:00:3f:fd:55:83:fe:c1:0f:37:6c:ab:86:0f:fb:f1:
         78:49:ee:d3:56:8a:2b:04:56:d2:13:cd:22:32:27:d2:64:e3:
         14:37:61:ea:56:79:8f:bc:b6:a9:2b:e3:d8:d0:69:bd:9f:75:
         01:1c:79:6a:4d:da:b3:e8:98:1b:b6:67:73:90:89:55:5f:ae:
         2c:6f:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----