Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
File:                     BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft (raw, json)
Hash identifier:          UOvqvQf3SSxk7QYGH3m0KTyl7OspdAxMqjyKDZQTkVQ=
Subject key identifier:   E4:08:44:A0:89:25:F9:3B:69:B3:25:D6:7F:1A:6C:3C:3E:74:44:35
Authority key identifier: BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9
Certificate issuer:       /CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
Certificate serial:       480F584E90AA78533B9FA60C29CCEFE3B8201B2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
Manifest number:          10
Signing time:             Sat 29 Jun 2024 18:46:25 +0000
Manifest this update:     Sat 29 Jun 2024 18:41:25 +0000
Manifest next update:     Sun 30 Jun 2024 20:41:25 +0000
Files and hashes:         1: 323830343a323833383a3a2f33322d3438203d3e20323633393438.roa (hash: 8Af8jqhHXZpgSwAN4KABO4x36IsmNV1DBd8stIzb+L0=)
                          2: BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl (hash: G/PLhOIFDphFOUVUHOkUR4JOu/2MQR70GWLF8JBkYVM=)
                          3: 3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa (hash: PVh9cD/z9yvbghn+n7fKeZVSwaIIaBOoQv9ZLzzOllk=)
                          4: 3137372e36372e33362e302f32342d3234203d3e20323633393438.roa (hash: kDLBhRbznL+CBtpaY8JtjCCR5MTiMi0/omSXTNtuUn4=)
                          5: 3137372e36372e33382e302f32342d3234203d3e20323633393438.roa (hash: O54Qc7fGrThtakWWLc0oUsILWggTLQOUO0+NR5JWa1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0f:58:4e:90:aa:78:53:3b:9f:a6:0c:29:cc:ef:e3:b8:20:1b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
        Validity
            Not Before: Jun 29 18:41:25 2024 GMT
            Not After : Jun 30 20:41:25 2024 GMT
        Subject: CN=E40844A08925F93B69B325D67F1A6C3C3E744435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:6b:a7:c2:a2:3f:a4:58:30:3a:95:c6:1e:
                    31:8f:78:55:b5:3a:aa:6d:c0:a8:2b:3e:a9:ab:dd:
                    14:67:8c:52:b8:cd:56:8e:7a:39:61:c0:a6:75:b3:
                    72:63:98:58:56:10:34:80:b1:5d:5a:1c:09:cb:21:
                    a6:c9:df:3c:a6:0b:49:7b:87:31:30:40:07:fc:36:
                    97:36:55:6b:b1:01:44:4c:52:87:fd:9d:b5:0d:1c:
                    be:eb:0d:fa:8e:18:8b:f8:46:fd:ea:5b:8f:4c:f4:
                    68:08:3e:ab:a5:1f:02:74:2b:cb:de:8d:86:d8:00:
                    86:7b:9a:11:9d:cf:5e:61:93:62:cf:d7:08:ce:a6:
                    79:90:ad:39:b6:58:e6:8b:a1:b9:bb:64:0e:ce:e2:
                    d0:84:5d:1e:91:19:a1:ed:3e:ae:b3:fb:54:ae:a1:
                    7d:b2:aa:7a:b3:a8:bd:c7:22:84:e1:f8:dc:a9:e4:
                    a5:84:b0:96:b5:ae:89:ec:24:27:3d:c2:ef:9e:0d:
                    32:71:c0:ee:11:eb:de:e1:9b:a5:ea:7c:3f:a5:2b:
                    db:7b:12:10:41:17:9e:11:c5:06:39:a5:59:9f:c4:
                    f6:95:73:05:b6:1f:a1:45:ae:5c:61:9c:d6:51:35:
                    fc:cc:38:f0:af:a6:0b:03:3e:74:e6:8d:ac:a7:03:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:08:44:A0:89:25:F9:3B:69:B3:25:D6:7F:1A:6C:3C:3E:74:44:35
            X509v3 Authority Key Identifier:
                keyid:BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:50:da:6e:14:c9:f0:62:2c:ce:a0:c8:a4:af:6f:86:db:
         6a:b3:8d:56:5f:fb:ca:ad:a9:85:90:87:08:b2:4c:e0:0d:a4:
         cf:2f:8f:f4:35:14:26:d8:04:fc:4d:38:ec:0a:f5:47:1a:27:
         d0:17:fb:84:6e:f6:a8:da:46:1d:f5:06:8b:57:83:6a:51:d4:
         db:5a:04:cb:0c:d4:57:b5:3a:bb:0c:a3:c8:24:89:42:f9:fc:
         f4:89:37:f6:19:a1:56:16:e2:d9:4f:07:2e:6a:c4:3b:25:84:
         0b:35:91:b7:d5:7c:c9:40:eb:4a:e7:c5:92:11:6a:d4:11:70:
         c4:23:c8:cd:f0:f3:7e:b5:ec:c7:3d:55:6a:d8:7f:9e:9f:4c:
         4c:00:74:93:4f:ba:1e:3f:03:5d:0f:b8:3b:90:1a:e1:2e:9d:
         9a:e7:72:db:ac:00:32:6e:aa:20:3b:19:dd:0e:b4:39:a6:bc:
         20:7d:a1:2a:5b:18:ef:6b:31:a1:d8:67:d8:78:31:73:03:80:
         74:3e:c2:ac:30:25:98:84:37:45:fc:19:c8:7a:09:e3:b0:98:
         62:0c:7a:73:a0:fa:5f:e8:09:38:46:37:58:f9:8d:3a:a2:8c:
         c9:fe:17:21:64:c2:b3:54:32:bd:aa:9a:2e:3e:b2:22:10:a5:
         9e:b8:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----