Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.mft
File:                     3751E14F83E2CE00B85D8F4A98C3ED0330138694.mft (raw, json)
Hash identifier:          By+76D90BvmgTZ0s6tONzopKHSfTCGKzohAZUQ3Cl5Y=
Subject key identifier:   72:6C:C1:A4:0E:CA:FF:4D:77:7C:63:C4:A7:38:51:12:B4:CF:B3:E7
Authority key identifier: 37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94
Certificate issuer:       /CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
Certificate serial:       67A991C0F8E07C91D6C0C525B3B9DAE74F97C3AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.mft
Manifest number:          01DC
Signing time:             Sun 14 Apr 2024 22:19:27 +0000
Manifest this update:     Sun 14 Apr 2024 22:14:27 +0000
Manifest next update:     Tue 16 Apr 2024 01:44:27 +0000
Files and hashes:         1: 3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa (hash: WdEkjEza2+CrtL+h9En3UufE5m6z3yoljTTCMTFpJFA=)
                          2: 323830343a373933633a3a2f33322d3438203d3e20323731323933.roa (hash: XidLXxh8SJ1mDnBZ604EMwqOHgE9pnqvKxFwnD5vsd0=)
                          3: 3751E14F83E2CE00B85D8F4A98C3ED0330138694.crl (hash: 5KCLHs/26chdpcR0sB5WQo2cipRHvTcL4nrpPlhwF8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a9:91:c0:f8:e0:7c:91:d6:c0:c5:25:b3:b9:da:e7:4f:97:c3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3751E14F83E2CE00B85D8F4A98C3ED0330138694
        Validity
            Not Before: Apr 14 22:14:27 2024 GMT
            Not After : Apr 16 01:44:27 2024 GMT
        Subject: CN=726CC1A40ECAFF4D777C63C4A7385112B4CFB3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:12:e3:c5:95:5c:42:1b:90:d6:fa:6d:e5:
                    30:b7:df:ca:20:93:cb:3c:0e:96:c2:b3:c7:06:39:
                    8f:65:83:db:51:62:9b:03:53:56:73:9a:b2:5b:8d:
                    ce:72:82:28:9a:b3:2d:7c:f2:ef:47:ad:ac:25:c2:
                    f9:b9:6e:b8:47:80:96:9f:c2:fb:4c:bf:23:82:b0:
                    ca:6d:fb:10:61:d5:c3:02:a6:cb:65:36:d7:2b:81:
                    ca:77:ad:b0:12:e7:a0:74:0e:45:0e:e1:85:0b:cb:
                    61:40:fe:2b:aa:88:d5:e6:d3:d9:d2:91:59:4f:cf:
                    3e:0b:48:58:b3:d4:ad:f3:c3:0a:09:0a:d5:03:46:
                    ba:72:a2:fc:53:b4:b6:23:a3:f1:45:6a:a8:4a:e0:
                    8b:f2:5d:af:90:83:85:1b:6f:d2:01:8d:d0:26:44:
                    72:86:69:e5:00:a6:6d:9d:89:54:2e:d0:a8:0d:e1:
                    1f:95:36:18:27:80:ef:8e:97:58:fc:59:b9:1f:68:
                    4d:b6:5d:21:98:6f:7b:92:1d:75:af:75:30:4b:25:
                    56:8f:85:eb:42:5d:d1:6f:ff:e7:da:5f:26:8d:29:
                    e4:e0:e5:86:84:56:c9:bb:fc:c5:8d:95:ff:de:32:
                    bf:cb:b6:e3:dd:2d:a3:45:7b:a0:12:60:16:01:38:
                    18:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:C1:A4:0E:CA:FF:4D:77:7C:63:C4:A7:38:51:12:B4:CF:B3:E7
            X509v3 Authority Key Identifier:
                keyid:37:51:E1:4F:83:E2:CE:00:B8:5D:8F:4A:98:C3:ED:03:30:13:86:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3751E14F83E2CE00B85D8F4A98C3ED0330138694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/1/3751E14F83E2CE00B85D8F4A98C3ED0330138694.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:29:0c:c9:89:2a:67:27:41:c4:f0:b0:84:cf:a6:90:31:db:
         ca:7e:a4:b6:b9:df:34:0e:e9:d3:cb:cc:69:57:7b:36:36:13:
         09:d3:66:4a:69:6d:96:2a:a2:8c:af:9b:d0:f3:16:47:7a:95:
         a9:4e:6a:d2:76:09:cf:5b:70:d5:dc:0d:b8:5a:5d:3d:18:51:
         a8:2a:95:8f:58:1a:3b:95:18:36:c0:66:c1:55:90:d4:6c:02:
         a1:3e:de:63:39:5f:55:56:8a:38:ed:1d:9c:58:32:8b:9c:9b:
         77:a7:08:0f:1c:65:8d:48:18:3b:07:94:b9:46:b0:d1:ce:a2:
         3f:fa:8f:98:38:0b:ae:a6:c4:2b:5b:c9:70:62:58:3a:6a:93:
         f4:27:9f:1b:9a:ab:6f:fe:cd:70:da:d5:63:e0:8f:11:6e:bf:
         c9:48:05:53:d3:31:cf:06:66:03:5f:fc:43:a3:13:2e:2f:f9:
         bd:c4:62:8b:7b:76:72:8d:98:66:ec:f5:08:40:82:d6:4f:21:
         c3:31:68:ea:8d:f2:18:86:63:25:27:10:c5:27:dc:39:0c:78:
         d5:3b:a9:21:a6:a1:ac:0f:b0:c3:9a:ab:1b:30:55:d9:9e:2c:
         0a:64:9f:c2:08:40:ea:b1:05:7a:47:72:cf:bb:9c:97:83:8f:
         e9:11:20:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----