Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.mft
File:                     36729E9397EC3A3BAF16C4493F8EBB20B38367A9.mft (raw, json)
Hash identifier:          VJ2WZB5QwS8QQ+rswux/zFnCTl1qzPnu2ez+4kS+iaI=
Subject key identifier:   B4:2C:78:55:78:CC:AC:65:8D:15:4F:5E:F1:F2:D6:02:B8:04:B1:17
Authority key identifier: 36:72:9E:93:97:EC:3A:3B:AF:16:C4:49:3F:8E:BB:20:B3:83:67:A9
Certificate issuer:       /CN=36729E9397EC3A3BAF16C4493F8EBB20B38367A9
Certificate serial:       15813591091F28EE215B855E119F3C44DCD3F08D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.mft
Manifest number:          033F
Signing time:             Sun 14 Apr 2024 19:12:11 +0000
Manifest this update:     Sun 14 Apr 2024 19:07:11 +0000
Manifest next update:     Mon 15 Apr 2024 22:42:11 +0000
Files and hashes:         1: 36729E9397EC3A3BAF16C4493F8EBB20B38367A9.crl (hash: jhDmJVOkUBezH4+AiCHHhgNt8UmUVNVKqzogzxJHewg=)
                          2: 3133382e33362e34302e302f32322d3234203d3e20323634353730.roa (hash: HeXREiZki3yRmyhgxgHrX1uegaX/mTdM0m5czzJ1JTk=)
                          3: 323830343a323162633a3a2f33322d3334203d3e20323634353730.roa (hash: gwISCBAYp6lFdXLEdD2Vp+zh0xwNi6jPeBKmIqvsqcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:81:35:91:09:1f:28:ee:21:5b:85:5e:11:9f:3c:44:dc:d3:f0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36729E9397EC3A3BAF16C4493F8EBB20B38367A9
        Validity
            Not Before: Apr 14 19:07:11 2024 GMT
            Not After : Apr 15 22:42:11 2024 GMT
        Subject: CN=B42C785578CCAC658D154F5EF1F2D602B804B117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:32:30:ad:c1:06:85:1b:34:3d:a6:ac:f8:
                    55:06:ef:e5:7d:81:80:85:91:46:85:49:09:78:be:
                    2f:f9:76:f0:87:c0:9e:26:bc:ff:57:c4:9c:98:dc:
                    9f:e3:60:33:bf:39:ad:f3:25:9a:15:83:07:79:82:
                    c3:84:bc:a8:54:82:2a:dd:17:94:fe:46:af:32:0e:
                    9a:5e:61:a9:fb:e1:b6:2e:a5:f1:1f:08:a7:44:74:
                    eb:bd:ce:a8:22:17:21:54:3d:1e:4d:74:c7:68:6c:
                    9f:ed:4e:45:0c:d9:dc:a9:2b:74:4a:bf:67:85:5d:
                    27:1f:86:2d:c2:f4:85:5e:cf:96:60:2d:5c:15:fc:
                    dc:77:26:e9:05:13:8a:2b:aa:30:30:71:1f:03:9f:
                    29:7f:26:2d:a7:af:44:a2:f5:ad:e9:ee:bc:20:22:
                    f0:c9:29:bd:8b:f2:64:14:8a:c2:8c:41:ad:3f:7c:
                    24:31:2c:fe:e7:7d:d0:00:c9:c4:e6:cc:e8:05:21:
                    cd:a0:fb:f1:c8:a1:a4:3a:8a:f0:44:78:02:ba:43:
                    87:fa:39:8b:70:c2:aa:9d:b1:ab:01:18:39:f3:d8:
                    43:c6:11:52:89:c8:e5:81:c0:99:52:4e:bf:1a:25:
                    e0:d6:78:bf:16:37:fe:e8:58:f6:c1:38:aa:59:c0:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:78:55:78:CC:AC:65:8D:15:4F:5E:F1:F2:D6:02:B8:04:B1:17
            X509v3 Authority Key Identifier:
                keyid:36:72:9E:93:97:EC:3A:3B:AF:16:C4:49:3F:8E:BB:20:B3:83:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:43:62:e6:87:c8:a4:47:ae:bb:d5:02:5d:e5:fe:6b:23:a8:
         99:a1:c7:55:40:df:16:fd:3c:30:b9:81:18:34:08:e7:b7:59:
         d2:ab:cb:d4:41:bd:44:12:67:e7:ac:be:82:ce:55:cd:f1:c1:
         20:87:11:ef:1d:b8:5a:3e:55:da:aa:61:b1:5e:a6:48:e4:da:
         a2:e8:7a:2f:e2:92:18:9f:9c:35:24:b8:1a:79:80:8c:12:a7:
         bb:c3:3c:de:9f:f9:5c:1a:54:93:83:58:9a:cc:ae:c2:7d:df:
         bf:c7:dd:72:58:1c:01:a2:2f:39:1b:55:81:f7:a7:5d:52:a5:
         42:23:2c:a1:67:29:d5:b1:9c:dd:87:97:af:9e:32:f0:5d:b7:
         e9:0d:dc:e6:79:9a:8d:8f:63:8c:31:05:a7:bb:fa:7e:13:1f:
         b8:c4:35:4f:ad:33:4d:37:9e:bc:ad:81:b7:4d:b7:74:65:98:
         72:b1:f9:e4:f8:da:8e:96:7d:7a:28:e8:8e:25:96:dd:f4:45:
         b9:4d:d1:f6:13:e5:04:6e:bf:34:a4:79:1e:bc:69:ea:3c:db:
         85:a8:1b:f8:75:ed:6a:f0:e4:86:55:07:b0:27:31:20:7d:24:
         fe:d6:56:02:ba:63:96:df:c7:53:f2:e1:ad:68:68:6d:09:31:
         ac:0c:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----