Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.mft
File:                     DC8F89483241F7F657DE6846CBDB2BA044387F98.mft (raw, json)
Hash identifier:          fer2t5TZ1mdCGVYVJW2VsFZqqdXwsyGNYuT/8J2tDTc=
Subject key identifier:   15:0D:C1:AC:54:C2:C5:52:B9:AB:E5:A1:DC:DA:ED:92:7D:F7:FE:00
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       54417423537EA995F8259A4FDCECAD3F4BB4C077
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.mft
Manifest number:          015A
Signing time:             Mon 15 Apr 2024 01:38:38 +0000
Manifest this update:     Mon 15 Apr 2024 01:33:38 +0000
Manifest next update:     Tue 16 Apr 2024 03:09:38 +0000
Files and hashes:         1: 34352e36352e3139322e302f32322d3234203d3e20323636323637.roa (hash: Arwt7bmvIXpLhZo3YYQj1SMgOR4ObwJ9pkLLW+7y0bw=)
                          2: 323830343a336435303a3a2f33322d3438203d3e20323636323637.roa (hash: oe+Y8dnNT0V7pzErD5zkqHDlrwvNtcP+R0HqZtHS6kQ=)
                          3: DC8F89483241F7F657DE6846CBDB2BA044387F98.crl (hash: NOWz1T3H3KSSK8I78IyOSWY+YdIsUUesdj75S64Tkys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:41:74:23:53:7e:a9:95:f8:25:9a:4f:dc:ec:ad:3f:4b:b4:c0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Apr 15 01:33:38 2024 GMT
            Not After : Apr 16 03:09:38 2024 GMT
        Subject: CN=150DC1AC54C2C552B9ABE5A1DCDAED927DF7FE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:ea:18:92:26:66:26:d6:39:c7:fd:e8:0e:
                    7c:f2:8d:2e:d0:f3:56:40:7c:f9:6f:77:09:59:e2:
                    e7:d5:77:ea:de:df:84:36:ca:37:18:41:b8:43:9a:
                    20:26:6f:27:9a:7d:95:ef:f0:42:2f:c4:2d:c0:40:
                    d1:28:66:6e:76:1a:f0:76:0a:3c:65:6b:49:c2:60:
                    9a:1a:02:66:c9:4b:81:44:16:83:d5:91:d1:11:0b:
                    11:db:83:07:1c:12:30:eb:7d:d3:c0:a0:3f:cf:fd:
                    50:5e:2e:33:40:06:3a:29:b9:07:d7:10:a1:6e:75:
                    33:68:3a:a4:85:b2:b6:4c:97:f8:f2:63:b7:9f:55:
                    5f:2d:4f:5c:7d:8e:b3:50:cc:c9:e9:a7:f7:f4:26:
                    96:a3:98:08:a7:86:f8:06:60:69:cc:e6:c3:23:6b:
                    13:07:45:75:1f:75:98:90:0e:52:4b:a7:67:0b:af:
                    b5:e3:da:a2:32:1e:2e:0d:4e:c6:39:0f:bd:dc:fa:
                    97:45:50:3f:a3:45:a9:f8:8b:8f:2a:65:ca:ed:bf:
                    83:72:2b:de:92:d0:3d:c6:c7:5b:3f:85:f4:df:b9:
                    9c:d5:18:27:ec:2c:34:71:e5:2f:de:fe:1f:eb:09:
                    b3:5c:27:d5:c2:f3:f9:51:08:98:b5:a6:37:fa:c0:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0D:C1:AC:54:C2:C5:52:B9:AB:E5:A1:DC:DA:ED:92:7D:F7:FE:00
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:14:f2:52:7b:b9:a3:b3:20:ea:23:9e:1f:0f:2c:ef:12:23:
         34:f3:90:39:fc:b8:9f:d0:ca:ce:fa:81:65:87:69:8d:ce:1d:
         5c:c4:e3:c3:2c:96:ba:04:48:a8:a3:e9:99:f1:2a:c6:5c:41:
         ca:66:c5:4e:30:88:a3:f0:95:f6:95:c2:e3:d1:d7:0b:ce:52:
         03:0e:f8:4e:82:19:70:cc:bc:62:96:ab:08:4b:91:fd:55:9b:
         17:8d:d1:24:84:e4:12:80:71:02:e2:ea:ab:b1:28:54:81:fa:
         30:55:7a:e8:27:cf:fb:95:4a:c8:97:04:c4:4e:2e:8d:ca:e2:
         55:80:3b:27:ae:d7:62:97:6d:1b:05:aa:b7:9c:77:ad:c3:ff:
         9c:54:cf:72:f1:32:30:5f:c8:2d:14:f7:52:aa:ac:70:9e:60:
         bb:e7:0a:ef:91:b8:68:74:38:cd:d4:88:b1:60:f8:33:e1:01:
         1c:e6:2a:a3:18:ac:97:2f:a9:5c:b1:9b:bb:d5:42:c0:50:cb:
         d3:8e:28:bf:39:98:1b:ad:8c:31:96:90:c4:53:bb:6c:15:15:
         5f:8c:50:e4:8f:3b:53:a9:bd:86:20:30:46:a6:29:15:1b:70:
         6c:2a:a7:49:ea:bb:62:ff:d3:56:1a:67:be:bc:b4:4c:69:1a:
         e2:b4:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----