Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.mft
File:                     3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.mft (raw, json)
Hash identifier:          fE3FawV4fI5xj63PMrBamF1LwvJzO6awT4/CEROf64A=
Subject key identifier:   59:EB:42:CF:96:A9:38:F0:31:6B:D1:8B:F9:D3:AB:0E:B2:51:44:7C
Authority key identifier: 3D:9D:3E:D6:8C:C6:24:CD:26:DC:2C:CE:25:12:A5:AD:AF:1D:AA:55
Certificate issuer:       /CN=3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55
Certificate serial:       05C2E4074AA27126D6177BC91EE6A4BF6245B724
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.mft
Manifest number:          010F
Signing time:             Mon 15 Apr 2024 09:44:07 +0000
Manifest this update:     Mon 15 Apr 2024 09:39:07 +0000
Manifest next update:     Tue 16 Apr 2024 11:07:07 +0000
Files and hashes:         1: 3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.crl (hash: SUK264MtewkxZpwgOls51N3sKhV2NipXKKNsyshQyGs=)
                          2: 323830343a383461633a3a2f33322d3438203d3e203238323233.roa (hash: XqDdueMvwjHwo/OJE8HPf7bUUc3NQfGC9gLLL8sur3I=)
                          3: 3138392e3132362e33322e302f32302d3234203d3e203238323233.roa (hash: P7xKzDLI+ofpaNHIGWuJc9SHK/RalPS1VFfZOjLsEHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c2:e4:07:4a:a2:71:26:d6:17:7b:c9:1e:e6:a4:bf:62:45:b7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55
        Validity
            Not Before: Apr 15 09:39:07 2024 GMT
            Not After : Apr 16 11:07:07 2024 GMT
        Subject: CN=59EB42CF96A938F0316BD18BF9D3AB0EB251447C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:91:15:f8:93:1f:ce:d8:b1:0b:0c:c3:fa:
                    34:99:ff:b0:a0:bf:29:37:9e:c4:8b:66:59:78:9d:
                    12:84:cb:36:b1:26:44:6e:1d:6e:2e:d2:b2:a9:08:
                    a2:51:46:5e:79:f0:94:96:a8:bd:2a:e2:ab:86:42:
                    ec:f9:36:65:91:11:24:df:d9:cc:60:6b:cf:9f:a6:
                    f6:35:73:c5:f1:03:87:af:73:7b:79:b1:d5:e7:4c:
                    f0:6d:73:98:37:a1:ed:f1:c9:d0:19:61:21:62:9e:
                    3d:61:0d:17:c1:0f:94:0b:1c:f5:66:63:1b:93:41:
                    8e:d9:dc:8e:17:18:74:e2:4d:02:9f:f9:91:d0:fd:
                    7a:08:40:c6:c5:84:6f:30:26:40:e5:98:f6:86:32:
                    91:d8:c3:76:49:30:66:77:c4:a9:aa:2b:8f:a4:09:
                    27:41:3e:7b:cc:ac:08:91:fd:bc:2c:99:51:c3:30:
                    92:24:36:51:b2:bb:86:6f:20:10:62:87:68:47:50:
                    74:c0:17:99:fb:65:1e:28:16:1a:52:35:d1:91:07:
                    91:53:e3:ae:28:a8:ad:59:6a:a7:29:88:5e:15:cb:
                    6a:01:d6:80:2b:f1:17:99:33:d2:a0:40:72:3f:db:
                    92:d4:96:14:8c:f1:3b:28:fd:5f:77:0d:b3:f4:10:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EB:42:CF:96:A9:38:F0:31:6B:D1:8B:F9:D3:AB:0E:B2:51:44:7C
            X509v3 Authority Key Identifier:
                keyid:3D:9D:3E:D6:8C:C6:24:CD:26:DC:2C:CE:25:12:A5:AD:AF:1D:AA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/3D9D3ED68CC624CD26DC2CCE2512A5ADAF1DAA55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:1f:5e:69:21:40:5f:4f:68:f3:7f:3f:02:3a:64:e3:49:
         94:89:5d:da:7a:94:f8:b1:0c:58:7f:4e:8a:4f:f3:fa:f1:91:
         df:7e:9b:92:04:69:38:3b:de:d5:aa:cb:16:eb:4c:ab:07:20:
         ba:ca:36:64:32:80:7f:e0:35:73:46:cb:65:4a:c9:41:8e:77:
         0e:f6:89:36:51:db:77:d7:3e:05:12:ab:14:92:79:9f:c4:8e:
         2c:a4:b8:e4:05:1c:5a:4c:9a:64:65:5d:fb:23:54:e0:7f:ec:
         0b:62:fc:47:91:bc:e0:64:be:87:3d:c1:4e:58:e3:20:37:ac:
         cf:35:50:ba:e9:03:98:a1:d6:c1:78:10:92:7e:d1:ce:b7:f9:
         89:0d:4d:a6:19:08:17:2f:e0:5d:b7:92:04:61:4c:ee:fe:f4:
         1b:16:b9:03:86:33:ef:57:33:fb:be:13:6b:c7:aa:d6:86:3d:
         08:70:e6:3c:d1:1b:55:ff:07:f1:e4:05:9a:95:36:65:6e:c1:
         f1:af:9b:78:6a:56:ae:46:f1:f1:8e:c8:99:ba:40:73:a9:3b:
         a5:41:63:ce:36:f0:09:e0:bc:c1:39:90:d1:f0:34:c2:a9:57:
         82:4a:02:74:fe:9a:12:1a:3f:60:47:12:f6:e2:c4:ba:bf:a3:
         46:58:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----