Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.mft
File:                     DCE4F1B056921195E48958A04C7D8F04210F5397.mft (raw, json)
Hash identifier:          vez7wZamos6vHpdkROkGbEnwZHaquWB83BaSS0YwzYc=
Subject key identifier:   3A:C6:6A:70:3E:84:0B:5E:45:61:C6:30:84:2C:9B:BA:B5:DC:09:11
Authority key identifier: DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97
Certificate issuer:       /CN=DCE4F1B056921195E48958A04C7D8F04210F5397
Certificate serial:       6045B45D3C43A7E773683685B5D53ED11E9D1973
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.mft
Manifest number:          0257
Signing time:             Wed 13 Mar 2024 03:49:52 +0000
Manifest this update:     Wed 13 Mar 2024 03:44:52 +0000
Manifest next update:     Thu 14 Mar 2024 04:11:52 +0000
Files and hashes:         1: 3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (hash: GKaF2+C7ABRC6Inmc8EE1Xj//LE/3KDL8rpARW3N4/g=)
                          2: 323830343a333764343a3a2f33322d313238203d3e20323636343338.roa (hash: L+GyIZkfz5zh5GpY6ZPa9C8IfWkChcNXXOj6EBlxAx8=)
                          3: DCE4F1B056921195E48958A04C7D8F04210F5397.crl (hash: U0B4DzIgLmF34HHzctAhMPOwnsgpDHnd5MxieBo5xq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:b4:5d:3c:43:a7:e7:73:68:36:85:b5:d5:3e:d1:1e:9d:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE4F1B056921195E48958A04C7D8F04210F5397
        Validity
            Not Before: Mar 13 03:44:52 2024 GMT
            Not After : Mar 14 04:11:52 2024 GMT
        Subject: CN=3AC66A703E840B5E4561C630842C9BBAB5DC0911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:d7:74:2b:2a:c6:1b:55:6d:07:b5:b2:23:
                    be:2b:5b:f8:a4:6d:64:cd:1c:64:39:11:10:fd:8c:
                    d1:00:56:08:6f:af:cc:07:0e:23:83:bc:dd:4d:4b:
                    9b:28:9f:2a:a6:19:68:5f:38:a5:7a:e2:af:dc:a1:
                    f3:76:20:10:67:1b:06:fa:8c:ce:cb:e0:dd:68:79:
                    9c:45:6c:01:8b:a8:92:73:e1:38:b4:77:47:8a:cc:
                    e0:85:d8:f3:02:aa:43:c4:4c:db:47:e3:7f:97:d5:
                    f6:d5:66:38:28:01:95:f4:5d:20:95:2c:1c:b9:37:
                    cc:7c:c3:0c:ef:21:50:b7:89:c2:fc:cc:12:09:cd:
                    ab:97:99:15:a1:e8:c5:a7:a6:a5:0a:2e:e9:51:02:
                    93:4b:9d:05:70:aa:e7:69:d0:96:ac:4c:25:f6:e4:
                    a4:6a:43:0a:af:7b:2c:56:c5:2b:9c:07:ad:34:16:
                    d6:0c:ad:ad:74:a6:33:97:fb:31:7a:98:e1:8e:c7:
                    81:57:d1:fb:1f:09:04:7f:da:31:f1:52:42:b3:74:
                    7b:02:2a:61:9e:54:43:b3:f5:25:3a:a7:67:b9:bf:
                    8f:52:34:91:92:29:72:e0:76:0c:d4:53:4c:3b:9f:
                    7f:eb:f1:0c:ba:a0:aa:73:78:25:4e:d8:55:87:06:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:6A:70:3E:84:0B:5E:45:61:C6:30:84:2C:9B:BA:B5:DC:09:11
            X509v3 Authority Key Identifier:
                keyid:DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:1f:f2:bf:58:d6:c6:40:e1:e6:72:ff:09:1a:86:05:ef:
         60:0f:3b:e5:32:dd:c0:11:29:02:e2:b0:3b:7a:57:0b:eb:0a:
         14:96:4f:96:be:4a:6b:33:44:b9:da:21:bf:2e:13:a9:74:b2:
         2d:17:65:ab:ee:f6:de:46:ad:fa:62:8c:f4:94:d8:d3:0d:92:
         b4:51:16:38:27:e3:59:77:b5:dd:99:c1:99:54:e1:49:d6:28:
         04:9b:28:83:99:d4:8a:ef:6b:33:f4:35:d9:2e:e4:dc:ca:35:
         5c:ca:71:25:b4:ba:c8:f9:f2:30:c7:0f:7c:b2:74:3a:70:1b:
         6b:e4:c4:b5:b0:de:55:df:d0:19:d5:d6:13:1a:4c:2e:bd:0e:
         31:19:26:81:26:9a:13:98:8c:25:9c:81:30:ca:fc:6e:dd:15:
         07:c6:72:54:e8:4d:46:ef:70:31:7f:14:50:9e:3b:00:a7:ff:
         38:88:d5:70:24:68:52:a4:54:fa:78:e8:92:ab:3d:08:97:e0:
         26:7a:fb:1a:1a:c1:5f:e9:2a:9e:8d:82:82:f1:b9:67:1e:a0:
         1c:1f:30:8c:09:23:e9:f8:9e:70:92:a0:ef:77:d6:2c:d3:90:
         80:e6:25:97:e1:9e:28:8b:5f:67:b8:13:d5:a4:5f:e6:15:91:
         0d:28:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----