Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.mft
File:                     5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.mft (raw, json)
Hash identifier:          +59LTvGGmLL9o0jMeVHQOLmQpQ/0uv18OxixkBAdaUA=
Subject key identifier:   EE:1C:B8:89:D9:D5:E6:BF:49:76:2D:91:03:36:E2:29:97:4C:9C:4A
Authority key identifier: 5C:D4:F8:C1:B4:8C:98:F5:8F:19:51:8F:7D:1A:C6:EE:49:C7:BF:32
Certificate issuer:       /CN=5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32
Certificate serial:       2BB3B922E7481293DEDBF12B9A7ABD9A466E7901
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.mft
Manifest number:          059B
Signing time:             Mon 15 Apr 2024 07:39:41 +0000
Manifest this update:     Mon 15 Apr 2024 07:34:41 +0000
Manifest next update:     Tue 16 Apr 2024 09:16:41 +0000
Files and hashes:         1: 323830343a333836383a3a2f33322d3438203d3e20323636343735.roa (hash: LZrabF2SCN3Z5aXHmn+4tKUXrGtxiKoHncHUZkopb5w=)
                          2: 3137302e38332e3137322e302f32322d3234203d3e20323636343735.roa (hash: 7Va+462RE/4GwmKAkGySSgCdyxxnM69B1mypweyXx0M=)
                          3: 5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.crl (hash: 8qlq9HOLTTNqVSNwkSkRkxVp4pkAZgs3XeOXZS/PCJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b3:b9:22:e7:48:12:93:de:db:f1:2b:9a:7a:bd:9a:46:6e:79:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32
        Validity
            Not Before: Apr 15 07:34:41 2024 GMT
            Not After : Apr 16 09:16:41 2024 GMT
        Subject: CN=EE1CB889D9D5E6BF49762D910336E229974C9C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a6:ca:de:6a:3c:3d:09:66:56:16:7e:6b:31:
                    40:28:fd:c4:1d:b1:ac:2d:ba:31:dd:a3:b4:50:d4:
                    b9:19:b0:c3:2b:82:54:7c:b0:7b:5c:c7:85:51:e9:
                    66:f0:be:66:cd:43:f2:9f:a8:cf:5f:f4:83:c8:7b:
                    50:52:61:0a:80:e9:e1:5f:23:36:99:78:3c:e0:cb:
                    6a:c5:df:cc:ab:dc:40:57:ae:c2:38:3b:75:3b:c2:
                    18:eb:14:f8:a9:cf:2d:97:c7:18:3a:fc:08:5b:b6:
                    a9:f0:ee:96:60:9f:6e:f6:8d:3e:dc:17:9e:c9:61:
                    5c:b3:34:18:4a:e2:0a:75:65:30:0f:af:05:ad:a5:
                    0f:08:4d:fd:fc:31:de:11:31:e0:c3:51:08:96:90:
                    9a:2a:0e:b9:89:6f:01:ff:ad:1f:76:94:1a:59:e6:
                    52:7f:24:46:06:c3:85:cb:b2:4b:ff:6a:9e:b1:ee:
                    84:1b:a3:bf:8e:63:45:e4:43:1f:1d:49:92:3c:fd:
                    84:d1:dc:64:06:4e:d3:0a:89:62:70:6a:fb:b0:be:
                    50:c2:53:29:3c:01:d6:7d:ae:f7:1b:ca:db:f8:7a:
                    2f:6d:30:4c:ad:1c:50:41:9b:27:5b:23:b7:57:3a:
                    84:b8:be:f2:eb:df:5d:a0:69:07:39:f6:50:38:ae:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1C:B8:89:D9:D5:E6:BF:49:76:2D:91:03:36:E2:29:97:4C:9C:4A
            X509v3 Authority Key Identifier:
                keyid:5C:D4:F8:C1:B4:8C:98:F5:8F:19:51:8F:7D:1A:C6:EE:49:C7:BF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkULoSVZMg7qmBBcTnwuJBjqj7t6yhGtoGqUJjpdGddZ/0/5CD4F8C1B48C98F58F19518F7D1AC6EE49C7BF32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:cc:b5:1e:c0:94:c0:2d:9a:b9:72:80:2b:ae:2c:ec:80:
         0e:11:d7:e6:e5:03:fa:e3:df:69:0a:cb:92:58:65:20:6e:79:
         db:a8:d3:c2:3f:af:73:b6:fc:b5:9f:bd:17:f8:e4:c8:64:9b:
         18:2c:2e:d6:4c:84:26:2a:fb:22:84:27:1a:53:90:7e:84:bc:
         26:63:86:5c:e5:bd:49:96:c5:83:7f:7c:25:d2:96:81:47:a0:
         16:69:dd:37:b1:06:83:b9:d9:25:87:5c:ac:99:a7:80:00:e4:
         f1:e7:a6:20:70:66:21:52:9f:3c:ea:b0:02:14:3b:b7:b3:3e:
         c0:3d:1a:a3:3f:3f:26:b4:99:11:64:d4:39:1f:e1:37:48:d6:
         26:f2:f9:19:3c:39:34:cf:37:8f:49:28:9f:ba:b7:72:ba:68:
         33:a6:e6:60:cf:cb:0b:c0:98:4d:fe:63:18:3d:8f:16:cf:a3:
         13:c1:c9:15:9c:d2:71:d1:1a:e2:68:b6:d2:06:84:10:15:08:
         70:9a:ae:2e:4b:9f:7d:fc:f8:f7:97:cd:15:f7:b1:51:8b:c5:
         37:73:97:f9:1a:32:3c:bc:70:6b:96:f8:b9:36:1a:e0:ec:33:
         65:8f:64:73:ec:50:87:c1:77:37:3e:ce:0f:16:64:6e:d3:8d:
         41:26:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----