Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.mft
File:                     BA369A59CECCAD650C5EE504F3F20571DE938C4D.mft (raw, json)
Hash identifier:          8Jft1be8XlX2Vl6BS3qrBkIyEi+nAd1NsOojBUtUhxY=
Subject key identifier:   77:D5:6D:85:E3:23:8B:05:A0:FB:44:D8:A5:CB:0E:07:E7:A9:08:FA
Authority key identifier: BA:36:9A:59:CE:CC:AD:65:0C:5E:E5:04:F3:F2:05:71:DE:93:8C:4D
Certificate issuer:       /CN=BA369A59CECCAD650C5EE504F3F20571DE938C4D
Certificate serial:       2ECF2B5D43787AFF248BCAAE64E94DE6DA92594D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.mft
Manifest number:          05
Signing time:             Sun 14 Jan 2024 00:00:39 +0000
Manifest this update:     Sat 13 Jan 2024 23:55:39 +0000
Manifest next update:     Mon 15 Jan 2024 01:03:39 +0000
Files and hashes:         1: BA369A59CECCAD650C5EE504F3F20571DE938C4D.crl (hash: hI2lX9yXVt5uED0b2E4N5OlU0r2AZY6XE6kxJ259DfU=)
                          2: 323830343a356537303a3a2f33322d313238203d3e20323639303333.roa (hash: d8lMMPLl3roaD+IfQfTYd7iRqwBWoICqhC6SGILOgPE=)
                          3: 34352e3137372e38342e302f32322d3332203d3e20323639303333.roa (hash: voL10NAFHHwwhyJc0IXiVocgiUwERmY7eVTLwuDfcn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cf:2b:5d:43:78:7a:ff:24:8b:ca:ae:64:e9:4d:e6:da:92:59:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA369A59CECCAD650C5EE504F3F20571DE938C4D
        Validity
            Not Before: Jan 13 23:55:39 2024 GMT
            Not After : Jan 15 01:03:39 2024 GMT
        Subject: CN=77D56D85E3238B05A0FB44D8A5CB0E07E7A908FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:24:37:18:f2:d5:8a:19:da:9b:9f:23:bf:
                    5a:12:0a:87:b2:91:15:09:3e:c4:04:91:7e:e0:89:
                    25:ea:b1:8b:9b:f7:a1:7c:ae:50:85:7c:e1:1e:32:
                    4f:7e:70:d1:ee:49:74:61:0d:f9:0d:3a:75:7b:e8:
                    1b:9e:60:d6:bf:2a:b3:df:b3:f1:61:9e:ff:4e:37:
                    b0:32:75:b8:d9:16:a5:d7:a1:37:8e:09:26:db:58:
                    e2:de:98:12:8d:ff:07:01:b0:49:c3:15:5f:42:87:
                    02:45:5d:aa:f1:71:de:fc:f3:8f:aa:aa:55:26:f9:
                    de:55:3f:6b:fb:51:9e:79:7c:9b:75:3d:66:27:26:
                    6f:51:ff:47:0a:48:5f:a8:39:ce:fe:fa:20:f4:22:
                    b0:0c:4a:95:8a:3f:40:35:95:f4:79:17:cc:9c:5e:
                    0c:7f:5e:6c:aa:66:be:7f:11:5f:d1:51:09:25:7a:
                    3a:b2:3e:7e:24:b6:81:b5:50:8b:a1:44:e1:3d:44:
                    b4:96:50:16:fc:3e:7b:78:c1:0c:04:fd:80:8c:c5:
                    08:d1:48:b9:bc:2c:e6:bd:25:f0:44:32:8a:fa:88:
                    44:39:d4:0a:e8:b8:31:5b:de:30:a7:25:47:57:85:
                    d2:de:75:e8:1d:14:5b:6c:f4:4a:9d:8f:7f:02:2b:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:6D:85:E3:23:8B:05:A0:FB:44:D8:A5:CB:0E:07:E7:A9:08:FA
            X509v3 Authority Key Identifier:
                keyid:BA:36:9A:59:CE:CC:AD:65:0C:5E:E5:04:F3:F2:05:71:DE:93:8C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:5a:51:f0:6c:1a:0c:be:a5:9f:70:dc:b3:75:ab:56:68:
         b3:05:28:96:1e:af:24:0d:a5:c8:e1:5b:38:fc:cb:39:f3:1c:
         4f:41:39:cd:a7:27:88:25:38:02:fb:2a:b3:05:e7:80:cc:7a:
         f6:70:6c:d4:16:4f:52:a3:0a:25:87:47:8e:9d:11:67:eb:a5:
         0e:b4:a7:2a:97:76:44:a4:58:43:57:ed:09:e7:6d:f1:15:16:
         9f:8a:da:4b:6b:b7:9f:8a:fa:8e:48:47:c7:ca:df:7b:d2:f2:
         74:ba:f8:e5:9c:ce:77:a5:25:52:22:5b:7a:37:9e:d7:49:2e:
         eb:e4:7e:9e:b5:94:57:82:bb:32:08:78:54:77:b4:bb:c9:5b:
         79:ad:7a:3c:fd:03:d9:3d:80:9e:6d:1a:f5:b4:db:3c:ec:41:
         71:64:ec:aa:e6:93:44:82:80:aa:82:d5:dc:eb:1a:14:38:61:
         ca:eb:ac:05:f8:14:98:b1:f5:98:4e:df:2f:9f:fa:51:9d:d7:
         d4:65:aa:a9:66:54:5f:dd:de:af:5f:9e:8c:cf:c3:70:21:19:
         d9:8b:ba:56:c8:cf:42:0a:f5:9f:94:4f:54:22:87:d9:98:b7:
         dc:53:91:8b:da:e5:c1:c1:87:78:74:4f:dd:d6:18:d4:e8:0c:
         2e:66:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----