Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.mft
File:                     43C65DD1E6B9100D645ED1A61A1B3F781D617330.mft (raw, json)
Hash identifier:          2j1TE02onp4DigUVY/dp4Upknq6jlaJszCtSZIIJqEc=
Subject key identifier:   9D:18:2B:DD:65:11:02:CF:C3:51:C4:34:63:34:38:0D:69:71:AF:9E
Authority key identifier: 43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30
Certificate issuer:       /CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
Certificate serial:       28842AE15326AD21AE22FAD8FB2D3F3B53338BCB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.mft
Manifest number:          5F
Signing time:             Mon 15 Apr 2024 00:39:10 +0000
Manifest this update:     Mon 15 Apr 2024 00:34:10 +0000
Manifest next update:     Tue 16 Apr 2024 03:11:10 +0000
Files and hashes:         1: 43C65DD1E6B9100D645ED1A61A1B3F781D617330.crl (hash: tKiZ2YU+JinvR3wVbWjcQJ5dknvZW1WpnHrBX0vLvJ4=)
                          2: 3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa (hash: ArIF0VumMOCyNgAtQeabkxLpuSiddXeVSbpqA0WS1qM=)
                          3: 323830343a333330343a3a2f33322d3438203d3e20323635313131.roa (hash: dNIPVioSnfeUB6oSD2ZDbjXuNLaXJgKmANbmaIPKG9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:2a:e1:53:26:ad:21:ae:22:fa:d8:fb:2d:3f:3b:53:33:8b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43C65DD1E6B9100D645ED1A61A1B3F781D617330
        Validity
            Not Before: Apr 15 00:34:10 2024 GMT
            Not After : Apr 16 03:11:10 2024 GMT
        Subject: CN=9D182BDD651102CFC351C4346334380D6971AF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:56:be:92:6f:9d:c6:07:7e:59:4a:b1:d1:
                    f6:84:9a:96:5b:61:7a:be:68:b9:0e:02:53:40:4f:
                    d8:b7:96:19:86:a7:08:b7:37:35:07:99:c3:1e:67:
                    0f:62:91:b3:22:59:83:93:f7:0d:e3:4e:36:43:4b:
                    1f:7d:a9:d7:36:89:78:8e:d2:83:be:e6:e3:e2:fd:
                    8c:50:85:99:7b:8d:76:44:f0:b2:23:80:e1:4f:ac:
                    9a:85:3d:5c:f8:2d:53:9c:46:2f:4e:4e:9c:a8:e7:
                    28:26:fa:00:51:10:59:70:d1:d8:28:d6:b2:e3:a1:
                    f7:b3:b9:56:25:07:4c:a2:ba:69:80:3c:32:cf:62:
                    14:ce:75:45:a3:3d:88:9a:7f:48:0c:43:8e:d8:94:
                    87:6c:fe:54:9d:94:15:85:cb:b4:61:31:81:c6:2d:
                    b1:f7:f0:89:8b:cf:75:eb:1b:3c:d8:56:a5:57:96:
                    fe:ee:25:23:e1:dc:c6:ad:56:ff:0c:c9:0d:53:e4:
                    8c:fe:50:a3:ef:e9:7b:ed:f7:79:8b:1e:20:f4:1e:
                    68:fc:96:3c:8b:4a:a2:9f:eb:50:c7:7e:c7:87:91:
                    a6:48:e9:3c:91:f5:99:1e:14:3e:f7:f2:9c:71:5a:
                    ca:35:8f:ee:46:cb:a5:4d:7b:fb:c4:11:4d:f4:fe:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:2B:DD:65:11:02:CF:C3:51:C4:34:63:34:38:0D:69:71:AF:9E
            X509v3 Authority Key Identifier:
                keyid:43:C6:5D:D1:E6:B9:10:0D:64:5E:D1:A6:1A:1B:3F:78:1D:61:73:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/43C65DD1E6B9100D645ED1A61A1B3F781D617330.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:41:5a:d2:65:18:8d:07:8b:25:dc:ec:b7:e6:ff:ce:e1:
         d9:73:0e:9d:64:c8:65:b1:99:69:65:34:7a:33:a4:82:3c:5e:
         47:b7:31:85:7b:32:8d:cd:a1:79:c0:21:9d:11:63:e4:75:f8:
         fd:3b:39:58:b0:2f:5b:98:bc:a8:2a:4b:39:7b:8a:a4:f5:ec:
         ce:cc:c3:54:d1:c5:a6:7b:00:98:ee:9c:ed:c7:46:47:a3:dc:
         4f:24:bc:45:2e:f3:8e:27:1b:9a:78:54:86:c2:d5:a2:d1:86:
         b9:67:d3:18:80:13:4c:cb:3c:50:06:ae:fe:28:5f:5b:ac:4f:
         0c:ec:49:87:5e:b8:0c:dd:54:57:94:60:3f:00:66:9b:10:8d:
         9f:3b:12:78:62:98:67:b5:51:54:79:3d:85:d5:95:e5:b1:50:
         e3:8a:f8:4a:0a:fa:e1:08:e8:04:4e:7e:0c:5e:f4:47:91:b3:
         a2:ed:73:28:52:98:61:9b:89:ce:c0:48:2c:bb:ea:b7:e6:93:
         37:04:da:29:0d:80:d7:e0:0a:fc:86:ba:4e:1c:9a:48:2e:2b:
         6b:c4:30:64:3d:55:42:93:8c:f5:86:67:fd:b1:7e:0a:15:97:
         79:d9:29:d5:ae:6a:6b:3e:f1:d0:8c:4f:7c:cc:24:b2:c3:56:
         3e:34:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----