Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.mft
File:                     DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.mft (raw, json)
Hash identifier:          b1ncR7BYTaF4H83+x1NZoEfmj3hgK2OtPcJ3jWzkYk4=
Subject key identifier:   33:BD:23:FE:4C:4B:13:91:57:67:F8:06:22:23:96:04:B4:87:B4:D5
Authority key identifier: DD:7F:CB:BC:45:3C:EA:D2:15:10:04:BD:A3:6F:24:FE:B7:66:F1:E3
Certificate issuer:       /CN=DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3
Certificate serial:       0B73097E5EB082B269E373C3DB75FD2B32AB6697
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.mft
Manifest number:          023D
Signing time:             Mon 15 Apr 2024 11:14:07 +0000
Manifest this update:     Mon 15 Apr 2024 11:09:07 +0000
Manifest next update:     Tue 16 Apr 2024 15:01:07 +0000
Files and hashes:         1: DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.crl (hash: JisI81Fl7FUAnSmfcIvW2xRt5DBhkvDjnZXLRP6i0bQ=)
                          2: 323830343a376662383a3a2f33322d3438203d3e20323731373035.roa (hash: jBSSzftlJRlYY0CRSwIkT7PMX4+9vvb+yQ+JPuR+bqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:73:09:7e:5e:b0:82:b2:69:e3:73:c3:db:75:fd:2b:32:ab:66:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3
        Validity
            Not Before: Apr 15 11:09:07 2024 GMT
            Not After : Apr 16 15:01:07 2024 GMT
        Subject: CN=33BD23FE4C4B13915767F80622239604B487B4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:1a:e9:a4:fd:08:13:79:96:d6:46:f7:c0:
                    a0:ec:0a:a0:5a:9a:b8:ed:5f:a7:6d:08:13:e8:ce:
                    59:b7:e6:b3:d7:d5:46:77:60:75:6d:a1:0b:95:9d:
                    e6:fe:a4:ee:eb:7c:16:9e:5b:03:61:92:c9:b1:bd:
                    44:69:9d:5a:e9:31:13:3b:19:5d:db:8c:8f:94:70:
                    c3:35:18:43:fc:44:25:cc:47:3d:71:b3:a4:bc:f0:
                    bc:d7:87:4f:f1:f8:60:c0:10:95:03:01:48:39:af:
                    43:fc:97:71:b6:e0:70:94:30:4c:96:f0:dc:d0:da:
                    98:4d:d5:75:a1:a7:0b:b5:7a:c3:ee:66:84:25:2a:
                    f4:ea:8a:a3:cd:11:a3:12:c9:b5:5c:2e:a6:73:e5:
                    38:b6:fe:aa:a4:c5:18:38:2c:65:34:49:e7:5e:21:
                    33:a1:12:ca:0f:95:9b:d3:b5:9f:fe:fc:4f:ac:b8:
                    e1:82:d9:e2:5a:0f:e2:0e:0b:c8:6b:b3:c2:3a:c8:
                    4d:5a:1b:e0:b3:ea:b9:af:7c:15:f5:e2:fc:8b:2d:
                    f6:84:25:21:66:bf:ec:dd:b6:ca:92:cb:ab:f9:35:
                    f0:6f:57:09:e9:7c:c4:76:97:dc:da:00:cc:c2:0a:
                    2c:ae:47:fa:0b:44:8a:8f:03:8c:1e:9d:4f:07:cd:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BD:23:FE:4C:4B:13:91:57:67:F8:06:22:23:96:04:B4:87:B4:D5
            X509v3 Authority Key Identifier:
                keyid:DD:7F:CB:BC:45:3C:EA:D2:15:10:04:BD:A3:6F:24:FE:B7:66:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:66:66:e3:3a:97:1c:7b:16:7d:10:7f:97:fc:03:c9:ee:87:
         24:b7:0a:19:7a:29:0c:fe:ed:d3:43:29:00:19:a2:37:93:72:
         fb:a6:95:d0:3a:87:9c:f3:ae:04:a6:50:1a:40:3d:8c:8b:47:
         5c:38:20:be:80:1b:e1:ff:af:fc:1c:26:a7:76:4d:26:bf:4e:
         f6:e9:63:f4:50:c0:91:8d:80:90:d5:ba:64:b2:71:91:1f:0c:
         9b:bf:94:28:2b:a8:8c:fe:0a:24:d4:70:be:49:1d:ec:57:c7:
         59:b4:5b:5c:fb:61:58:63:02:f1:03:97:de:7c:21:35:c4:f1:
         d1:2e:78:f3:c0:73:54:c3:a6:0d:b3:da:d6:02:30:36:8e:09:
         25:13:0e:dd:c6:c4:a6:35:1d:38:0d:54:76:76:d4:e8:a8:1a:
         bd:cb:f6:8b:00:ae:09:69:81:55:81:91:0f:39:ea:b0:00:a2:
         f1:bd:0a:dc:6a:13:7b:ca:a0:a4:12:0d:a3:d7:cc:51:bc:ce:
         fd:2b:75:46:cd:40:b5:2c:05:cf:17:11:56:72:92:d5:df:a1:
         53:8d:b0:3c:8b:b0:57:8e:4f:51:81:32:55:58:e4:2e:b3:58:
         c1:ee:8d:6a:32:69:b1:f5:bd:25:d5:e1:ac:0f:51:24:f2:bb:
         14:30:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----