Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.mft
File:                     94C6E2BC8A593186A05AABF5BE9B822B31F189AA.mft (raw, json)
Hash identifier:          71Pwm1msmcZYwVCGt0+DUdtjD6GlhSOOn+NssItohyI=
Subject key identifier:   2C:8F:15:8E:84:8F:4D:4D:29:6D:AE:21:91:64:E6:86:92:1B:E9:22
Authority key identifier: 94:C6:E2:BC:8A:59:31:86:A0:5A:AB:F5:BE:9B:82:2B:31:F1:89:AA
Certificate issuer:       /CN=94C6E2BC8A593186A05AABF5BE9B822B31F189AA
Certificate serial:       0891F9A6BF2DE61181E25CC05BF8568350C7D512
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.mft
Manifest number:          035F
Signing time:             Mon 15 Apr 2024 08:51:09 +0000
Manifest this update:     Mon 15 Apr 2024 08:46:09 +0000
Manifest next update:     Tue 16 Apr 2024 09:55:09 +0000
Files and hashes:         1: 94C6E2BC8A593186A05AABF5BE9B822B31F189AA.crl (hash: laplRrmduEBzLvbANJ/DZo/AnQg+UdHJkLjZhLxrA9Q=)
                          2: 323830313a38303a333862303a3a2f34382d3438203d3e20323730333438.roa (hash: WhB8jP4Y1qucHs2dVPtnR8QQUvB6msoxrP0t7w/lTWk=)
                          3: 3139302e38332e32382e302f32322d3234203d3e20323730333438.roa (hash: 5SV6JX1lG0+zFv3OsMzD1ONkm/d/SYnXsTJzlvOLnJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:91:f9:a6:bf:2d:e6:11:81:e2:5c:c0:5b:f8:56:83:50:c7:d5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C6E2BC8A593186A05AABF5BE9B822B31F189AA
        Validity
            Not Before: Apr 15 08:46:09 2024 GMT
            Not After : Apr 16 09:55:09 2024 GMT
        Subject: CN=2C8F158E848F4D4D296DAE219164E686921BE922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:cd:d6:11:da:f7:32:24:cd:6a:b4:07:b1:
                    d3:ae:5d:d8:6d:88:62:64:4b:b0:c9:2b:c1:7a:bd:
                    fc:c2:be:d3:46:ad:1a:0b:ec:c7:20:0e:af:88:39:
                    41:d0:d1:58:1f:3f:aa:a1:ab:65:de:9d:f7:6e:46:
                    7c:f4:49:80:d7:dc:71:8b:5e:88:b3:53:32:c9:bf:
                    7f:31:09:97:81:75:fc:62:d2:2f:a4:b1:2f:90:87:
                    5a:e9:34:ba:c8:76:38:94:29:77:01:6e:2d:36:01:
                    02:d4:2a:22:30:d7:3f:55:e4:b5:db:67:d5:08:f6:
                    18:9b:1f:a3:38:e3:b9:98:d4:e6:b8:c9:09:47:a5:
                    e0:f9:23:2f:91:a8:3f:73:45:68:74:4a:9d:3b:8f:
                    fe:59:85:96:18:4c:f1:0d:58:2b:16:d2:f2:42:96:
                    e3:be:62:08:ed:06:d9:53:f5:c3:8b:ec:11:52:69:
                    a6:40:60:f7:ed:6b:b8:e7:aa:8a:d2:d0:c8:67:e6:
                    83:78:ea:ac:f7:f5:73:b7:8b:b0:c0:f9:08:21:a9:
                    d9:48:4d:cb:ed:0b:24:64:01:97:08:43:f8:1a:c1:
                    27:0f:b7:5f:3e:ef:ec:5c:d9:1e:02:46:cb:27:73:
                    b3:37:d3:4f:6c:1d:cd:63:c2:a6:ae:1c:b9:b9:08:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8F:15:8E:84:8F:4D:4D:29:6D:AE:21:91:64:E6:86:92:1B:E9:22
            X509v3 Authority Key Identifier:
                keyid:94:C6:E2:BC:8A:59:31:86:A0:5A:AB:F5:BE:9B:82:2B:31:F1:89:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:21:20:1d:53:3f:e8:c9:ed:c2:1e:99:cc:0a:85:12:92:
         b6:49:60:2b:99:9d:db:53:dc:c8:54:70:38:69:67:72:97:52:
         81:0f:37:f7:4c:88:68:84:ba:72:ba:41:20:3a:3a:55:05:97:
         72:bf:13:3e:45:ae:99:d8:f7:3d:43:0d:a2:0c:05:95:2b:63:
         3f:61:ed:4f:df:ec:2c:7d:a4:8a:6c:bf:98:8b:6a:c5:c4:f3:
         c7:eb:a4:8a:29:ea:d1:f0:d0:bd:15:07:70:9b:84:77:b1:a8:
         e8:72:20:9c:08:54:a4:cf:56:53:4a:93:1c:0e:0c:35:5a:a1:
         3d:9b:37:e9:11:d7:56:f6:55:83:3e:ca:61:b4:ef:cb:bb:01:
         27:7e:ff:d9:35:da:00:ac:94:0b:43:41:44:6e:ac:ed:7b:f7:
         02:0a:00:26:b6:8b:38:83:d8:2c:91:69:9f:82:ab:ea:e2:d5:
         b0:07:d4:77:16:7b:fc:55:96:3c:6e:79:7f:6d:d5:61:18:58:
         b9:4f:06:32:22:55:b3:35:4d:27:d3:b2:64:6d:24:ec:5f:0b:
         73:75:47:e4:af:ba:d0:bd:49:a9:12:7d:c4:16:74:2b:9a:50:
         3e:4c:94:cb:21:ae:15:50:27:1f:53:3d:7f:32:5e:81:58:5b:
         41:52:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----