Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.mft
File:                     CCF96E400ADC8CB70637260575081932C55B87B2.mft (raw, json)
Hash identifier:          Zb7eQLm+mHZIBY+Ll8DX0mp9kBPOuGHct5dCs2+ehk4=
Subject key identifier:   47:90:B9:32:6A:59:C1:4D:17:3F:17:0D:33:B1:C9:BE:03:72:CA:B8
Authority key identifier: CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2
Certificate issuer:       /CN=CCF96E400ADC8CB70637260575081932C55B87B2
Certificate serial:       2CC2F6289622C140C3ABFAA4577B46690166EA06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.mft
Manifest number:          04
Signing time:             Mon 15 Apr 2024 03:00:01 +0000
Manifest this update:     Mon 15 Apr 2024 02:55:01 +0000
Manifest next update:     Tue 16 Apr 2024 08:02:01 +0000
Files and hashes:         1: 323830343a323131383a3a2f33322d3438203d3e20323634353333.roa (hash: 7AG3wKqtrLlzYT4JKpVgHXrVVdTJ997sh0zVl+mLQn4=)
                          2: CCF96E400ADC8CB70637260575081932C55B87B2.crl (hash: GJahAdRLbJog/w1lHoUieyjfphdSj1CxU4AAX9Kdaak=)
                          3: 3133322e3235352e3233322e302f32322d3234203d3e20323634353333.roa (hash: InOzyhG6X2anyfNkt01Prd1zJ8fvQ6ywzkzij6J0irM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c2:f6:28:96:22:c1:40:c3:ab:fa:a4:57:7b:46:69:01:66:ea:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF96E400ADC8CB70637260575081932C55B87B2
        Validity
            Not Before: Apr 15 02:55:01 2024 GMT
            Not After : Apr 16 08:02:01 2024 GMT
        Subject: CN=4790B9326A59C14D173F170D33B1C9BE0372CAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:4b:0e:6e:3a:57:a6:8a:4e:4f:25:0e:61:
                    d9:6f:fb:7b:de:45:87:21:ce:d8:e4:2f:32:6a:95:
                    29:30:a6:cf:a0:b4:9a:85:0a:72:43:31:0c:09:ec:
                    f8:0b:33:ac:98:84:18:9e:66:e7:61:72:91:50:c4:
                    10:ff:d2:14:67:50:ed:62:04:c4:ef:1a:30:fb:fa:
                    6e:a5:4e:ae:ce:44:54:55:cc:5f:90:dd:45:a1:78:
                    a9:c3:ab:fd:3a:90:f7:f4:ed:10:d2:95:7e:a1:62:
                    fb:54:5a:95:f6:78:f7:2d:5b:80:e8:11:8f:dd:d7:
                    10:85:74:a1:9b:7e:42:2e:65:ef:7f:c7:b3:ca:4b:
                    dc:43:c7:a4:7c:59:67:71:1f:94:04:4d:a0:95:a5:
                    ef:c2:85:a3:88:4a:22:d5:3a:80:03:c1:bb:7d:6f:
                    40:b5:af:3a:87:39:42:61:f4:89:3a:7b:92:64:62:
                    1e:74:85:05:ef:55:05:3e:d9:7c:1e:d5:23:71:5e:
                    fa:5a:7f:19:76:4d:ed:9c:0e:2a:50:d8:0f:d1:63:
                    8a:c1:ef:fa:06:48:bc:9c:74:e3:cc:42:3d:b6:78:
                    90:ae:bb:76:42:56:1f:46:3a:86:22:8a:a2:9c:d0:
                    d7:91:94:ba:50:2c:ce:be:43:35:39:f2:1b:52:b4:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:B9:32:6A:59:C1:4D:17:3F:17:0D:33:B1:C9:BE:03:72:CA:B8
            X509v3 Authority Key Identifier:
                keyid:CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:94:e6:72:2b:65:d2:87:e3:44:ca:ef:14:e4:fd:8c:02:
         62:3a:06:26:6c:48:1d:7c:e7:a4:27:b3:14:26:a1:4c:8b:84:
         24:2b:b3:60:1f:21:6a:51:b6:54:7f:8c:70:60:9e:2e:63:14:
         2d:58:74:6b:fe:16:e9:03:29:d8:ff:6c:09:9a:ed:e1:4b:0e:
         7a:ef:66:fe:fc:8f:76:48:63:0a:a3:e4:34:47:9c:b1:84:fd:
         91:b1:05:96:b7:17:6b:e1:17:90:e4:21:04:11:d3:67:ef:03:
         08:53:2e:6c:94:69:42:6c:3a:9a:ed:e8:4a:86:78:69:73:32:
         3e:d1:bb:19:36:a2:bd:92:d8:75:5f:7e:c7:e0:e9:55:fd:36:
         93:64:eb:b7:15:ba:5b:a7:e6:09:e2:93:51:fe:56:51:3e:15:
         3a:9e:58:a0:1b:48:b7:89:77:00:85:8e:83:3a:a7:ab:b6:80:
         8d:a9:6d:9f:e1:8f:54:6e:31:56:d4:5c:37:0d:9f:b4:12:3c:
         e3:ed:ca:ff:15:52:4b:7e:14:06:31:f2:1b:c0:2e:0c:4b:04:
         70:92:27:a4:7b:07:5a:aa:a5:d9:04:4e:34:8e:df:5c:8e:7d:
         ec:7e:2c:c0:91:35:36:cb:6b:9f:ad:7a:fd:3e:78:8b:35:a6:
         bb:00:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----