Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/195547676B8BE1E4E5DFEC4C56540978B178C9BA.mft
File:                     195547676B8BE1E4E5DFEC4C56540978B178C9BA.mft (raw, json)
Hash identifier:          xtzREiNTo8p5exowa4PqWEsO4TFvXr+gtJNEUfGafGI=
Subject key identifier:   3B:63:D4:82:64:B1:0A:B8:64:85:DA:F3:C1:64:55:35:38:E9:BE:69
Authority key identifier: 19:55:47:67:6B:8B:E1:E4:E5:DF:EC:4C:56:54:09:78:B1:78:C9:BA
Certificate issuer:       /CN=195547676B8BE1E4E5DFEC4C56540978B178C9BA
Certificate serial:       2FEADBD2DBB4D2ADB2AD50D7EAF015E3775A429D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/195547676B8BE1E4E5DFEC4C56540978B178C9BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/195547676B8BE1E4E5DFEC4C56540978B178C9BA.mft
Manifest number:          0560
Signing time:             Mon 15 Apr 2024 03:38:46 +0000
Manifest this update:     Mon 15 Apr 2024 03:33:46 +0000
Manifest next update:     Tue 16 Apr 2024 05:32:46 +0000
Files and hashes:         1: 34352e3138312e3130342e302f32322d3235203d3e20323639313830.roa (hash: 65M/fxt8WZbIAnLYVLOM7aA8ksrMsR+VBEJJGhrttuA=)
                          2: 195547676B8BE1E4E5DFEC4C56540978B178C9BA.crl (hash: NW9iEebpzjoQYQxKrDxXJFnWgTZ72z7Ab04dOUFtvG8=)
                          3: 323830343a363039633a3a2f33322d3438203d3e20323639313830.roa (hash: 8qnDe5IWY8ShIhMN5ydXO/vnDto6HnyOrfPSM2NM6Yg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:db:d2:db:b4:d2:ad:b2:ad:50:d7:ea:f0:15:e3:77:5a:42:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195547676B8BE1E4E5DFEC4C56540978B178C9BA
        Validity
            Not Before: Apr 15 03:33:46 2024 GMT
            Not After : Apr 16 05:32:46 2024 GMT
        Subject: CN=3B63D48264B10AB86485DAF3C164553538E9BE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:92:80:07:64:36:d7:f6:a7:e1:67:fb:8a:
                    ad:90:22:92:31:4d:ef:1b:bb:ab:e1:02:93:7f:38:
                    be:98:df:54:cb:4d:ac:f5:0d:67:54:07:b4:65:a3:
                    5f:77:64:ed:74:dd:a1:a4:3e:0e:49:24:97:10:b9:
                    91:57:36:9f:cc:21:c6:09:83:92:17:7c:a5:8a:0c:
                    65:0b:32:77:82:3c:2e:0d:12:87:5f:64:41:c2:ee:
                    21:77:7c:2e:42:45:96:68:e3:e6:3f:47:a4:49:2b:
                    49:33:56:05:29:80:f9:05:31:66:a9:6e:6d:0a:4d:
                    e3:2e:f0:3d:95:31:33:49:98:bc:e1:22:0d:a0:e5:
                    0d:a2:9a:dd:ac:a4:1e:e3:67:85:09:73:94:31:5f:
                    f1:f7:4b:38:d8:9b:7d:03:b2:1a:47:89:64:b9:c0:
                    4d:18:c0:18:8a:5d:4f:58:1e:89:92:f3:76:3e:ad:
                    a9:d3:1a:62:cd:31:d4:c2:f4:11:ce:a2:a6:44:02:
                    20:a8:ff:eb:a7:10:34:43:45:3f:30:f7:50:e1:b9:
                    4d:cd:ca:5a:0c:c5:4b:7d:5a:81:65:3a:af:cb:08:
                    0a:94:94:e5:86:47:c9:34:57:be:6c:75:a0:36:09:
                    8a:0c:d2:dc:d4:5d:ba:cd:1d:16:46:f2:0d:a4:eb:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:63:D4:82:64:B1:0A:B8:64:85:DA:F3:C1:64:55:35:38:E9:BE:69
            X509v3 Authority Key Identifier:
                keyid:19:55:47:67:6B:8B:E1:E4:E5:DF:EC:4C:56:54:09:78:B1:78:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/195547676B8BE1E4E5DFEC4C56540978B178C9BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/195547676B8BE1E4E5DFEC4C56540978B178C9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/0/195547676B8BE1E4E5DFEC4C56540978B178C9BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7f:27:85:0f:f4:87:bb:50:0c:5f:df:b8:1c:55:49:aa:8a:
         56:fd:cb:d0:cc:70:ec:70:d8:61:39:b1:9a:b0:d3:2b:88:e3:
         76:e9:22:32:da:d9:c4:44:93:19:5e:e0:80:cf:0b:5a:ad:86:
         31:3b:6a:62:b9:ca:32:68:55:46:74:36:55:48:2f:93:97:93:
         61:15:db:3b:34:c2:0a:04:02:20:ec:d3:89:8e:f8:0c:75:e8:
         d4:64:0a:38:68:f4:b6:8a:62:c3:d2:7d:4d:54:02:f6:ff:95:
         a4:1c:3f:c1:8f:bb:7e:44:2e:ad:de:d6:b5:e9:6c:a2:84:7a:
         6d:0d:71:cf:1a:fc:b8:30:89:50:57:86:5a:4f:3f:1b:93:7b:
         79:ea:3e:d3:fb:5f:7d:da:b4:b9:21:c8:9c:10:83:a1:6a:62:
         da:3a:bc:92:a2:c6:12:e9:a6:09:2f:39:42:7d:11:b0:1a:ea:
         26:15:7b:d7:69:ec:76:b3:48:ac:90:a7:73:28:aa:f0:7a:aa:
         bc:87:08:5d:36:30:9a:16:ad:66:34:7f:76:7c:84:17:a0:bb:
         74:0e:3d:da:27:8e:b2:64:2e:2c:2e:03:b6:c2:3b:a4:a9:5c:
         ae:21:0a:97:6b:2a:0b:77:ba:cb:da:81:d7:f8:6d:b0:09:fc:
         9c:79:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----