Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/193E8C36D989BF227A8F02A647519CEE06467E67.mft
File:                     193E8C36D989BF227A8F02A647519CEE06467E67.mft (raw, json)
Hash identifier:          0USF7rcgSttnNNl3lAQx5h0lW6V7BM6ufIkvfkf/0gI=
Subject key identifier:   4C:0D:19:CF:CA:EB:D7:39:70:41:26:EA:EB:52:D3:A6:82:61:1E:D9
Authority key identifier: 19:3E:8C:36:D9:89:BF:22:7A:8F:02:A6:47:51:9C:EE:06:46:7E:67
Certificate issuer:       /CN=193E8C36D989BF227A8F02A647519CEE06467E67
Certificate serial:       24FC9EB3621C23D0789761DDA2D2DABC5C3AAF85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/193E8C36D989BF227A8F02A647519CEE06467E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/193E8C36D989BF227A8F02A647519CEE06467E67.mft
Manifest number:          0409
Signing time:             Mon 15 Apr 2024 11:35:27 +0000
Manifest this update:     Mon 15 Apr 2024 11:30:27 +0000
Manifest next update:     Tue 16 Apr 2024 12:42:27 +0000
Files and hashes:         1: 34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa (hash: JH2xKdA5c8ICXgP16a9Y+JS+Vel0YFS3fc5Lt/BNa4Q=)
                          2: 193E8C36D989BF227A8F02A647519CEE06467E67.crl (hash: VQlx9j7X60fbBCJWARYEtlXJTb7drRX9oESkPkr5DIk=)
                          3: 323830343a363237383a3a2f33322d3438203d3e20323639323939.roa (hash: uCcdt95QYl0xBhxcOzyzR84DmlgYRS9aXokDs01sqn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fc:9e:b3:62:1c:23:d0:78:97:61:dd:a2:d2:da:bc:5c:3a:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193E8C36D989BF227A8F02A647519CEE06467E67
        Validity
            Not Before: Apr 15 11:30:27 2024 GMT
            Not After : Apr 16 12:42:27 2024 GMT
        Subject: CN=4C0D19CFCAEBD739704126EAEB52D3A682611ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:6d:2c:78:da:ce:b9:90:05:fc:86:15:e9:
                    37:5a:e3:57:1c:d7:7a:2d:a4:8f:fd:a0:aa:6b:8b:
                    be:64:10:53:07:c1:cc:a8:3c:53:a5:c5:0d:ab:97:
                    a3:2a:cd:82:5f:96:96:88:a9:67:6f:d0:13:ac:90:
                    a7:d6:96:25:c4:f0:6d:b1:81:96:30:2b:6a:c2:42:
                    6b:8a:c3:84:22:26:82:b2:73:a3:c7:59:5e:a4:54:
                    9a:10:c1:87:4f:d6:a5:a1:34:12:1e:c9:bc:6b:dc:
                    34:8b:f0:e2:0a:7f:54:9d:b8:b1:8a:97:ee:59:ae:
                    b4:c9:13:0d:31:99:1c:18:7f:d8:46:a7:52:ae:7b:
                    2e:4a:6e:b6:a3:92:d3:f0:04:64:d3:2d:12:51:a7:
                    7a:e9:03:02:c8:64:8e:c2:85:d1:89:7c:ce:a4:b3:
                    72:82:d8:17:3b:44:c8:17:d7:e2:ae:0a:d0:e4:40:
                    4c:1a:54:04:28:a6:ee:07:01:1f:4b:ee:71:5a:8c:
                    71:65:42:b8:39:60:ac:5c:ac:70:83:0b:34:26:64:
                    4a:40:1c:13:14:cc:30:26:6b:89:77:33:bc:9b:91:
                    32:55:f6:01:cd:09:5e:c5:31:45:07:4e:e3:11:8a:
                    8f:b6:fb:5d:d5:c1:3e:c6:eb:76:94:c9:3a:5e:43:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:19:CF:CA:EB:D7:39:70:41:26:EA:EB:52:D3:A6:82:61:1E:D9
            X509v3 Authority Key Identifier:
                keyid:19:3E:8C:36:D9:89:BF:22:7A:8F:02:A6:47:51:9C:EE:06:46:7E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/193E8C36D989BF227A8F02A647519CEE06467E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/193E8C36D989BF227A8F02A647519CEE06467E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/193E8C36D989BF227A8F02A647519CEE06467E67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:77:ab:4d:77:a7:34:31:c8:2d:9b:aa:de:d8:71:81:3f:
         55:51:0e:82:f0:d6:30:d0:30:73:d5:ce:1c:e3:37:bc:e1:39:
         3a:fa:66:86:56:f2:74:fa:8a:c9:0f:b5:c1:df:a4:fa:59:21:
         61:ff:a5:58:94:07:f5:18:46:0e:ca:e7:49:6f:fb:d6:3e:c7:
         79:ce:de:45:97:00:ed:00:9f:39:53:14:84:0f:f4:c2:b8:a4:
         7d:23:de:64:c6:8a:f3:68:f8:c8:ab:95:9a:db:b3:59:0f:c2:
         77:4f:18:02:b2:f1:d4:8a:e4:6a:fd:09:f8:88:f4:eb:df:f1:
         d0:e6:39:9d:2a:ae:d2:77:d8:53:80:5a:89:25:34:a1:ad:5a:
         6a:83:1e:25:d3:63:cb:68:c3:15:ab:06:0a:23:b1:2e:f2:0f:
         d6:cd:f4:3e:71:e1:62:cd:5c:90:3e:55:33:94:6e:45:5c:47:
         9f:ad:8e:30:e6:b6:fc:63:20:13:7b:bd:e7:1d:5e:b5:6a:87:
         d0:64:81:f0:d3:ec:3f:83:e8:4c:e3:b3:38:02:c6:ee:4b:96:
         f1:e3:0a:03:89:19:66:03:72:c5:fb:79:38:50:28:85:6a:7c:
         ab:1a:bf:ec:57:42:b0:2b:f2:a5:94:82:83:fb:59:10:45:dd:
         ff:a4:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----