Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.mft
File:                     3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.mft (raw, json)
Hash identifier:          CrdDKmQo+PZ/l2u0H+e9tWCyyLHa773IWj8EmaEbmEA=
Subject key identifier:   5C:12:AF:56:4F:9D:3B:BD:D4:27:FB:C6:4A:74:17:23:BD:6A:DB:1E
Authority key identifier: 3D:13:11:8F:F7:94:AA:86:45:D4:CC:C0:6E:AF:6A:C4:3B:BD:04:4F
Certificate issuer:       /CN=3D13118FF794AA8645D4CCC06EAF6AC43BBD044F
Certificate serial:       2B4B8D8419AE02F87D835EB45B9E6EE01495B445
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.mft
Manifest number:          02
Signing time:             Sat 20 Apr 2024 01:55:03 +0000
Manifest this update:     Sat 20 Apr 2024 01:50:03 +0000
Manifest next update:     Sun 21 Apr 2024 03:04:03 +0000
Files and hashes:         1: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: d3SerELupwmSnq5NH/YwEvqPvt8kanBGQGfWLwOx0Yc=)
                          2: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: 8tKpxSJHEeqxogNzJIPsz1SpgkCL1T/U0t51x5scV84=)
                          3: 3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.crl (hash: IVUiPgEDxWnitxush8ddD/EGKKgnfM9LH0j2yFbgTuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4b:8d:84:19:ae:02:f8:7d:83:5e:b4:5b:9e:6e:e0:14:95:b4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D13118FF794AA8645D4CCC06EAF6AC43BBD044F
        Validity
            Not Before: Apr 20 01:50:03 2024 GMT
            Not After : Apr 21 03:04:03 2024 GMT
        Subject: CN=5C12AF564F9D3BBDD427FBC64A741723BD6ADB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:87:10:96:e2:7e:24:70:49:f3:1f:d9:55:
                    32:00:50:a1:94:ff:58:84:c7:8f:62:70:30:33:7d:
                    07:e1:ab:01:60:86:b9:d6:e8:20:78:6b:c6:c6:77:
                    d6:fb:9c:30:b2:57:86:76:a7:fb:c1:74:d8:54:08:
                    8d:4f:d8:35:ae:31:72:c3:d3:a1:50:6e:e4:96:a7:
                    63:a0:84:2f:71:2a:cf:99:48:13:c3:a4:f1:64:c0:
                    d9:dc:45:b1:4e:86:90:5f:97:a7:d5:d6:d4:64:35:
                    8e:32:ac:32:bf:1c:27:92:85:6f:80:64:4d:7b:3e:
                    5e:d1:27:5a:d0:69:41:54:cd:4d:52:a0:db:03:34:
                    63:54:9f:d5:4f:7c:21:cb:6e:6b:cf:e3:81:87:1b:
                    7e:23:a5:60:d0:04:46:65:a2:e9:25:1b:8e:e6:1d:
                    12:84:1d:26:cb:7f:f3:dd:35:c7:7f:61:ca:4d:12:
                    80:87:fa:a0:f6:12:0a:9e:c5:11:e8:70:fb:1c:54:
                    61:64:8f:9d:94:2c:c0:e0:9d:7e:ca:59:68:73:4d:
                    45:dd:2b:5f:1f:13:8b:4e:77:9c:fb:32:e7:d2:1c:
                    f4:5c:0e:d4:a3:5d:ad:1d:c4:41:6b:f9:e3:4e:7c:
                    00:79:c5:9f:3a:93:7c:52:39:a3:2a:9f:01:fc:9b:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:AF:56:4F:9D:3B:BD:D4:27:FB:C6:4A:74:17:23:BD:6A:DB:1E
            X509v3 Authority Key Identifier:
                keyid:3D:13:11:8F:F7:94:AA:86:45:D4:CC:C0:6E:AF:6A:C4:3B:BD:04:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/3D13118FF794AA8645D4CCC06EAF6AC43BBD044F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:11:1d:15:47:5f:23:90:3f:cd:69:0b:1f:f0:f1:44:60:13:
         56:d5:82:13:e0:78:d1:41:2f:cd:54:4b:30:b3:a5:18:e8:58:
         87:a7:58:40:db:e4:54:9f:a8:4f:d0:27:70:7e:bf:fc:ed:51:
         40:db:a0:60:2c:87:3f:b0:a9:01:db:a4:37:61:15:22:fe:db:
         b1:a9:9b:70:db:20:4b:3f:d8:2e:61:ab:1b:0f:7b:1d:c9:8b:
         45:6b:ed:3e:98:76:68:b7:80:96:74:8a:dd:ad:ef:35:b9:61:
         fe:cb:c7:d4:35:80:26:99:93:ac:dd:59:58:01:ea:9f:61:18:
         1b:d5:37:e2:6a:b8:8f:ef:65:10:93:4a:fa:5c:83:55:10:9f:
         71:f4:87:c7:a0:91:7d:76:7a:28:67:b1:06:73:68:ee:e4:f8:
         99:ea:79:c0:1d:9d:bd:df:17:8d:60:f5:08:b3:19:22:7f:b3:
         86:94:34:b6:9a:30:a8:78:57:f8:45:a9:00:7b:10:02:57:8b:
         a6:c8:f6:34:fe:a9:e2:2d:95:41:28:a0:00:6c:85:7c:50:5c:
         4d:b7:b6:54:97:a6:7e:43:b9:1d:3f:b6:b3:5a:2f:77:0b:39:
         d8:e0:56:66:35:21:d9:ad:c2:d5:55:0d:a4:8a:15:ac:89:eb:
         5b:17:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----