Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.mft
File:                     B445A2940634EDC971D4185E883796F1FFA053D1.mft (raw, json)
Hash identifier:          PcQoEd2ruNkHQKcl3woyK8z3Au5unbvlFcRrNdr4VHU=
Subject key identifier:   95:A9:CA:A2:E6:AB:30:DC:6A:8E:F8:1D:48:19:01:37:B8:3A:C2:90
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       649D3D67F13F2575D15279FC667C75E8CC2E881D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.mft
Manifest number:          70
Signing time:             Mon 17 Jun 2024 17:59:06 +0000
Manifest this update:     Mon 17 Jun 2024 17:54:06 +0000
Manifest next update:     Tue 18 Jun 2024 20:20:06 +0000
Files and hashes:         1: B445A2940634EDC971D4185E883796F1FFA053D1.crl (hash: JCkN48ddYte9KBVsWbN0DZaUIAJZXZhymKWws3ksaAA=)
                          2: 34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa (hash: ruVCmPAwDDg8yxiSHT3mSExzsm/RlTPqWNqbp83buHE=)
                          3: 323830343a353030343a3a2f33322d3336203d3e20323638333634.roa (hash: FGmxjjCziS0EJYDlpoO8QKiduiETs6TDykMd1gcmlT0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9d:3d:67:f1:3f:25:75:d1:52:79:fc:66:7c:75:e8:cc:2e:88:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Jun 17 17:54:06 2024 GMT
            Not After : Jun 18 20:20:06 2024 GMT
        Subject: CN=95A9CAA2E6AB30DC6A8EF81D48190137B83AC290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:a6:b2:0a:26:88:d8:1b:47:10:68:cc:91:
                    ec:9d:cc:f9:8d:cc:8a:a1:33:f0:77:be:c2:0c:a9:
                    b8:1d:b6:c0:22:a4:2d:a8:fc:3a:9c:78:da:62:04:
                    43:6e:42:7a:7a:55:57:73:8f:bc:68:1a:2c:73:11:
                    d2:5c:9b:12:eb:0b:00:cc:57:ba:2f:f5:20:4d:85:
                    91:95:dd:89:cc:c1:0a:a7:60:21:24:c5:9b:e1:3b:
                    8a:01:dd:bf:82:61:68:00:17:15:c8:e6:4c:a0:e6:
                    c1:b1:db:ba:4e:a8:bb:eb:3b:af:ab:b9:77:48:2e:
                    cf:b8:f4:a8:2a:c3:6d:d4:e9:08:24:9c:e6:39:8f:
                    68:2c:51:e7:1b:6d:8f:65:48:9f:5d:ba:17:47:bc:
                    ab:e5:eb:ac:48:ce:f4:17:a1:75:57:46:bd:cc:b6:
                    88:b0:6b:c7:23:6b:6c:b4:33:df:7a:39:87:c6:39:
                    2b:63:58:aa:bd:7d:70:28:4e:8b:59:46:a2:86:8f:
                    20:19:69:ad:52:ef:fb:e2:19:88:a5:80:43:53:4f:
                    ce:1f:eb:20:63:47:24:20:bd:64:da:6a:ab:67:83:
                    43:d2:8c:e1:63:57:ed:18:77:6c:2c:ca:6b:f2:c5:
                    c1:b5:d7:13:8e:92:f2:cd:4c:2a:1e:ee:50:49:5d:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A9:CA:A2:E6:AB:30:DC:6A:8E:F8:1D:48:19:01:37:B8:3A:C2:90
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:82:07:6e:f5:b6:16:e6:74:4d:6a:d6:ca:60:06:7a:8f:
         28:f8:20:e5:8f:bf:d5:17:6f:4a:37:22:10:86:2b:d2:71:c1:
         f9:de:83:6d:42:49:a6:d1:db:6a:1e:c4:90:1c:8c:8f:a7:ce:
         73:8d:5d:ff:72:b1:83:68:26:ec:c0:07:f6:32:28:f3:88:05:
         3e:cc:94:8b:44:27:47:9d:02:ef:1a:d4:8f:16:b1:88:91:07:
         bf:25:a0:75:5d:7a:b8:3b:31:f1:e8:84:d2:f5:eb:f2:76:bb:
         be:e1:fa:5d:4e:1d:d8:5b:ea:4a:4e:13:be:aa:ef:b6:d8:a2:
         fe:c4:f1:c7:c2:d2:d7:ed:68:11:fd:63:84:1d:dd:cc:45:e7:
         ab:cf:67:fb:0d:99:94:a2:a0:a1:ba:f4:0d:dd:59:7b:7a:c4:
         12:52:59:09:b9:8b:93:a1:07:2a:4d:94:b8:3e:bd:35:9a:78:
         58:65:27:ba:59:e3:48:4a:92:ce:33:5f:fb:30:20:e8:67:a7:
         5f:20:0f:ba:b3:f8:6f:e2:c7:7f:bf:f7:28:55:10:18:6f:08:
         59:12:bf:c8:3b:61:6d:b5:9b:c3:7a:a8:46:69:bd:6b:d3:de:
         87:40:68:33:84:65:50:66:0c:ea:c3:21:a7:7a:74:e5:07:1f:
         42:b5:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----