Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.mft
File:                     647BE817F76A58B8110B464E406EBB9FF62FF5F2.mft (raw, json)
Hash identifier:          dlgfDvYCWzebap7HmyUFdaDddAX1UQFeEFciVqOegj0=
Subject key identifier:   F1:FE:BA:E5:33:7A:7F:F8:67:38:0B:49:5D:C4:18:C0:26:65:5A:1A
Authority key identifier: 64:7B:E8:17:F7:6A:58:B8:11:0B:46:4E:40:6E:BB:9F:F6:2F:F5:F2
Certificate issuer:       /CN=647BE817F76A58B8110B464E406EBB9FF62FF5F2
Certificate serial:       698FA5806C3A6DAE5F0A9DF7C540F1B0AA9C3321
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.mft
Manifest number:          2C
Signing time:             Mon 15 Apr 2024 07:08:34 +0000
Manifest this update:     Mon 15 Apr 2024 07:03:34 +0000
Manifest next update:     Tue 16 Apr 2024 07:40:34 +0000
Files and hashes:         1: 323830343a363032633a3a2f33322d313238203d3e20323639313530.roa (hash: nkMfz2sYc5/tmk8+QR7y2vz/tymcx2BqjH3x7MoGOyU=)
                          2: 34352e3138302e3232302e302f32322d3332203d3e20323639313530.roa (hash: v+pMbwfsYqob1lcuPjPNNHyhgzTfyJXu/7lsP0o8pro=)
                          3: 647BE817F76A58B8110B464E406EBB9FF62FF5F2.crl (hash: BmmPipbnJHITtZanw5gegSZ8etPI2GIOLOVN4pA8N0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8f:a5:80:6c:3a:6d:ae:5f:0a:9d:f7:c5:40:f1:b0:aa:9c:33:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647BE817F76A58B8110B464E406EBB9FF62FF5F2
        Validity
            Not Before: Apr 15 07:03:34 2024 GMT
            Not After : Apr 16 07:40:34 2024 GMT
        Subject: CN=F1FEBAE5337A7FF867380B495DC418C026655A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:7b:4b:b2:2b:c7:21:f4:6b:9f:64:97:d3:
                    93:f6:e5:c1:53:d4:88:3d:77:22:a0:6a:e0:5f:cb:
                    12:9d:0e:d1:67:54:7d:e7:45:55:ef:82:71:06:64:
                    17:31:1d:58:1c:7c:5c:a1:a7:86:17:70:69:aa:16:
                    1f:87:30:17:bc:2f:8a:de:91:22:49:8e:9c:ea:4a:
                    32:95:4f:f4:89:9a:e9:b3:1e:85:2d:e2:53:a8:bc:
                    68:a6:49:33:52:a4:08:05:08:2c:70:3a:5e:7a:09:
                    9a:3e:62:71:12:65:6c:fa:ef:64:a3:a8:ef:7f:e1:
                    2f:3e:49:2b:4e:ac:31:f6:e8:ff:94:c9:2e:fb:62:
                    0d:84:59:05:0b:d3:65:bc:2e:1c:7b:ab:b8:1c:8e:
                    78:90:1b:33:75:2f:ae:ac:8d:3f:02:87:82:f2:60:
                    44:62:46:47:1e:ff:16:06:8e:01:92:93:d6:90:cd:
                    6f:f6:b2:f3:b9:b0:ed:f8:24:cf:f1:41:30:01:e6:
                    f3:07:9b:17:d5:eb:0b:5f:71:dc:5c:69:7c:19:67:
                    0b:ae:e9:89:06:6e:8c:45:a5:dd:32:3d:be:dd:0e:
                    71:37:3c:0c:6c:0a:57:d5:6d:8a:d9:ed:e7:e0:5f:
                    8f:01:ca:55:5f:f8:63:88:8a:57:c8:2c:cb:48:60:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:BA:E5:33:7A:7F:F8:67:38:0B:49:5D:C4:18:C0:26:65:5A:1A
            X509v3 Authority Key Identifier:
                keyid:64:7B:E8:17:F7:6A:58:B8:11:0B:46:4E:40:6E:BB:9F:F6:2F:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/647BE817F76A58B8110B464E406EBB9FF62FF5F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d7:7f:f7:94:b7:9c:1c:f3:ff:2e:2f:25:ae:52:43:8c:3d:
         22:19:b8:d3:f7:ce:ec:97:19:be:5a:53:4a:14:6c:20:72:31:
         af:ad:e0:6a:12:8e:4d:73:51:71:5a:33:4d:3c:81:d9:92:9f:
         b3:cc:6b:35:e1:ee:75:2f:98:6d:51:c9:2a:21:e9:fc:aa:26:
         da:fb:4f:d9:0c:5d:79:90:61:06:8e:fe:ec:93:65:77:bb:ef:
         e6:41:95:eb:2e:84:7a:1d:d1:2e:19:a1:16:35:7d:72:03:97:
         fe:58:d9:8c:5c:b3:32:87:11:a7:13:dc:de:80:3d:62:67:57:
         52:f1:96:da:b9:88:8d:3c:3d:82:77:d2:7f:7d:82:d6:58:cb:
         1b:12:56:22:c3:18:80:5b:a0:fb:83:24:c1:07:de:4e:15:64:
         b3:d9:d1:c7:a7:d4:06:2e:63:ee:8b:bf:f9:bc:56:57:10:f9:
         f1:7a:1d:68:49:4f:24:fd:02:0a:5d:9d:e2:a3:f8:db:f3:8f:
         14:fd:e6:e8:37:d7:21:14:f8:df:55:71:2a:e3:b6:0f:ff:be:
         2b:a5:70:37:83:68:34:ba:e5:0b:42:d2:b2:fc:0d:7e:c3:98:
         ff:10:d7:58:72:d5:c1:c2:4e:ce:7a:51:36:41:7b:c8:e4:85:
         2f:8f:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----