Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.mft
File:                     DC624F8841FFED451F1A9D746E838491790743C0.mft (raw, json)
Hash identifier:          yZeQvJuwLTJSMvO/cFAsO8fTEJytDpwnhmo8sUXEO7Q=
Subject key identifier:   31:43:19:8E:10:EC:4B:46:97:98:FA:6A:3F:BA:AA:0B:32:55:0A:AF
Authority key identifier: DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0
Certificate issuer:       /CN=DC624F8841FFED451F1A9D746E838491790743C0
Certificate serial:       7112292A471D7F95FE30298581A412056AE1C81F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.mft
Manifest number:          B4
Signing time:             Fri 16 Aug 2024 02:29:37 +0000
Manifest this update:     Fri 16 Aug 2024 02:24:37 +0000
Manifest next update:     Sat 17 Aug 2024 05:49:37 +0000
Files and hashes:         1: 323830343a333432383a3a2f33322d3332203d3e20323635343339.roa (hash: 9eQsS7vhkgJsftdhjkHTi//HObsHlbv40uzK+0hEgGc=)
                          2: 3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa (hash: zXTj8v0D+u5EaN0PTsIZU9AsU+Lg7JEBjMFenwCHedQ=)
                          3: DC624F8841FFED451F1A9D746E838491790743C0.crl (hash: g6ceCNcxJXzD3yF5s9EVn1yey/h5qVvNE2i3bpJtTO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:12:29:2a:47:1d:7f:95:fe:30:29:85:81:a4:12:05:6a:e1:c8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC624F8841FFED451F1A9D746E838491790743C0
        Validity
            Not Before: Aug 16 02:24:37 2024 GMT
            Not After : Aug 17 05:49:37 2024 GMT
        Subject: CN=3143198E10EC4B469798FA6A3FBAAA0B32550AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:26:30:2f:d1:6e:15:0d:0a:1b:12:d3:38:
                    f8:aa:cf:57:55:ad:60:fa:74:b0:11:85:3d:68:8f:
                    1c:37:b1:20:ff:73:fe:4f:68:d4:fd:56:de:20:62:
                    9d:d4:c2:7b:7f:9d:1b:22:fe:84:90:e8:4a:9b:26:
                    54:69:38:f8:15:e3:13:b1:41:7d:f6:e9:4a:81:c5:
                    41:0c:89:25:9e:2a:bd:b6:96:a4:5f:6c:d9:07:3d:
                    33:28:3a:9a:bb:9e:29:42:ea:19:da:aa:31:7f:7a:
                    03:b0:98:d5:9c:03:65:1c:9a:3e:91:47:0a:0e:f7:
                    2e:61:07:9d:72:e4:27:83:d7:a9:1f:74:6e:1f:f2:
                    09:ee:8f:0a:fc:2d:fd:88:a0:2c:c1:cf:97:f3:a7:
                    4e:96:0c:12:40:c4:19:c3:a8:f2:84:e5:79:6c:65:
                    12:53:4f:13:2e:36:66:2f:19:a3:6b:ae:b9:35:d2:
                    68:f9:a5:9f:21:04:21:2d:c5:00:59:a6:1b:18:7b:
                    4e:50:70:bc:ef:45:c6:a7:61:8d:90:bd:54:d3:93:
                    56:ce:79:74:b1:85:26:5a:6c:86:19:ef:8c:5f:e9:
                    18:fc:ff:1a:15:95:7c:b9:6d:d4:78:c8:0a:67:21:
                    d6:9e:ac:eb:1c:63:e4:b0:89:2b:b9:ba:af:85:22:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:43:19:8E:10:EC:4B:46:97:98:FA:6A:3F:BA:AA:0B:32:55:0A:AF
            X509v3 Authority Key Identifier:
                keyid:DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:a3:60:64:ef:41:52:05:76:ad:64:b9:98:99:36:f8:7b:
         5f:b3:e1:72:b5:7e:bd:aa:d4:61:68:7e:2b:21:f3:67:45:fb:
         13:de:55:41:d6:5a:d2:89:53:65:23:43:05:d0:09:67:a2:27:
         04:5c:e1:b1:29:9e:94:85:81:0e:1f:0f:dc:2d:03:2c:ac:71:
         95:19:2c:13:a8:98:b8:2c:b2:87:b7:fc:3f:b8:bd:7c:60:eb:
         43:19:8f:02:90:9c:ef:61:b5:74:bf:cb:3e:f5:ad:36:f8:84:
         d4:c7:c6:29:f0:3b:da:64:dd:f4:c7:2a:ec:b6:d8:36:8b:53:
         4c:69:11:24:d2:4c:99:f8:0b:a8:df:15:94:f5:36:1b:44:f3:
         88:27:59:1f:9f:17:7f:65:29:8f:7f:fc:32:fe:54:05:c7:4f:
         f9:7c:dd:f2:d6:80:21:c8:f6:74:bb:c7:f6:be:ee:d1:08:eb:
         72:e3:ee:89:78:b6:e5:cd:32:c9:92:ec:49:13:51:0e:55:4e:
         ca:b4:36:b7:4f:d6:95:b5:0b:42:b1:ea:1a:81:c9:f9:77:5f:
         83:a8:86:e3:61:d0:e6:6b:28:5d:69:37:78:ea:5b:a8:71:e8:
         83:6e:c2:e4:8e:ec:23:1f:22:e7:5b:0a:76:51:74:48:28:cb:
         a2:53:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----