Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft
File:                     2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft (raw, json)
Hash identifier:          KWDh/kOPYAxRKLk3ZkGUzEKjJH3g7I/jIa4veVZO0hg=
Subject key identifier:   6E:4D:8A:E5:41:38:F1:F7:EB:B3:F5:27:F6:C9:8D:B5:C0:E7:F8:4D
Authority key identifier: 2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0
Certificate issuer:       /CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
Certificate serial:       25F2E57FD1876BC0C6C35FC2E1A6610B8E64C97A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft
Manifest number:          44
Signing time:             Wed 17 Jan 2024 18:24:59 +0000
Manifest this update:     Wed 17 Jan 2024 18:19:59 +0000
Manifest next update:     Thu 18 Jan 2024 21:31:59 +0000
Files and hashes:         1: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: RNuasEMNAjvR1TGWt/i97WjM3H5LnkCDiPHcxqFEjl4=)
                          2: 2A0C4065352FA29FE69D81683D46C7FAE700B8B0.crl (hash: GE4HD0yBNoUfE4mEEJOXY7eZSr8Kj9HKok+oCynceAs=)
                          3: 323830343a323936633a3a2f33322d3332203d3e20323634303134.roa (hash: WqK3QQKMVxAcAL1M39FBEP9hOfDyZo3M3MbSJmZeWzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f2:e5:7f:d1:87:6b:c0:c6:c3:5f:c2:e1:a6:61:0b:8e:64:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
        Validity
            Not Before: Jan 17 18:19:59 2024 GMT
            Not After : Jan 18 21:31:59 2024 GMT
        Subject: CN=6E4D8AE54138F1F7EBB3F527F6C98DB5C0E7F84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:90:04:02:6a:c4:e3:e0:f3:35:87:65:12:
                    5d:a3:bb:80:ea:88:76:60:6d:1b:91:45:5f:56:73:
                    1e:a6:51:29:3a:e9:01:f9:d7:d9:e9:c5:38:eb:54:
                    78:b6:1d:4e:56:2e:49:d6:5d:12:f0:09:32:b8:55:
                    65:0b:41:e6:42:c9:16:e4:3b:f2:2d:4d:7e:64:fe:
                    da:3d:bf:41:b3:9b:00:35:cf:23:1d:84:48:97:55:
                    14:f2:a9:71:dc:00:0d:ee:a8:0f:60:9b:a4:8e:79:
                    1f:1e:43:1a:27:af:08:cb:52:ae:f8:d2:d3:36:c2:
                    68:f5:39:3e:e2:1f:5a:5e:d6:4b:8b:80:8a:3b:d1:
                    f1:52:fd:e0:0b:f4:da:f0:93:59:79:be:44:bd:3b:
                    26:c3:65:31:08:87:cb:a5:1a:f6:47:71:b7:60:c0:
                    c3:70:7a:2f:71:e5:09:a1:f6:7d:28:16:fa:89:9c:
                    42:5a:ef:4d:59:16:43:d8:67:20:fe:3e:e6:05:76:
                    74:cd:72:0b:90:bc:4c:5c:7f:bf:71:a5:a3:d8:3b:
                    e0:99:1a:0e:18:b6:36:ab:36:cf:d4:63:78:f4:31:
                    bc:c5:3b:bf:29:8b:b3:a5:c8:11:c5:54:d5:50:78:
                    95:5f:79:5d:39:0f:e0:a9:f2:a1:e2:c1:8b:c5:dd:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:8A:E5:41:38:F1:F7:EB:B3:F5:27:F6:C9:8D:B5:C0:E7:F8:4D
            X509v3 Authority Key Identifier:
                keyid:2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7b:c3:5b:87:8d:e0:1e:9c:ff:59:aa:f2:f6:c4:00:6c:08:
         47:e3:cf:50:4a:28:26:b4:b3:c1:40:6a:02:a5:19:9e:fa:a6:
         65:80:b2:87:4b:e4:83:a6:2f:03:d2:44:ed:05:a2:98:b5:6f:
         09:b2:45:c6:fe:1c:60:3e:87:80:53:e8:d1:98:7c:fc:d2:9a:
         ab:0f:8b:94:44:cc:52:e1:e3:cc:23:ea:15:42:1c:d4:77:38:
         94:60:c5:da:34:ae:a4:8b:a1:48:ae:74:0d:45:43:c1:01:a4:
         49:56:7a:91:1e:78:32:ed:65:ef:84:d3:d7:ac:ae:ec:81:ba:
         0f:3c:28:ac:c0:06:37:6b:e3:fa:dc:be:98:59:83:0a:eb:6a:
         41:71:4b:85:b6:97:9e:02:c8:ca:7c:a9:11:ae:76:57:1c:b1:
         77:77:e2:3f:17:de:db:a7:63:1f:2c:f9:93:a3:e7:1c:9c:ee:
         38:f1:03:16:e5:c0:8c:19:8c:a2:fa:a0:00:46:91:dd:46:cb:
         82:e2:dc:dd:81:ae:75:73:6e:2d:d8:f3:85:17:7d:aa:ed:52:
         94:a1:a2:55:68:de:5b:f3:2d:16:c2:3a:f5:9d:8b:97:b9:91:
         43:68:42:a5:b4:f0:85:0d:4b:3c:ed:8d:3b:1d:fe:21:ea:55:
         29:2d:0f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----