Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.mft
File:                     38E224203D0037111BF68F317AA5B79FAB3EFB77.mft (raw, json)
Hash identifier:          uzanZPTNOR9gh1rykNz8pEI5GtDk66VrCQpO8Xun/nw=
Subject key identifier:   BD:75:A0:B2:5B:8D:78:AA:09:72:59:45:EC:ED:59:D1:58:1F:B5:51
Authority key identifier: 38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Certificate issuer:       /CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Certificate serial:       5B206A3A219C5E57787121BCEF49D46AF833871C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.mft
Manifest number:          0260
Signing time:             Mon 15 Apr 2024 07:56:36 +0000
Manifest this update:     Mon 15 Apr 2024 07:51:36 +0000
Manifest next update:     Tue 16 Apr 2024 11:36:36 +0000
Files and hashes:         1: 3137302e37392e32382e302f32322d3234203d3e20323633353636.roa (hash: eW1P2MRpiBiw/Kt53AtGGui9rCCQm2hN4lR4TVPbcCI=)
                          2: 38E224203D0037111BF68F317AA5B79FAB3EFB77.crl (hash: IBk8dJctRtlyqzLgPqXb5zzZyq2Azb2Ze5HT8aPyZfA=)
                          3: 323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (hash: OfBZ7UUD/7SDXF/GTM1TaB6USoeDAvVChlwXLbJn5Qk=)
                          4: 3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (hash: hVPMPT3rLci3Eo5VcOIwxFrCMUhAvmWkw2c/ttHER6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:6a:3a:21:9c:5e:57:78:71:21:bc:ef:49:d4:6a:f8:33:87:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
        Validity
            Not Before: Apr 15 07:51:36 2024 GMT
            Not After : Apr 16 11:36:36 2024 GMT
        Subject: CN=BD75A0B25B8D78AA09725945ECED59D1581FB551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:ca:3e:c2:9c:af:06:e8:b3:69:5a:32:e4:
                    01:bf:20:d7:63:7c:a2:95:6e:5e:06:e4:ae:56:12:
                    29:c7:a2:a8:f5:e9:2f:2b:f2:16:fb:a9:fb:5b:e0:
                    52:0f:aa:81:ec:53:a8:4d:5a:af:18:45:2d:ec:4e:
                    0b:78:3e:dd:67:9d:15:81:a1:0f:7a:bf:cd:e8:b9:
                    8e:50:9d:b2:b8:aa:2f:24:9b:f9:fb:15:4b:41:eb:
                    52:23:e8:6a:4a:4a:8a:c0:5a:e8:66:00:fb:20:46:
                    2e:62:75:4c:2e:55:42:d3:5e:d4:53:f1:00:7e:9b:
                    d7:9e:c2:bb:94:50:8e:2d:9e:09:7e:a6:21:98:ad:
                    76:4b:6c:88:dd:34:f9:a7:66:77:bf:b7:33:2c:a3:
                    76:43:7a:3d:00:cf:85:eb:7c:50:c0:d0:46:24:8b:
                    15:82:57:98:27:cc:e1:d3:a2:cd:15:fb:34:a7:60:
                    ce:18:3d:d5:a8:59:e2:7a:af:ce:e3:99:2c:22:9a:
                    10:a8:12:30:a7:fa:cd:54:d8:1b:b1:a7:52:3c:71:
                    88:9b:46:f3:33:e3:9e:2b:2a:2e:d0:c8:3d:d0:d4:
                    f2:dd:c7:77:1d:22:e0:e5:c9:aa:6b:ee:45:25:a9:
                    78:5a:58:16:dd:c7:f5:df:b2:31:65:f8:a6:0f:07:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:75:A0:B2:5B:8D:78:AA:09:72:59:45:EC:ED:59:D1:58:1F:B5:51
            X509v3 Authority Key Identifier:
                keyid:38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:29:cc:a4:0f:52:c7:ca:fe:45:e4:cd:3a:98:0f:ad:ac:81:
         77:92:c2:37:c9:79:4f:08:2a:83:fc:48:4f:5e:0a:ff:a1:cb:
         5f:94:88:8c:b1:91:ad:78:cb:d5:9e:8d:2b:0e:3c:19:9c:82:
         78:f8:45:77:3f:b0:6b:7d:05:1c:62:e3:a0:e0:c5:4c:42:38:
         ba:ba:59:f7:f7:74:2f:73:bf:e1:b2:29:f0:6a:b4:8e:2f:a0:
         cb:e4:1d:43:25:2c:a4:0c:1a:6a:68:3a:16:24:14:c2:41:00:
         9d:ef:c7:2f:ad:11:45:15:47:7a:e8:58:2c:09:0d:a2:5c:a8:
         a9:f6:3c:20:ff:44:4c:2e:d4:62:01:a1:d9:94:2e:8c:65:0b:
         45:d7:7a:ad:de:b2:77:6e:e7:dd:c0:cd:35:6d:96:fb:d5:22:
         5b:da:da:cf:8f:9b:c8:28:7d:d7:d3:9f:97:7d:76:74:fb:be:
         46:f7:82:4c:34:48:a3:26:e1:b8:0f:75:18:be:ec:85:00:df:
         26:79:97:30:8f:df:d0:db:cb:08:e2:be:05:86:6c:73:bc:3b:
         12:92:1d:a1:5a:4d:ef:5e:6f:63:a2:af:fe:56:e4:10:fa:81:
         db:e6:e7:07:b2:b9:4a:49:95:ab:bd:32:11:e0:af:75:fd:92:
         82:ae:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----