Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.mft
File:                     2B824C0913CF71BF98C43B15F88AD1598E1E47DE.mft (raw, json)
Hash identifier:          RCf9Lhn5/3s3cF233uWN779k/xGuq9TX1yQV1K2QzCc=
Subject key identifier:   E7:9B:B9:85:B0:78:C0:05:68:6F:2A:CB:20:20:59:5B:92:15:8C:AF
Authority key identifier: 2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE
Certificate issuer:       /CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
Certificate serial:       1B12F106388E0ECFABCB6E2E8478AC7CD45B4EDF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.mft
Manifest number:          0364
Signing time:             Mon 15 Apr 2024 05:59:14 +0000
Manifest this update:     Mon 15 Apr 2024 05:54:14 +0000
Manifest next update:     Tue 16 Apr 2024 08:30:14 +0000
Files and hashes:         1: 323830343a343466633a3a2f33322d3438203d3e20323637363635.roa (hash: fz77uuJNWb+MNtdfaBBKpjsEhEw9/npr3bH9pY/Nl90=)
                          2: 2B824C0913CF71BF98C43B15F88AD1598E1E47DE.crl (hash: yHvbxeBSFt18rVE2LNoV7OZXqHIUnYpgAkXvZigPabQ=)
                          3: 34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa (hash: Z2ZUundO+wruAkiWam08+6dB6IsWzR+eXfoCAFg7Wa4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:12:f1:06:38:8e:0e:cf:ab:cb:6e:2e:84:78:ac:7c:d4:5b:4e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
        Validity
            Not Before: Apr 15 05:54:14 2024 GMT
            Not After : Apr 16 08:30:14 2024 GMT
        Subject: CN=E79BB985B078C005686F2ACB2020595B92158CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:c9:11:9a:6a:a6:5c:a6:0d:03:0e:22:8d:
                    5f:c1:d9:98:0e:bd:2a:db:7f:34:df:c5:26:e4:51:
                    7d:ee:db:8a:3e:5d:ba:4d:f1:c2:51:8d:6e:57:e1:
                    a7:6c:db:4f:fd:81:3b:3e:28:7c:51:60:37:41:77:
                    c0:34:0f:4b:7d:a8:55:28:c7:83:06:b9:49:70:a3:
                    65:92:a9:29:d5:7e:ce:d3:a3:b5:16:43:89:83:a9:
                    cf:24:15:a5:e7:a2:36:16:34:0f:4f:c5:81:6b:aa:
                    2c:8f:26:ae:5d:f8:a4:f2:37:e4:64:fd:5f:a8:9f:
                    d1:ea:ac:e7:56:37:10:39:2a:17:15:97:c4:06:cc:
                    fc:7e:c1:66:06:c1:9c:0b:08:10:e2:bb:8b:c7:60:
                    94:23:0c:da:08:61:24:37:be:65:f9:ae:db:74:36:
                    59:ab:bf:b9:eb:42:32:32:31:f5:ab:6f:80:2f:f8:
                    c3:6b:7b:8a:82:cd:e2:95:e2:ec:ae:32:49:ce:eb:
                    13:d8:9a:3e:b4:b4:83:f7:82:76:a6:d0:6a:3e:46:
                    51:13:e8:76:58:32:78:c8:b8:0e:e6:97:a6:95:53:
                    8a:f9:c9:5f:e4:e2:60:58:3d:e1:4a:ce:73:d5:ca:
                    00:81:ce:9e:3e:fd:80:0b:2e:4c:29:f7:92:d7:ce:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9B:B9:85:B0:78:C0:05:68:6F:2A:CB:20:20:59:5B:92:15:8C:AF
            X509v3 Authority Key Identifier:
                keyid:2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:ec:04:f4:97:bf:f8:b4:17:5d:f3:7a:5a:c8:32:d6:d4:
         2e:79:eb:71:ae:e5:51:88:47:58:0c:47:91:95:fe:81:3a:12:
         15:f2:0a:8b:f0:2a:a1:3c:6f:25:1c:79:34:5e:b7:14:a9:9a:
         28:4f:76:58:f0:46:f7:fb:34:a2:e5:44:ac:72:a7:50:0d:54:
         47:43:a2:60:13:f4:76:04:e5:4d:95:a0:be:40:20:2a:d1:50:
         19:44:6a:bd:1d:7f:77:85:19:15:82:92:6f:ed:60:f6:78:64:
         a8:e3:f3:28:72:ed:06:82:07:bf:23:c4:b9:31:32:a6:f1:9f:
         25:4d:27:be:74:eb:f0:9f:ef:c3:8d:7c:fe:82:5b:10:fd:a1:
         f0:83:0a:bc:00:a3:92:8f:3f:b6:41:cd:da:dd:3b:11:21:e1:
         ac:a0:3d:5b:7f:6c:1b:ae:6d:1d:2c:f7:e9:1f:81:5c:fa:18:
         bc:b6:c1:6a:a1:fb:db:b2:f8:64:ae:db:b1:05:47:59:14:87:
         3b:98:c7:6b:83:5c:b1:97:83:e4:f3:2c:5f:84:23:22:ea:ea:
         bb:b5:8c:9c:06:01:a2:6e:54:a9:3a:eb:7b:6c:68:5e:e8:71:
         6a:a2:72:d5:56:9d:40:59:21:05:fa:e7:7a:72:45:13:b3:cd:
         ca:2a:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----