Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.mft
File:                     728041EE59CE20A182864537B9A0E2502263D7BD.mft (raw, json)
Hash identifier:          N4i7PkLA/rtpJ+2D7dpJul/USBMiQ7bZazce2AKpN5Y=
Subject key identifier:   D1:56:84:07:BF:37:D4:CD:E7:F3:07:51:7B:0D:FA:8F:92:F5:24:09
Authority key identifier: 72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD
Certificate issuer:       /CN=728041EE59CE20A182864537B9A0E2502263D7BD
Certificate serial:       1F2A8CEABAC3AF1D141A80DFD818A7AFA19A3178
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.mft
Manifest number:          0E
Signing time:             Wed 17 Apr 2024 08:14:07 +0000
Manifest this update:     Wed 17 Apr 2024 08:09:07 +0000
Manifest next update:     Thu 18 Apr 2024 11:20:07 +0000
Files and hashes:         1: 728041EE59CE20A182864537B9A0E2502263D7BD.crl (hash: mJQmqXDCmIq9VBjNIdJJ9Elqi7BScLoUsQiX0/YDGBA=)
                          2: 323830343a366466383a3a2f33322d3438203d3e20323730353637.roa (hash: OImAPg/DFbKst9kL7rcvOKcmBMi21uja93QFvgyRzqA=)
                          3: 3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (hash: rAFuGESiI7V5IULvAY1yoWjUVK6P3mjSF7q/IHF9ORo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2a:8c:ea:ba:c3:af:1d:14:1a:80:df:d8:18:a7:af:a1:9a:31:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728041EE59CE20A182864537B9A0E2502263D7BD
        Validity
            Not Before: Apr 17 08:09:07 2024 GMT
            Not After : Apr 18 11:20:07 2024 GMT
        Subject: CN=D1568407BF37D4CDE7F307517B0DFA8F92F52409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:10:f9:1b:cf:eb:72:d1:6e:77:d0:f7:95:
                    ae:6e:b7:0a:29:f4:bd:57:fc:8d:5d:f1:31:76:85:
                    f1:e7:c9:b1:09:b6:c9:90:4d:e4:51:5a:e0:56:e6:
                    37:ab:2f:37:a4:fb:e2:a8:6b:a6:ad:9e:6f:74:c7:
                    56:6a:c8:c2:18:12:e5:f1:24:ea:2a:bf:cf:1a:23:
                    0f:60:39:25:a4:dc:4b:e3:30:38:0c:20:f1:a7:a6:
                    ad:5c:f1:52:33:a1:42:16:cd:f5:42:91:92:59:10:
                    e8:1d:b1:7d:c7:40:6b:d2:f7:a8:17:e8:2f:fb:5d:
                    6d:11:64:59:9a:e3:58:0c:a4:c0:95:6d:20:75:1e:
                    ac:c2:c3:39:22:36:56:89:82:56:4f:de:3b:18:31:
                    3b:38:19:ea:d5:43:ea:37:a2:a5:30:c2:8f:a5:0e:
                    ca:cb:a4:2e:82:0c:39:b6:29:bd:cb:cf:a7:e0:0c:
                    43:46:55:a8:0d:02:a4:16:e5:9e:bc:ab:1f:af:b2:
                    22:8c:e5:a3:31:2d:a1:f2:84:50:2b:0f:0f:25:d2:
                    5d:94:07:a8:03:ec:9f:14:cb:a5:a9:0c:02:55:b6:
                    3f:38:e8:ab:5c:3f:a9:d1:f0:7f:35:e1:8b:23:40:
                    9d:69:79:28:bd:2e:c6:ad:77:f4:00:19:61:80:87:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:84:07:BF:37:D4:CD:E7:F3:07:51:7B:0D:FA:8F:92:F5:24:09
            X509v3 Authority Key Identifier:
                keyid:72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f9:3d:66:43:24:4b:d4:0c:ef:66:c7:42:f4:c8:b1:37:87:
         ad:31:99:f4:3f:ed:ea:06:9c:eb:b6:8e:47:ac:9d:42:0f:dc:
         e2:c2:95:d9:71:6a:f2:c9:cd:b4:dc:f8:b0:b4:a4:03:74:c4:
         59:ad:98:64:8e:4a:a8:b2:b3:31:6c:eb:34:73:3e:a5:30:ad:
         be:53:64:3e:d3:7c:07:06:2b:fb:2c:57:dd:7e:5c:b8:37:de:
         8a:63:27:c7:d9:6b:74:dc:7a:91:e0:da:40:fc:d3:49:9a:4c:
         c2:34:81:0a:e0:4d:f6:2a:84:78:8a:b0:48:51:c8:00:b6:38:
         82:98:21:de:32:f3:57:9e:49:77:b0:04:13:cd:95:7b:af:dd:
         36:23:21:03:83:b2:94:1b:1b:27:0d:c3:7d:fa:db:82:e3:f0:
         50:d8:e0:78:af:55:57:12:d9:b3:78:c5:5e:7d:3f:43:26:bd:
         e7:36:c7:86:e5:89:a3:4c:54:42:f4:0c:74:27:e8:b6:de:8c:
         80:a5:23:7d:0d:4b:ae:2f:af:a7:29:95:bf:18:cc:9c:1d:c1:
         ff:62:1f:4c:10:b2:2f:cf:31:f8:1b:81:17:08:1c:d8:ef:36:
         e1:7f:72:f4:fc:19:ba:00:f8:35:99:e1:7d:0b:5a:c9:36:1b:
         62:d4:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----