Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.mft
File:                     9934F4612B558BBD8DCD81B41A48C39A8E686631.mft (raw, json)
Hash identifier:          A3b/lQwRx5OHbS6ru4B/doVoQ8Cbk2qW6YBZ8HVXy+M=
Subject key identifier:   5D:18:EB:3A:55:25:C8:5E:5F:6F:28:7A:37:BB:CD:47:81:5B:C3:AC
Authority key identifier: 99:34:F4:61:2B:55:8B:BD:8D:CD:81:B4:1A:48:C3:9A:8E:68:66:31
Certificate issuer:       /CN=9934F4612B558BBD8DCD81B41A48C39A8E686631
Certificate serial:       7BCDB81C8A5A0A101E89E0D218276166C7013647
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9934F4612B558BBD8DCD81B41A48C39A8E686631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.mft
Manifest number:          04
Signing time:             Wed 17 Apr 2024 12:55:28 +0000
Manifest this update:     Wed 17 Apr 2024 12:50:28 +0000
Manifest next update:     Thu 18 Apr 2024 13:16:28 +0000
Files and hashes:         1: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: 8ebulrtmXODh8LDAb+mjfRmCBSgJETeqAG0P/T5Kwv4=)
                          2: 9934F4612B558BBD8DCD81B41A48C39A8E686631.crl (hash: nVCnhCVQeKq/ssXZO99yJvVW8/VhPivIpEa7UbRkYuc=)
                          3: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: P7KYJsh3JcaIVsUQFVsjJJN2N4eGzixYbMHIrBLjo1k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cd:b8:1c:8a:5a:0a:10:1e:89:e0:d2:18:27:61:66:c7:01:36:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9934F4612B558BBD8DCD81B41A48C39A8E686631
        Validity
            Not Before: Apr 17 12:50:28 2024 GMT
            Not After : Apr 18 13:16:28 2024 GMT
        Subject: CN=5D18EB3A5525C85E5F6F287A37BBCD47815BC3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:9a:df:f1:d3:bc:63:c6:a6:42:b2:22:e1:
                    b7:d7:34:c4:bb:e1:f0:36:fe:47:74:e2:f1:6f:76:
                    41:df:ef:55:64:de:ff:09:ee:e8:c2:36:37:a8:12:
                    83:e1:6b:8e:d4:41:1e:a2:ac:39:83:43:db:16:2c:
                    7d:1a:c8:de:5d:62:fd:a9:3b:6e:2a:91:e6:06:27:
                    e0:bb:8a:4b:90:5f:63:8b:de:a8:bd:17:65:b7:5b:
                    a6:c1:a8:a4:76:b1:4a:c0:61:da:f6:6b:3e:d0:87:
                    df:a5:9b:cd:87:30:cc:c3:5f:48:9d:7e:43:ad:65:
                    54:bd:e7:8c:be:79:b3:62:29:04:be:40:12:19:16:
                    b6:8d:b8:29:fc:ec:20:3f:ef:f6:18:a9:f0:b7:3d:
                    ea:a0:d7:75:31:fa:67:66:ff:1f:cb:df:c9:99:6a:
                    03:3c:37:84:9f:f8:65:6d:48:34:0e:1f:6d:36:aa:
                    18:40:1a:f1:8b:f9:55:40:d6:71:18:54:36:e7:bd:
                    eb:e9:5a:d5:70:c0:f3:ef:66:87:40:89:d4:8f:c6:
                    2d:e7:03:ad:fc:6a:a7:c7:d3:c8:ac:09:6e:8f:63:
                    a1:0c:9d:41:72:33:63:a4:b6:14:e1:9c:b9:ae:07:
                    92:07:39:1e:09:46:44:ef:e9:0f:0a:ab:78:d8:7f:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:EB:3A:55:25:C8:5E:5F:6F:28:7A:37:BB:CD:47:81:5B:C3:AC
            X509v3 Authority Key Identifier:
                keyid:99:34:F4:61:2B:55:8B:BD:8D:CD:81:B4:1A:48:C3:9A:8E:68:66:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9934F4612B558BBD8DCD81B41A48C39A8E686631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9934F4612B558BBD8DCD81B41A48C39A8E686631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:ca:b9:81:92:d5:97:92:62:16:a9:db:d3:90:d0:9d:4e:
         78:66:ab:a5:99:45:aa:45:e9:e2:f3:e5:ea:97:5c:55:ee:38:
         ac:cf:a2:df:37:b1:b2:a8:f8:75:af:8e:1c:45:04:95:e3:fa:
         cf:59:68:0c:dd:5e:64:41:17:45:16:db:f5:b1:c1:b4:37:86:
         7b:f0:f6:a1:2d:4f:57:8e:d0:04:20:8b:f7:79:bd:38:64:37:
         d5:ce:b6:36:05:92:79:ee:00:06:31:e6:e0:32:98:60:3f:89:
         bf:d2:68:a8:ea:00:3c:53:69:4e:a2:b9:df:6a:ce:7d:c9:13:
         b5:b6:0d:a1:3f:dd:6d:08:06:11:8d:7d:11:67:c8:fc:18:36:
         d1:72:21:ef:51:c8:68:88:93:b9:d1:79:62:1b:15:b0:9c:27:
         34:66:50:eb:58:5c:0f:7f:97:a9:69:77:17:6d:91:16:81:85:
         33:86:d0:9a:37:9c:e1:b3:c8:f9:9b:0e:db:cc:55:33:3f:6c:
         a4:58:31:33:23:94:e2:4e:1c:2a:fe:3f:ad:3e:71:5e:fd:44:
         16:df:67:5b:f6:ee:df:c4:d2:d2:33:5a:38:b9:5a:3b:29:5d:
         ae:fe:a1:a1:14:b9:a8:df:e5:28:15:5c:b8:33:7a:d6:b9:b0:
         1e:35:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----