Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.mft
File:                     B2CAB3CEB03852E164D470A52A06D0DFA0494C86.mft (raw, json)
Hash identifier:          A2k6KdTZy6buB1UJWp8nUBbMTtaRMih8XNHEPBtaOQE=
Subject key identifier:   9C:F3:F2:CF:D1:D5:1F:B9:A8:03:44:9E:26:09:51:71:24:A6:DF:32
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Certificate issuer:       /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial:       50B087FDC89E1F9B7FF0A5D55791107356D8B092
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.mft
Manifest number:          020F
Signing time:             Sun 14 Apr 2024 23:16:12 +0000
Manifest this update:     Sun 14 Apr 2024 23:11:12 +0000
Manifest next update:     Mon 15 Apr 2024 23:50:12 +0000
Files and hashes:         1: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: Rg+m6oHb/u5x0j410AC52RVhYp+c92TMTeB5OmYW194=)
                          2: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: 0PY823GRacLBn4Ij6QxRwHbWKZ3t8cRfds01ZwrMpLU=)
                          3: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: PI4tiYQjhdRtvamM0cIvntF7oFvMwhQTQE2EMhf7tLI=)
                          4: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: 4i45Gi7riafWyo4g7yUtbXLRnl7NPGvGlm2QILacFjE=)
                          5: B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl (hash: wjQyxRPYxEKVdaSsWLaY3Q39yFe/Jp2DIevsoxRCoqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b0:87:fd:c8:9e:1f:9b:7f:f0:a5:d5:57:91:10:73:56:d8:b0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
        Validity
            Not Before: Apr 14 23:11:12 2024 GMT
            Not After : Apr 15 23:50:12 2024 GMT
        Subject: CN=9CF3F2CFD1D51FB9A803449E2609517124A6DF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:fb:59:22:28:d1:9e:97:67:63:8f:17:30:
                    2f:1b:df:32:0d:c8:66:1f:0e:e6:56:a8:c4:38:4f:
                    54:0d:b4:07:ac:8e:3a:f9:d9:c7:91:08:da:23:5d:
                    f3:e7:7e:ad:df:c0:f6:fb:4d:d1:68:25:09:b1:c9:
                    a2:b3:73:69:99:52:41:b4:e9:f1:95:dd:cd:54:aa:
                    13:5c:07:b3:f3:b9:91:e3:60:a6:9d:2d:3e:83:a2:
                    56:6a:31:cc:97:93:4a:8d:6b:92:da:9c:32:56:fc:
                    fe:d3:76:4f:8a:d9:17:fb:49:aa:f4:bd:d1:49:a9:
                    9e:e5:59:ef:23:91:32:9d:ca:31:d8:a1:5b:e6:49:
                    13:fa:ed:5f:bf:4c:c3:63:bf:67:90:40:2e:82:c8:
                    0f:3a:4f:ca:5a:c1:a1:98:6a:24:f8:0f:dc:75:37:
                    41:09:53:47:6d:62:5d:a2:e8:90:c2:0d:ef:ef:5f:
                    89:4d:f4:f9:79:7f:f8:d9:04:e7:21:bb:b0:88:d4:
                    6b:11:ec:40:22:c6:3f:5e:3b:d7:31:ef:4e:28:23:
                    9f:2d:c4:20:52:72:71:13:bd:9c:0d:f8:3c:5a:c5:
                    a9:96:cd:18:7b:20:e1:57:cb:b7:4e:d1:e5:f2:50:
                    2b:6a:72:a1:90:a7:4b:47:52:eb:07:fc:54:7a:fa:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F3:F2:CF:D1:D5:1F:B9:A8:03:44:9E:26:09:51:71:24:A6:DF:32
            X509v3 Authority Key Identifier:
                keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:58:00:43:05:9c:b7:95:78:d2:16:0c:cc:f6:0d:3c:0d:
         22:59:e6:ec:9b:2d:28:48:22:81:07:c6:a5:a5:a3:4c:b5:1f:
         35:93:25:dc:8e:7b:1f:04:d6:88:8f:ce:0e:2f:90:0d:c2:c1:
         a0:a5:0a:11:71:cb:45:6b:14:f5:6c:84:d2:87:b9:31:03:e6:
         93:96:de:ee:5b:83:0f:35:d5:b9:2f:d2:3f:b5:47:b5:e3:be:
         c1:71:65:f8:70:91:5c:8b:e0:ba:81:3a:ba:63:ff:f2:c4:6b:
         8e:76:83:5c:ff:c7:da:2b:86:e2:2e:4c:58:d5:5c:94:02:91:
         be:ea:dd:09:cf:38:c1:70:af:f6:9c:e6:44:52:31:53:5b:cc:
         f7:aa:3a:07:90:26:0c:76:9a:a7:0b:fb:31:a2:b6:bd:2b:c2:
         4e:c8:8d:a6:0e:12:89:1d:ee:2b:0e:6b:5f:44:23:a2:54:f3:
         3b:e4:fb:dd:fd:04:ad:a0:01:30:83:04:06:d0:52:0f:e0:f2:
         0c:37:78:05:c3:69:d4:2e:0a:6f:48:9a:82:f1:96:e0:a8:ee:
         42:6d:f9:2f:01:6b:f1:e0:11:6b:61:b4:bf:b7:1a:8d:e5:d8:
         ef:36:2a:36:4c:66:c6:64:58:d0:62:30:6c:6d:25:38:3c:07:
         5b:8a:cc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----