Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.mft
File:                     14B962ABE21D40B706A7569A8F9E3D36A760B30A.mft (raw, json)
Hash identifier:          6ykf1S8K285zJRFRCg3mlJEaolaJpMCIpRRiEl1KS4Q=
Subject key identifier:   2E:2A:D4:43:44:F4:96:10:B8:D8:1A:90:9F:66:D4:68:E1:D8:D8:5B
Authority key identifier: 14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A
Certificate issuer:       /CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
Certificate serial:       1AA5DFE9A561135B9115DA2477C5A37D92E078F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.mft
Manifest number:          AA
Signing time:             Tue 19 Nov 2024 12:13:50 +0000
Manifest this update:     Tue 19 Nov 2024 12:08:50 +0000
Manifest next update:     Wed 20 Nov 2024 13:37:50 +0000
Files and hashes:         1: 3133312e3232312e37322e302f32322d3234203d3e203532353636.roa (hash: uTkz6TfnIDRzR1dPHYOgVegb6pObqCdYRqdv+IBzBGg=)
                          2: 323830343a316530303a3a2f33322d3438203d3e203532353636.roa (hash: Vf6PqJ97mxPnotgeVZTQuFOA82Vl+QqkDjXj+1I/eeU=)
                          3: 3134332e3230322e3137362e302f32322d3234203d3e203532353636.roa (hash: eYNiG9AREcwwMQqjNjrfpZH1vqSv6Gcgv0JWHVGGwBQ=)
                          4: 14B962ABE21D40B706A7569A8F9E3D36A760B30A.crl (hash: Tonkv3T/Mr28bv531a3chgvLJzoMgh+xS2J3KvD4AEg=)
                          5: 3137372e38362e32342e302f32322d3234203d3e203532353636.roa (hash: +QzcAWBRq560J3vcndcHncSA+G6ahPUnxl0Psgz/Ywk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a5:df:e9:a5:61:13:5b:91:15:da:24:77:c5:a3:7d:92:e0:78:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
        Validity
            Not Before: Nov 19 12:08:50 2024 GMT
            Not After : Nov 20 13:37:50 2024 GMT
        Subject: CN=2E2AD44344F49610B8D81A909F66D468E1D8D85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9b:70:61:7f:b3:ea:24:b6:3a:96:fa:29:d4:
                    9a:ae:4c:f0:3a:23:ee:61:34:85:cc:d4:2f:0b:1d:
                    d0:3f:08:07:24:35:af:26:97:17:52:f0:b5:ef:16:
                    cb:91:6f:73:8f:f2:08:17:c2:4c:81:2f:9e:33:d5:
                    04:76:51:24:ab:1f:40:8b:61:30:17:c1:04:4b:cd:
                    46:fa:19:27:2e:b6:2c:d1:3e:6e:2d:8b:c8:76:d7:
                    ac:87:e5:78:ba:17:73:66:f9:ad:99:06:88:0d:35:
                    54:9b:50:91:9a:f1:31:de:f9:a5:c7:c1:45:f6:44:
                    a0:47:cc:75:5e:7d:18:c2:30:85:ae:5c:72:00:54:
                    fa:6e:96:8a:50:64:2d:0f:c0:ee:21:84:c4:ee:25:
                    51:1e:5a:84:94:b7:e4:f7:3b:94:19:b1:ea:7c:4f:
                    92:df:39:fe:0f:58:80:68:0e:86:c0:a5:a7:45:1c:
                    3b:a7:41:bd:d5:fc:66:11:bd:f4:e6:0f:5e:fa:f9:
                    0c:18:98:c0:26:18:e9:1b:b0:2a:73:80:24:b3:48:
                    b0:09:9a:9a:9c:1e:d2:46:cf:c9:5d:56:23:36:ac:
                    e6:63:e6:a2:8d:2a:63:a1:e3:1f:ce:d6:b1:8b:c7:
                    92:5d:48:b4:c7:60:94:73:03:db:3b:fc:2c:97:05:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2A:D4:43:44:F4:96:10:B8:D8:1A:90:9F:66:D4:68:E1:D8:D8:5B
            X509v3 Authority Key Identifier:
                keyid:14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:25:e9:07:94:34:91:e2:8b:01:46:09:c3:ae:32:63:79:91:
         7a:ec:38:7c:a7:1a:2e:04:c4:53:5b:aa:ee:4f:67:b5:9b:cc:
         8d:9a:29:80:97:57:09:fa:fd:ec:94:e7:7c:1d:78:11:a6:7f:
         6b:0f:7d:d7:6c:d5:4e:0e:d2:0c:0f:2c:ea:70:46:e7:b4:ca:
         16:ae:03:93:35:f9:2e:40:ea:4e:ec:fe:0d:e6:35:4a:b1:31:
         75:8d:df:4f:fa:91:4a:61:6e:31:ae:26:93:fe:9f:c8:69:ef:
         fc:6f:5c:e0:e6:09:87:8f:7a:ec:97:bd:7e:cf:16:62:72:b2:
         f6:57:ff:f4:c4:c9:63:a9:37:c7:cf:c5:ab:95:c5:f2:bf:d6:
         be:69:f2:f8:54:9d:aa:5f:e8:5a:70:1f:e5:f0:1c:40:46:49:
         f2:5c:cc:35:df:4f:11:7b:eb:b9:4d:6d:b8:66:91:c3:9b:db:
         36:ee:01:6a:a7:ec:64:95:8f:b0:f0:45:31:f9:1c:56:ee:4f:
         27:c1:6a:a0:23:53:35:5e:34:a7:e3:78:c5:3e:90:d6:3b:26:
         ec:7b:7d:97:5e:b6:8f:68:03:ea:81:7d:38:77:4f:43:f1:f2:
         45:f9:88:b0:17:aa:44:6b:76:a2:8b:88:08:32:a0:cb:8b:1d:
         71:57:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----