Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.mft
File:                     975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.mft (raw, json)
Hash identifier:          B8rAWPNh46k+WKtVJ0jyLfdkeAmH8lN5cgMPGZWDHZk=
Subject key identifier:   3A:96:B9:A4:5A:CA:35:E9:9C:B1:53:27:B7:2D:F8:0B:A9:CC:95:FF
Authority key identifier: 97:5C:B8:DB:1C:E9:5D:0A:37:5C:7E:8D:E0:7D:0D:78:35:BB:B5:4D
Certificate issuer:       /CN=975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D
Certificate serial:       2BA51D914885C768522D1C541623C8ACCFC3D0B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.mft
Manifest number:          28
Signing time:             Mon 15 Apr 2024 11:08:44 +0000
Manifest this update:     Mon 15 Apr 2024 11:03:44 +0000
Manifest next update:     Tue 16 Apr 2024 13:30:44 +0000
Files and hashes:         1: 34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa (hash: X26XZMY4eYWNzAy3cvm09LwCS03P6EgmY+dRtEMM2Xs=)
                          2: 975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.crl (hash: P2Xzfuhrp1NmagBvicjO3ulkGi7ZitS4qgEr5vSu8Jw=)
                          3: 323830343a363461303a3a2f33322d313238203d3e20323639343339.roa (hash: KBi9JD63GGBN5oUlxh6dMIYzws/l4sQy+aKNbiD3vbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a5:1d:91:48:85:c7:68:52:2d:1c:54:16:23:c8:ac:cf:c3:d0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D
        Validity
            Not Before: Apr 15 11:03:44 2024 GMT
            Not After : Apr 16 13:30:44 2024 GMT
        Subject: CN=3A96B9A45ACA35E99CB15327B72DF80BA9CC95FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cf:e2:57:72:ee:78:11:18:3a:b2:af:f0:cc:
                    d7:ff:db:f1:06:8d:42:31:bc:3b:43:13:61:f5:62:
                    69:a4:4a:11:39:70:82:9c:0b:6c:6c:28:2a:43:94:
                    f9:26:eb:5d:88:89:45:df:f7:6c:fc:90:b9:b0:93:
                    28:77:36:a8:7f:89:ef:52:8b:cf:80:0b:f6:e7:03:
                    ec:d7:77:4b:ba:2f:13:af:32:8e:8d:33:c6:a7:96:
                    51:7a:26:17:e4:05:dd:83:78:28:26:46:07:3e:a8:
                    5d:2d:35:53:cc:9d:58:3b:5d:c3:71:f3:0c:a4:60:
                    ff:fe:28:33:1a:6b:dd:11:30:65:1e:c6:60:33:3e:
                    63:af:3b:aa:3c:7a:d2:48:89:f5:05:98:4d:09:8c:
                    29:01:6e:bf:73:2e:09:ad:c5:e3:4a:3f:e8:cc:43:
                    8f:50:bd:e7:05:5e:c4:10:0e:d1:aa:c3:74:28:c0:
                    28:e5:1d:70:81:fa:dc:79:fc:ac:ca:01:1d:75:3b:
                    6d:e6:67:3d:19:39:e9:c0:e0:df:db:58:d4:4f:1a:
                    6d:ce:0e:4e:a7:78:6f:98:46:78:1a:65:f4:01:09:
                    c5:e9:3b:cf:8b:2b:1c:db:8b:17:80:d0:bf:af:d6:
                    1a:0d:db:60:8c:48:13:9e:59:ec:b7:aa:45:32:15:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:B9:A4:5A:CA:35:E9:9C:B1:53:27:B7:2D:F8:0B:A9:CC:95:FF
            X509v3 Authority Key Identifier:
                keyid:97:5C:B8:DB:1C:E9:5D:0A:37:5C:7E:8D:E0:7D:0D:78:35:BB:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:70:69:d8:60:c9:c9:ea:55:45:83:f1:27:6a:3f:c2:b3:30:
         9e:69:23:66:5c:3b:a5:bd:80:a2:8c:6d:3e:77:f1:02:f1:dc:
         7f:e5:de:f9:f4:98:29:ae:a3:97:5f:70:c1:fd:6b:cb:d9:bd:
         a0:39:96:d4:97:35:2f:e6:99:7b:5a:1b:d6:71:2e:9b:79:d9:
         bf:9e:21:79:e4:98:d3:1f:d9:0a:8a:5e:d5:23:81:6d:75:cf:
         4f:6a:ac:7d:7e:23:fb:a2:92:a1:d5:99:cc:81:de:d7:8b:14:
         34:18:4e:56:c7:d1:a1:55:b4:d7:58:c5:3f:ca:2b:c1:4f:c2:
         f9:b4:34:0d:e9:71:6e:ec:89:c0:90:f7:1c:a8:a8:22:6b:06:
         f5:55:c1:4c:b6:be:fb:ad:8d:da:1f:a6:86:5d:a7:27:58:06:
         d1:e1:98:d2:38:85:38:10:60:59:19:d5:39:75:19:03:68:45:
         48:ef:b3:c5:dd:41:fe:8d:55:d1:f8:16:93:ee:1a:3a:9e:5d:
         9a:91:2d:3f:cb:8c:66:bb:73:2e:39:51:84:1e:a3:23:0b:17:
         10:db:06:86:2d:a2:24:e8:fa:bd:7f:93:8e:2f:d1:3f:ae:1f:
         cd:75:a9:e8:c3:87:c7:c7:a5:f3:5a:ec:ce:8d:bd:4e:19:80:
         ae:30:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----