Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.mft
File:                     01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.mft (raw, json)
Hash identifier:          qtyalAQEYVzDnSYMzG/U1hmdqF/w2spFXPnst5ieX+M=
Subject key identifier:   C5:16:4F:CD:CF:F5:D9:42:B4:A2:5C:39:9E:42:99:6E:1B:A6:83:F6
Authority key identifier: 01:BD:4E:A8:43:E5:5A:F6:E6:D6:45:D7:4C:22:21:FB:6B:12:1C:CE
Certificate issuer:       /CN=01BD4EA843E55AF6E6D645D74C2221FB6B121CCE
Certificate serial:       1BD5A20BC02D7ECD11CE5972EFC2F8ECEADBA866
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.mft
Manifest number:          01EE
Signing time:             Mon 15 Apr 2024 07:39:29 +0000
Manifest this update:     Mon 15 Apr 2024 07:34:29 +0000
Manifest next update:     Tue 16 Apr 2024 11:37:29 +0000
Files and hashes:         1: 323830343a363833303a3a2f33322d3334203d3e20323639363734.roa (hash: Apbs7quOynRDq/Tg6iceCZJJrCtqaSK1k/LbyiW9pYg=)
                          2: 34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa (hash: dc8qODNTdIQcqD+gevHv00dxwXthI59XCB0xzyf+yPU=)
                          3: 01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.crl (hash: EpyMyGIqdpzSuBVuqbTeHVnyXKhStHdnhJ83/fxFBLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d5:a2:0b:c0:2d:7e:cd:11:ce:59:72:ef:c2:f8:ec:ea:db:a8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BD4EA843E55AF6E6D645D74C2221FB6B121CCE
        Validity
            Not Before: Apr 15 07:34:29 2024 GMT
            Not After : Apr 16 11:37:29 2024 GMT
        Subject: CN=C5164FCDCFF5D942B4A25C399E42996E1BA683F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:fd:b7:5f:a4:3c:42:a2:2e:b8:8e:61:9e:
                    6a:ce:4c:4b:cb:e4:b3:ca:73:80:3c:df:9f:0a:90:
                    5b:b2:a1:c5:87:70:d8:41:9c:14:9d:5c:2d:7c:fb:
                    07:55:70:d6:0b:2a:e4:41:9d:96:1d:44:e4:6d:85:
                    c3:a9:33:89:44:d5:55:87:0c:04:19:58:b3:96:34:
                    0e:f2:96:18:44:96:92:76:80:4e:4e:12:42:21:77:
                    c7:c5:fb:ac:02:57:44:58:26:a0:f8:7f:d4:38:24:
                    b6:15:52:5f:a4:40:bb:88:de:57:42:4f:b9:3a:5f:
                    ec:7c:7d:da:f2:08:ae:f2:25:e7:f4:6d:cb:7a:25:
                    8e:3f:b1:d7:13:c8:66:fc:ca:18:6f:0a:03:74:ba:
                    ef:65:7d:24:4d:ec:f2:ff:63:49:2d:7a:eb:b5:5a:
                    8e:32:c4:e8:47:ce:20:8f:cb:4a:68:96:56:c9:bf:
                    c7:9a:80:74:29:9d:48:53:f6:6a:e9:25:d6:c2:80:
                    f4:3a:cd:38:1d:df:b5:6b:79:55:40:db:05:ba:b7:
                    7c:74:e9:2b:d6:e8:89:02:c7:66:e3:c0:6e:c0:13:
                    c1:f0:48:19:08:43:17:ba:a0:85:00:7e:80:6a:75:
                    04:7e:ed:bb:9e:a4:c4:18:b4:e1:92:b2:be:1a:11:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:4F:CD:CF:F5:D9:42:B4:A2:5C:39:9E:42:99:6E:1B:A6:83:F6
            X509v3 Authority Key Identifier:
                keyid:01:BD:4E:A8:43:E5:5A:F6:E6:D6:45:D7:4C:22:21:FB:6B:12:1C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ef:57:c2:9c:1c:97:0f:dd:a4:74:97:20:bf:8b:43:10:16:
         8c:ab:c2:24:40:2a:fe:a6:2c:ce:20:86:b4:b6:b7:e3:a2:c9:
         e3:23:ae:bb:81:fe:8b:f8:61:b5:f3:65:4e:98:05:71:80:7d:
         00:4b:16:60:20:36:c9:48:d1:d5:17:08:5c:a0:aa:b9:c8:16:
         7e:54:68:9a:0a:a0:63:5b:fd:2f:a6:fd:47:d9:15:8c:40:01:
         09:cb:35:73:a0:4c:1d:b7:81:49:68:84:89:d5:bb:56:02:e6:
         d3:6a:f0:ba:91:04:90:7a:e1:e4:94:7e:bb:5e:93:87:21:47:
         5a:e9:0e:c2:e9:ff:4a:e3:aa:3c:a2:24:4c:d1:99:4a:c3:b5:
         df:c6:87:a5:95:60:b6:e3:83:78:bf:c8:f0:80:c0:b0:02:fa:
         ea:2a:52:65:56:6d:88:b9:be:6f:3e:9a:b2:c6:32:5f:49:c9:
         1f:b0:f4:fb:7d:10:1c:67:08:e3:94:00:27:d0:52:03:16:45:
         a4:1b:52:4b:eb:5f:a2:6c:f6:c9:8e:24:c2:51:79:fb:af:b0:
         b6:66:5f:1d:82:84:09:72:e7:8f:d6:b8:55:e2:7d:23:e0:eb:
         cd:c5:0a:cf:df:2b:2c:35:15:4f:b6:09:85:3d:cf:3e:ac:7f:
         dd:ad:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----