Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.mft
File:                     2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.mft (raw, json)
Hash identifier:          wGp36OiucZ+3Q524AFQCxczB3oQutZN5BPpRe3Duboo=
Subject key identifier:   0F:0B:30:CE:25:29:18:4C:F4:DA:90:92:81:5B:08:89:51:34:D5:F8
Authority key identifier: 2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE
Certificate issuer:       /CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
Certificate serial:       0ED231CA12B5391E0CAED7135C403A0435D7CFF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.mft
Manifest number:          016F
Signing time:             Mon 15 Apr 2024 09:21:42 +0000
Manifest this update:     Mon 15 Apr 2024 09:16:42 +0000
Manifest next update:     Tue 16 Apr 2024 12:42:42 +0000
Files and hashes:         1: 2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.crl (hash: gqV+hx9nKv5Yu+KOGu1skVepeN53gUfo4PgjNfxa3EU=)
                          2: 34352e3233372e3134342e302f32322d3332203d3e203631353933.roa (hash: EJBza207XKpKgEMvInvp6suxCWcwvBrUsub0M7Mc45s=)
                          3: 323830343a346562343a3a2f33322d313238203d3e203631353933.roa (hash: 31xrCxDErwqpG42A5jGUkY+XjqeSSkcKh4uQgqyjbC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d2:31:ca:12:b5:39:1e:0c:ae:d7:13:5c:40:3a:04:35:d7:cf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
        Validity
            Not Before: Apr 15 09:16:42 2024 GMT
            Not After : Apr 16 12:42:42 2024 GMT
        Subject: CN=0F0B30CE2529184CF4DA9092815B08895134D5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:c1:22:a5:50:8e:38:04:30:21:99:a5:be:
                    6c:4a:7f:35:83:24:11:f3:3f:3c:32:80:32:5e:02:
                    27:45:d5:95:76:e0:a3:6c:6d:04:01:b7:31:7b:7c:
                    dd:d7:05:cf:40:97:1d:69:1b:b7:77:d4:ca:4b:3e:
                    7d:61:78:57:d8:20:3a:9b:dd:e0:94:85:40:f8:91:
                    d2:8a:24:12:e3:95:7e:bf:24:49:10:75:81:98:f1:
                    df:2a:e9:06:ee:4d:76:d0:c0:93:e7:6a:19:9c:75:
                    d4:a1:3a:90:e3:8c:10:1d:97:5d:d5:d2:b5:4a:bc:
                    28:91:8a:d3:6c:86:fe:50:58:e3:99:8d:b0:46:0e:
                    49:70:a3:7d:74:1b:1f:30:78:92:98:d2:24:fc:6e:
                    07:84:43:35:24:68:cd:89:a1:2b:9f:cf:b8:00:79:
                    2f:f4:a5:f2:4e:02:2f:6e:3f:2e:a9:79:3c:23:3f:
                    f1:4b:e6:1a:5b:d7:e9:d2:ff:7b:7c:36:3d:90:77:
                    76:3e:d6:9d:26:a3:81:36:ef:70:87:3b:12:2a:eb:
                    df:93:25:56:f5:bb:12:b1:36:5c:ce:3a:b9:77:aa:
                    b8:49:cf:49:c3:db:68:30:ad:60:04:9a:20:8e:f4:
                    9a:26:7b:e1:8b:37:43:69:c5:08:e1:6e:59:54:50:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0B:30:CE:25:29:18:4C:F4:DA:90:92:81:5B:08:89:51:34:D5:F8
            X509v3 Authority Key Identifier:
                keyid:2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:76:c6:5c:57:30:40:47:7b:fd:72:7c:aa:41:04:c7:40:5c:
         b0:ab:00:18:e5:eb:7a:aa:2a:f2:2c:97:5a:13:48:eb:b9:49:
         e4:8b:4b:6f:9a:4d:4c:59:68:7b:0a:c3:5c:17:34:7a:82:94:
         31:79:56:fc:d6:e6:6a:3f:bf:a1:5e:43:cc:ad:d6:74:2c:fe:
         a4:89:72:70:14:90:44:42:75:dd:99:72:19:8c:bd:9b:7e:c6:
         cd:46:c6:86:50:aa:da:d2:87:0a:1f:55:a5:7f:fd:2e:62:d1:
         0a:4b:c5:05:8a:53:4c:b9:b4:c1:d7:8e:fd:e0:83:eb:24:e9:
         6d:45:06:93:16:37:d0:ff:13:35:11:b7:82:aa:2a:8d:e8:73:
         a7:cb:f2:bb:36:4c:28:fc:e4:db:cd:e4:46:65:e3:57:f3:e9:
         73:f5:b7:11:3e:85:85:ab:37:1b:82:b2:66:6e:f7:48:b6:e0:
         26:a8:ca:64:d6:6b:e1:11:02:a1:06:bd:39:11:bf:90:d5:e1:
         61:0a:7a:96:55:ac:ff:af:f0:04:27:2e:fb:c1:fd:2e:35:a6:
         f7:95:54:82:87:cf:1a:d7:06:61:bd:0e:b0:5d:30:37:23:e5:
         a6:96:8d:fd:d0:a9:38:ad:ad:ab:6e:a6:ee:d6:97:a5:23:78:
         0e:e4:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----