Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.mft
File:                     34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.mft (raw, json)
Hash identifier:          CGYa+n88KCgFPEQMJN/FWjagcMV2MXP1aesB4molwc0=
Subject key identifier:   1B:E5:97:CA:53:35:42:09:8A:B6:1D:68:AD:6B:5B:99:74:71:35:5B
Authority key identifier: 34:78:12:68:AC:D3:16:DE:26:79:A9:F8:A0:0E:8B:7B:F1:CE:AF:1C
Certificate issuer:       /CN=34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C
Certificate serial:       6323879B5E802C576B5F988D4A42B3141592F2F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.mft
Manifest number:          B2
Signing time:             Mon 15 Apr 2024 08:29:27 +0000
Manifest this update:     Mon 15 Apr 2024 08:24:27 +0000
Manifest next update:     Tue 16 Apr 2024 09:28:27 +0000
Files and hashes:         1: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (hash: iNIwOC9ml02eZelB6hmXVArnFtp2EEkdONJdGRfjmKY=)
                          2: 34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.crl (hash: RMU28GZVh72xXkvsm1wRayPmRZ66mgaZUKO9SLmS5O4=)
                          3: 323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (hash: embsHFHNy6oQT4U8t6yfKebKtauaBBuiniPjr+yx1u0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:23:87:9b:5e:80:2c:57:6b:5f:98:8d:4a:42:b3:14:15:92:f2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C
        Validity
            Not Before: Apr 15 08:24:27 2024 GMT
            Not After : Apr 16 09:28:27 2024 GMT
        Subject: CN=1BE597CA533542098AB61D68AD6B5B997471355B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:6b:f5:93:0a:7a:e6:75:b0:46:90:62:b6:
                    28:42:ae:12:85:57:97:9a:74:4e:c6:a8:b1:7b:81:
                    0b:6d:d2:24:18:fd:f5:fc:ac:79:89:74:c1:ef:87:
                    a2:5b:a6:5b:79:4f:69:af:2d:bb:15:8b:ac:40:e4:
                    51:62:54:48:9e:39:be:fd:79:3d:3e:a5:63:9a:2f:
                    a8:e1:d5:88:63:7f:5d:63:e6:c6:6f:6d:51:45:0c:
                    3d:d2:09:00:ab:ee:1e:51:d0:bc:f5:1c:7a:f6:70:
                    7a:8b:f2:90:af:c3:6c:19:2a:dd:f2:d9:a6:1d:4d:
                    56:60:53:ed:3f:57:41:88:2b:b3:a0:67:9d:10:d5:
                    eb:ee:9a:67:a3:8c:27:a5:57:d8:b0:64:8d:65:a9:
                    d3:9c:5a:f7:86:f5:37:75:a0:34:b2:25:68:aa:42:
                    39:2b:54:cf:cb:c1:06:24:48:dd:52:50:c8:22:09:
                    d5:e5:e6:9d:f3:34:19:9d:94:85:d0:3f:65:fb:3f:
                    57:3a:bd:f3:79:52:ef:19:7e:98:ec:3a:6b:6c:bb:
                    56:3b:2c:36:88:2a:43:75:14:97:b3:72:a5:dd:b3:
                    63:5e:55:8e:ac:ad:31:48:e9:77:16:47:e3:d7:a7:
                    1e:ee:23:52:7a:3c:df:72:e1:c5:3b:d5:0e:d3:b7:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:97:CA:53:35:42:09:8A:B6:1D:68:AD:6B:5B:99:74:71:35:5B
            X509v3 Authority Key Identifier:
                keyid:34:78:12:68:AC:D3:16:DE:26:79:A9:F8:A0:0E:8B:7B:F1:CE:AF:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:0a:ae:01:83:17:db:1d:19:0d:2a:96:64:e1:d3:d2:8b:
         18:1f:03:d0:fa:d0:97:f9:82:33:0f:a8:96:ae:99:48:42:c1:
         2f:13:21:78:d1:33:fc:7f:d3:36:d3:2e:f3:2c:e2:d1:a8:06:
         ea:3c:e6:32:77:91:cf:f9:67:f5:eb:ef:31:d1:ec:e3:2e:fc:
         9e:4d:62:a5:9a:6c:1d:98:8b:96:21:81:83:0d:e1:80:8b:8a:
         62:d3:81:d1:64:0e:75:95:a8:62:7d:d5:21:37:12:c5:d4:23:
         87:cb:be:71:ac:35:18:65:b6:c9:d5:e6:9a:d8:c3:cd:f0:fb:
         d5:9a:a7:6e:9e:6e:9c:ef:41:8c:20:88:14:62:0c:d3:53:91:
         4f:5a:50:5d:a9:d7:0e:82:04:70:7f:f1:32:fa:f5:cc:4a:56:
         c9:03:fa:01:e2:b5:70:5a:92:15:4b:3e:5f:b4:4b:25:c5:5a:
         9f:1a:c0:2f:e0:c1:fc:de:69:d3:d2:48:70:90:b7:43:e5:74:
         04:4b:41:99:30:4c:48:fc:5c:75:e5:8b:e8:2f:7d:a3:d7:94:
         67:12:b7:44:44:2f:e7:e5:fd:e0:af:51:9b:b7:09:4d:35:46:
         92:16:3b:3f:fe:58:88:78:31:06:b1:13:f7:44:d9:dd:98:89:
         17:85:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----