Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.mft
File:                     5DCDD32616E8881974B74F53AFF3DA15BED5AE69.mft (raw, json)
Hash identifier:          A8sQiNVnLznJ52s7ni4uMV+SwJznP5L/XT8l0j3MPrA=
Subject key identifier:   74:E6:78:70:4D:04:2D:B1:D3:5C:89:C0:18:5C:3C:E1:90:EC:6A:CC
Authority key identifier: 5D:CD:D3:26:16:E8:88:19:74:B7:4F:53:AF:F3:DA:15:BE:D5:AE:69
Certificate issuer:       /CN=5DCDD32616E8881974B74F53AFF3DA15BED5AE69
Certificate serial:       714056D8E3C2AAD20761A126F0E7A850F140AACC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.mft
Manifest number:          01CC
Signing time:             Mon 15 Apr 2024 01:31:59 +0000
Manifest this update:     Mon 15 Apr 2024 01:26:59 +0000
Manifest next update:     Tue 16 Apr 2024 05:01:59 +0000
Files and hashes:         1: 5DCDD32616E8881974B74F53AFF3DA15BED5AE69.crl (hash: zuNQ8VfXDgRfPDe2Ydx0jSMPrRExNJdo8LJN4tIXGO8=)
                          2: 323830343a6164633a3a2f33322d3335203d3e203532393237.roa (hash: c01P70lO7siI3wvuDlNVBEKObVVTmNa9RmC0wvfTI+M=)
                          3: 3137372e3138352e33322e302f32312d3234203d3e203532393237.roa (hash: c/I5MVvu7htn+HsWl4rVwlah4algrsHI8Tx25Eyto2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:56:d8:e3:c2:aa:d2:07:61:a1:26:f0:e7:a8:50:f1:40:aa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DCDD32616E8881974B74F53AFF3DA15BED5AE69
        Validity
            Not Before: Apr 15 01:26:59 2024 GMT
            Not After : Apr 16 05:01:59 2024 GMT
        Subject: CN=74E678704D042DB1D35C89C0185C3CE190EC6ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:ee:02:93:05:52:fe:88:e5:34:49:c5:97:
                    f5:65:0b:f6:82:0a:1a:a5:fb:79:a7:e5:a0:41:3d:
                    de:5d:3a:c1:67:11:0c:cf:e4:8c:bf:39:c2:65:c3:
                    43:b2:47:26:32:31:3a:b3:5c:cd:9f:69:c0:96:81:
                    38:7b:19:61:98:8f:b0:ca:68:a9:de:7e:14:2a:84:
                    82:10:2e:2c:6c:a1:81:f8:31:e0:18:4e:4a:4a:8e:
                    02:3c:61:f9:55:d0:ac:10:ab:10:65:29:f0:a9:53:
                    77:e9:cd:a7:3e:54:d9:fa:14:38:72:31:68:91:5e:
                    b5:78:63:5d:7c:81:21:52:f4:ab:4e:60:bf:e4:bf:
                    47:60:d1:61:f9:90:95:2b:99:f9:e7:27:f4:a2:1a:
                    6b:4a:f4:0f:25:a8:2a:71:7a:4c:80:cc:e8:fa:ed:
                    73:e5:fd:ce:f7:1e:10:79:89:a4:de:9b:b9:b0:72:
                    55:6a:03:d1:dd:23:12:d1:65:f3:bd:65:e8:13:2d:
                    50:d2:0e:2e:b2:70:d7:60:48:9e:d4:f5:28:1d:f5:
                    44:a0:63:26:ad:e6:8b:21:20:7b:ba:df:32:59:c0:
                    b0:38:81:80:74:f5:63:f1:b6:17:80:ea:61:2f:08:
                    70:ab:8e:fa:ea:e9:28:8e:b7:dc:4e:4b:2e:30:c1:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E6:78:70:4D:04:2D:B1:D3:5C:89:C0:18:5C:3C:E1:90:EC:6A:CC
            X509v3 Authority Key Identifier:
                keyid:5D:CD:D3:26:16:E8:88:19:74:B7:4F:53:AF:F3:DA:15:BE:D5:AE:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/2/5DCDD32616E8881974B74F53AFF3DA15BED5AE69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:cd:b9:25:16:52:24:27:fa:a1:bf:e3:51:0a:11:ad:5d:14:
         9f:ee:86:92:fd:58:7a:fb:40:8e:b2:34:29:de:7e:fe:84:ff:
         2f:83:4b:92:22:4c:ec:61:6d:f9:8c:15:03:b6:cd:84:78:58:
         3d:44:fe:71:e2:c6:03:a8:67:3d:bf:fa:f0:e0:6a:d1:51:d8:
         3d:d4:ef:dd:76:45:6a:4a:6e:85:77:8d:95:d8:eb:bb:1e:5b:
         0e:0a:01:05:91:d6:f3:a2:23:2d:78:86:e1:99:90:58:52:6e:
         a6:c7:2c:26:70:24:36:e7:52:13:0a:02:db:6f:d7:b8:9f:f8:
         d8:21:e5:e8:92:66:40:69:a3:38:77:5b:b5:87:2a:ca:72:82:
         db:ac:03:58:66:64:9e:bf:6b:96:89:aa:25:50:ec:02:b5:59:
         0c:54:c3:27:a7:9b:f1:61:82:26:61:d5:6c:c9:ab:57:83:7c:
         fd:6f:d8:65:19:8d:7a:da:e6:8f:fc:20:61:37:59:cc:49:98:
         69:6e:a4:2f:4c:96:6e:c8:00:8c:4e:b2:af:7f:b3:1d:31:2c:
         9a:9f:f6:b0:be:91:01:e2:24:00:a7:f2:c1:18:ed:f7:19:7c:
         04:20:af:2c:e2:53:8d:b0:3e:5f:78:1a:0d:40:eb:b0:43:88:
         dc:32:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----