Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/0/C041719AB703D3BD64A4BE44C7F5CB8681A7C627.mft
File:                     C041719AB703D3BD64A4BE44C7F5CB8681A7C627.mft (raw, json)
Hash identifier:          jFdjkYiGSWSGSuNv9/cclOFMBO72c4GXxItJaUN3szM=
Subject key identifier:   CE:72:F3:EF:1A:22:7B:AD:7E:5A:31:D6:52:C2:99:59:B2:C5:1B:1B
Authority key identifier: C0:41:71:9A:B7:03:D3:BD:64:A4:BE:44:C7:F5:CB:86:81:A7:C6:27
Certificate issuer:       /CN=C041719AB703D3BD64A4BE44C7F5CB8681A7C627
Certificate serial:       4BF7644C19E0EB195CE71D83B0455E0D7434FC2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C041719AB703D3BD64A4BE44C7F5CB8681A7C627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/0/C041719AB703D3BD64A4BE44C7F5CB8681A7C627.mft
Manifest number:          031E
Signing time:             Sun 14 Apr 2024 22:35:39 +0000
Manifest this update:     Sun 14 Apr 2024 22:30:39 +0000
Manifest next update:     Mon 15 Apr 2024 23:28:39 +0000
Files and hashes:         1: 3134332e3133372e33362e302f32322d3232203d3e20323730393439.roa (hash: m06GbNr0vHtJzyymrstMOT3upT0IOtJUUyJOj7qivws=)
                          2: C041719AB703D3BD64A4BE44C7F5CB8681A7C627.crl (hash: GY9VdhPqntxpJ4KVNS+cWF8v6Zk1hicA7JB+D195nXk=)
                          3: 323830343a373366383a3a2f33322d3332203d3e20323730393439.roa (hash: Izsq9Tz+ijRuMxzjbT4fxGz1YrkiZkMN0f8wSHNTbZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f7:64:4c:19:e0:eb:19:5c:e7:1d:83:b0:45:5e:0d:74:34:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C041719AB703D3BD64A4BE44C7F5CB8681A7C627
        Validity
            Not Before: Apr 14 22:30:39 2024 GMT
            Not After : Apr 15 23:28:39 2024 GMT
        Subject: CN=CE72F3EF1A227BAD7E5A31D652C29959B2C51B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fc:d8:1a:91:2c:eb:e7:64:05:84:8e:7f:ce:
                    e7:6e:7e:a8:59:d5:ae:e3:57:67:19:50:5a:c4:fd:
                    aa:d3:16:7c:f6:27:dc:8a:05:72:d0:c9:d4:14:33:
                    b8:74:36:43:83:76:49:82:f1:d6:2e:c5:92:09:75:
                    df:31:5e:d4:9c:0b:cc:35:1c:1d:8b:32:1e:9a:74:
                    ee:4a:0f:83:08:2c:2d:0b:8f:3c:e8:f2:84:0b:0e:
                    8f:3d:9c:ed:41:18:26:70:c9:30:e9:05:c7:5f:31:
                    be:a9:fa:7c:2d:67:ce:13:c3:6a:a3:56:a0:3f:ff:
                    ef:27:be:43:cf:96:2f:93:a1:8a:3c:df:eb:95:7a:
                    da:b7:bf:b1:96:53:da:3c:34:08:70:5f:75:5b:2d:
                    52:08:67:06:e2:f8:6f:f6:a1:59:58:56:5c:50:a5:
                    32:10:25:12:ea:65:ff:ff:8a:dc:5d:00:19:49:b2:
                    06:c9:aa:56:db:b4:ff:9d:9d:86:8e:c5:d0:be:cb:
                    a1:b8:9d:cf:e8:b2:c7:16:47:83:e2:26:60:d0:d3:
                    46:db:46:55:10:6c:ea:37:57:9d:2f:f9:7c:3f:05:
                    d4:aa:5b:bf:fc:9b:13:06:3f:98:ab:94:33:ea:0e:
                    9a:67:28:4b:6c:52:07:f2:de:a9:72:66:0b:19:c8:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:72:F3:EF:1A:22:7B:AD:7E:5A:31:D6:52:C2:99:59:B2:C5:1B:1B
            X509v3 Authority Key Identifier:
                keyid:C0:41:71:9A:B7:03:D3:BD:64:A4:BE:44:C7:F5:CB:86:81:A7:C6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/0/C041719AB703D3BD64A4BE44C7F5CB8681A7C627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C041719AB703D3BD64A4BE44C7F5CB8681A7C627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8nFYjkuiaGhcp3h6Y1LFQrfeSgtQWt8GsdJXEyK74Ku/0/C041719AB703D3BD64A4BE44C7F5CB8681A7C627.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:55:16:85:ee:a0:41:c7:07:99:b4:29:a7:0c:a9:9f:a1:7b:
         7e:10:fa:fc:2f:c0:c9:74:b6:4d:40:6e:0e:d7:5c:66:cf:c8:
         bd:b2:4b:4c:ba:cd:8e:86:54:76:7e:e6:a4:70:f0:5b:ba:ad:
         12:77:14:b6:74:85:ee:de:10:50:42:50:6e:a8:ea:15:25:d0:
         c1:72:e7:9f:db:42:e9:68:ee:f2:26:64:a4:4c:f7:c0:f0:9e:
         cc:73:04:25:24:07:53:48:5c:dc:7d:aa:ce:f8:14:54:80:b3:
         96:cf:0c:c5:03:16:5c:98:54:02:ad:9c:f0:e2:af:e6:f8:a9:
         52:11:a0:5a:5f:e1:d0:e8:08:bc:f9:17:76:80:e1:b7:cb:79:
         e6:3a:3d:a2:80:14:3f:ed:f5:96:b7:50:2b:5d:bc:75:c8:ab:
         c8:5e:62:01:0f:85:08:da:a2:a7:1e:87:3b:98:b5:ee:f2:b7:
         c1:2b:36:76:01:36:6c:e3:b2:05:2c:4f:23:b2:fe:36:4c:a3:
         0b:5f:f9:a7:96:c3:4f:63:ac:ff:1e:04:11:77:77:d9:5e:13:
         e2:5e:38:ef:03:c5:9f:6f:f2:90:14:0b:3c:a9:9c:dd:a0:2f:
         25:f0:ba:3d:87:fa:90:9d:1e:42:68:f9:39:ab:28:e3:ce:61:
         8b:fa:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----