Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.mft
File:                     3E5507FF839B31FBD17EEC9088B45AE80EC19683.mft (raw, json)
Hash identifier:          szjVxplhLTQWDxThaleVry1lAzckCiFMkL5QDoiNfWE=
Subject key identifier:   85:2A:A6:13:41:91:34:F2:B6:F9:31:F6:EF:5D:0A:ED:48:7A:F0:B8
Authority key identifier: 3E:55:07:FF:83:9B:31:FB:D1:7E:EC:90:88:B4:5A:E8:0E:C1:96:83
Certificate issuer:       /CN=3E5507FF839B31FBD17EEC9088B45AE80EC19683
Certificate serial:       776E32803C366505FF2543CCB1E4EFBB44F3E4D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.mft
Manifest number:          0163
Signing time:             Mon 15 Apr 2024 11:09:51 +0000
Manifest this update:     Mon 15 Apr 2024 11:04:51 +0000
Manifest next update:     Tue 16 Apr 2024 11:31:51 +0000
Files and hashes:         1: 3137372e35332e3137362e302f32322d3234203d3e20323632343735.roa (hash: YToZPvn4JR45O9dRqO/iC+8rYM18gthNApvyd4z1lZs=)
                          2: 3E5507FF839B31FBD17EEC9088B45AE80EC19683.crl (hash: rQhHBYXsgEUvYun4Yr5jBWFia6AB5WssBRWZHKVpusg=)
                          3: 323830343a3465303a3a2f33322d3438203d3e20323632343735.roa (hash: r7XMr+xR2UzhdU9JWu6fjrh6828eUw5qa/hp8fgsewk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6e:32:80:3c:36:65:05:ff:25:43:cc:b1:e4:ef:bb:44:f3:e4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E5507FF839B31FBD17EEC9088B45AE80EC19683
        Validity
            Not Before: Apr 15 11:04:51 2024 GMT
            Not After : Apr 16 11:31:51 2024 GMT
        Subject: CN=852AA613419134F2B6F931F6EF5D0AED487AF0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:77:3c:5f:d7:df:47:98:a1:fd:40:0e:75:
                    c4:6b:79:18:dd:a7:13:02:6d:a0:08:ac:5d:69:51:
                    45:b2:a4:87:13:a0:ff:e9:82:4c:2b:8a:de:b8:b9:
                    73:c9:7a:aa:ab:20:e0:1d:f5:ba:f9:e1:cd:8b:20:
                    fc:a6:6e:d6:ef:26:b2:13:8b:7e:a2:b9:4e:bd:e9:
                    27:1c:f0:54:9b:1d:c6:a0:5d:03:78:7e:95:5f:d9:
                    01:94:14:b4:f8:fa:da:86:2c:82:3f:26:c8:f6:6b:
                    1a:39:10:27:0b:5a:a5:52:c9:ab:ba:25:81:92:79:
                    58:8b:42:82:ac:dc:e0:ba:27:3f:ac:19:af:4c:7f:
                    d6:ca:f3:3b:ef:b0:2f:38:d1:a3:56:df:85:ef:b8:
                    e8:60:49:15:97:f1:e2:d0:ef:2a:f0:8d:6e:18:f4:
                    60:e5:09:18:df:27:f9:ee:00:79:b4:1a:ea:19:84:
                    cf:e5:7e:32:a8:25:68:74:e1:89:f0:15:4b:b1:99:
                    d4:c7:57:54:5f:73:0c:52:0d:c6:97:f2:9d:70:9a:
                    17:d5:99:95:28:c5:fc:e8:ce:83:fa:11:5a:f2:a9:
                    56:77:cc:9a:d8:9e:16:75:18:80:64:17:9c:19:dd:
                    97:be:9e:58:14:15:31:c0:59:8c:cb:95:22:6d:2d:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:A6:13:41:91:34:F2:B6:F9:31:F6:EF:5D:0A:ED:48:7A:F0:B8
            X509v3 Authority Key Identifier:
                keyid:3E:55:07:FF:83:9B:31:FB:D1:7E:EC:90:88:B4:5A:E8:0E:C1:96:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:02:37:00:18:33:37:90:18:63:88:12:d5:f3:5d:3f:a8:e2:
         67:96:9c:6f:42:56:ca:71:f3:3b:ee:3f:eb:06:96:cf:d3:8b:
         2f:e9:6e:f1:4f:a3:c0:93:49:46:41:bb:81:07:2f:a7:15:66:
         eb:ce:01:05:bf:18:42:34:09:37:45:e6:12:f2:40:a8:31:11:
         a9:d0:1b:55:21:bc:98:b4:00:b9:dd:09:90:b4:c8:4c:e8:ea:
         ba:ee:3c:8f:95:cd:69:1a:15:3a:4e:49:a5:74:aa:2d:7d:32:
         36:90:7a:da:88:de:a0:26:c1:7a:20:ac:b1:a2:f2:66:bf:99:
         53:16:1d:11:ec:e1:02:0a:87:1b:98:d2:4d:fa:a8:be:a4:b1:
         36:62:86:eb:50:2f:ef:01:ab:8c:e1:3f:70:89:a8:4f:e0:4b:
         da:9b:eb:f7:df:91:37:2d:3f:db:63:a1:e3:f8:61:ef:c3:c7:
         cf:ce:0f:4f:5b:8b:25:04:33:b9:80:1f:e5:83:0c:b8:2f:14:
         50:83:12:e1:89:53:f0:71:8b:c7:c7:ce:47:54:cd:09:8d:b4:
         2f:45:a6:0d:7d:8e:d4:9a:8c:76:2a:6e:7b:5f:75:ce:1c:3f:
         d3:24:b4:74:e6:c6:64:a0:a3:7c:6b:2c:75:59:02:14:09:83:
         25:e2:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----