Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/D794301FD5220B9F7109CD5E234483D682B15130.mft
File:                     D794301FD5220B9F7109CD5E234483D682B15130.mft (raw, json)
Hash identifier:          KXy7+5FueAosGnRHD3IjgJCWt8wvyW+iySnX96NBDBM=
Subject key identifier:   3E:A7:05:55:91:E7:BF:DE:C4:00:79:0F:C3:CE:AF:2F:92:E8:3D:C0
Authority key identifier: D7:94:30:1F:D5:22:0B:9F:71:09:CD:5E:23:44:83:D6:82:B1:51:30
Certificate issuer:       /CN=D794301FD5220B9F7109CD5E234483D682B15130
Certificate serial:       257F1D853310AE440565D98539F96C966F661A42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D794301FD5220B9F7109CD5E234483D682B15130.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/D794301FD5220B9F7109CD5E234483D682B15130.mft
Manifest number:          0412
Signing time:             Mon 15 Apr 2024 09:00:00 +0000
Manifest this update:     Mon 15 Apr 2024 08:55:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:20:00 +0000
Files and hashes:         1: 323830343a343564303a3a2f33322d3438203d3e20323636393531.roa (hash: c24GmvZkWWzsLdMvR9zTV/HYJCvq3HbyGAGreolO6sY=)
                          2: D794301FD5220B9F7109CD5E234483D682B15130.crl (hash: srt6scdjIT4cAp4XXyRlpOqiEK6lCLUuqtE7ufXHvA4=)
                          3: 34352e3232352e3137362e302f32322d3234203d3e20323636393531.roa (hash: nG/vkn3WsmNAJ3shcewtr8PadfcKg4Gb5jQWrtMReHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7f:1d:85:33:10:ae:44:05:65:d9:85:39:f9:6c:96:6f:66:1a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D794301FD5220B9F7109CD5E234483D682B15130
        Validity
            Not Before: Apr 15 08:55:00 2024 GMT
            Not After : Apr 16 10:20:00 2024 GMT
        Subject: CN=3EA7055591E7BFDEC400790FC3CEAF2F92E83DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:05:6e:ac:15:f1:2e:35:64:d2:9f:58:fc:
                    a9:14:da:ec:cc:28:c5:0a:28:77:ab:43:36:56:22:
                    40:98:e3:b8:7d:ae:ed:7f:a9:6b:3f:cb:c1:84:1e:
                    4c:a6:38:af:64:88:69:34:e4:62:a9:41:eb:63:4b:
                    9f:72:4f:05:e7:3b:ae:58:6e:79:97:22:91:d4:ba:
                    44:8f:66:71:d9:da:6f:84:95:22:a2:88:54:2f:63:
                    34:f2:f6:6f:aa:00:37:9a:47:92:51:b8:5c:42:54:
                    11:95:78:b6:50:9b:fc:3f:1a:da:01:2f:fc:f5:e4:
                    e5:d8:68:cd:d7:d4:f7:a9:ba:e5:6e:13:9d:5b:4f:
                    5c:2f:a0:1e:9c:ac:ba:11:7d:2c:af:46:c6:2c:02:
                    01:99:0c:a0:22:7e:54:4e:3d:8c:b4:57:ab:eb:f3:
                    7e:cb:1a:cd:ac:c0:79:ae:09:5c:79:77:af:81:6f:
                    7d:6f:3f:2e:8e:23:8d:09:54:7a:bd:ca:9f:0a:39:
                    0b:3c:59:06:a1:24:5e:b1:e4:11:99:b0:36:b7:5f:
                    71:9f:65:a9:1e:b3:09:ac:42:a3:1b:54:13:59:cb:
                    90:41:da:0c:42:bf:ee:fd:99:1c:86:72:37:28:01:
                    30:bd:2b:39:e7:32:fa:a3:68:71:96:3d:47:1f:8f:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A7:05:55:91:E7:BF:DE:C4:00:79:0F:C3:CE:AF:2F:92:E8:3D:C0
            X509v3 Authority Key Identifier:
                keyid:D7:94:30:1F:D5:22:0B:9F:71:09:CD:5E:23:44:83:D6:82:B1:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/D794301FD5220B9F7109CD5E234483D682B15130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D794301FD5220B9F7109CD5E234483D682B15130.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iPhQDddxKVEccwGkKj46UVHuzDTaoQXFBbPxYuzpJKK/0/D794301FD5220B9F7109CD5E234483D682B15130.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:02:fa:c6:73:b7:9c:3f:f9:c6:b1:70:dc:32:79:2a:96:
         28:0d:a4:c7:a6:e3:52:d2:ae:8f:44:e6:11:39:3f:46:14:e5:
         fe:13:94:a3:f9:82:ed:08:46:84:2c:ed:e5:25:19:99:47:d4:
         4e:23:65:4a:4d:6b:f2:3e:21:50:78:0d:1b:e2:4e:9e:fc:11:
         56:e2:e0:2b:92:8d:fe:36:98:ab:b8:88:e9:0f:1a:c8:79:b6:
         59:c2:f8:11:ad:78:6e:2e:c3:6e:4a:98:74:e2:8f:da:cf:76:
         5b:b0:71:6a:1f:d8:95:c1:c0:04:50:24:fd:8b:9d:11:01:17:
         97:76:49:7d:c0:93:07:47:14:af:52:1f:89:eb:fa:38:8d:2e:
         0b:86:26:68:cb:fb:ef:28:45:2b:94:76:58:05:44:56:49:41:
         fc:64:b9:bd:1d:fc:51:45:4c:8e:b9:7a:f6:cf:c8:c3:b4:16:
         c3:6e:0b:af:8f:1a:19:05:9c:e8:00:4b:2d:b7:f5:11:06:4b:
         1b:41:3b:c7:d0:7f:c8:34:ea:13:e6:1a:ac:96:25:23:bd:70:
         91:aa:84:dc:df:10:64:37:c0:a2:41:be:aa:54:e6:1a:29:e1:
         f6:16:20:1a:00:09:08:ff:56:eb:79:d1:5f:ad:88:d8:74:03:
         29:43:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----