Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.mft
File:                     4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.mft (raw, json)
Hash identifier:          XmVvffZIlLG4u1iMc2HXay6xzqoLU7fUmr193ZYGZBM=
Subject key identifier:   8A:DA:0A:D0:72:A1:CB:CA:02:70:34:C8:13:3A:23:65:DB:4A:DD:E1
Authority key identifier: 4A:51:1A:D9:50:FA:F9:BF:EC:65:E0:0E:E8:08:6C:A5:B7:DE:F1:32
Certificate issuer:       /CN=4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132
Certificate serial:       3FDF4B80A90C385BA24558B3CC8CB76E0F86A78D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.mft
Manifest number:          10
Signing time:             Sun 14 Apr 2024 21:07:34 +0000
Manifest this update:     Sun 14 Apr 2024 21:02:34 +0000
Manifest next update:     Mon 15 Apr 2024 21:54:34 +0000
Files and hashes:         1: 323830343a356439633a3a2f33322d313238203d3e20323638393832.roa (hash: e6ZnmvD6IR7Owduge9M9CSjNT57KmMkiYZySjvg5K98=)
                          2: 34352e3137372e3133322e302f32322d3332203d3e20323638393832.roa (hash: 7JQu1SuDsCDecikx+p8KTFD7YwhZAQE5gQGYo79XpDo=)
                          3: 4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.crl (hash: S3tAlWFv+dC0MPKde/YdrzzwOaBC5BqPGTBqoVq4LEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:df:4b:80:a9:0c:38:5b:a2:45:58:b3:cc:8c:b7:6e:0f:86:a7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132
        Validity
            Not Before: Apr 14 21:02:34 2024 GMT
            Not After : Apr 15 21:54:34 2024 GMT
        Subject: CN=8ADA0AD072A1CBCA027034C8133A2365DB4ADDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:f2:89:fa:b7:60:b7:83:0a:84:6c:5b:30:
                    12:30:8d:da:55:7c:8a:5a:e9:16:a8:51:32:7a:ce:
                    e0:b1:fa:86:f0:10:d2:90:48:91:e6:9d:26:4c:6b:
                    5a:43:19:dc:41:7d:00:23:ea:c1:7d:cd:15:1f:76:
                    a9:d7:aa:8c:cb:a4:f9:89:91:cb:ba:8a:8c:cb:59:
                    dc:f6:22:8a:01:04:32:46:68:7a:79:3e:6e:66:67:
                    67:d3:46:a9:3f:6e:44:ba:18:29:45:90:db:de:f8:
                    a5:e6:85:d2:fd:e4:39:ab:73:dd:11:77:35:c1:b4:
                    24:92:93:46:88:19:91:d2:e2:74:d1:de:56:88:5b:
                    83:db:da:a6:bc:e7:42:15:49:a8:cb:46:ec:e1:bb:
                    18:9e:27:77:a2:fc:f4:7b:0a:5a:f5:ef:16:63:13:
                    3f:6d:55:3b:5e:c4:9c:72:24:fd:f7:5a:30:2b:93:
                    7d:90:48:98:eb:8c:f0:62:8f:5f:61:cb:b5:94:ce:
                    a3:bd:0b:06:c9:7a:ce:a4:c6:e1:ae:44:0d:66:85:
                    d0:5f:46:ec:0e:11:bd:a6:40:8f:c7:57:d6:ed:92:
                    1d:41:17:09:79:b4:ee:04:3f:4a:9e:e3:ae:12:1c:
                    b3:a1:88:f9:f3:75:17:52:08:a1:20:ce:f3:f7:28:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:0A:D0:72:A1:CB:CA:02:70:34:C8:13:3A:23:65:DB:4A:DD:E1
            X509v3 Authority Key Identifier:
                keyid:4A:51:1A:D9:50:FA:F9:BF:EC:65:E0:0E:E8:08:6C:A5:B7:DE:F1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k3PSyxBLexrCzTbn2PSQ8dwVxPsWShouPTL9M5qjAub/1/4A511AD950FAF9BFEC65E00EE8086CA5B7DEF132.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:a7:05:b0:58:4a:d4:1f:84:52:35:f8:b8:9b:05:05:f0:
         8e:f5:5d:9e:8b:cc:23:e3:20:75:20:cb:97:2c:c9:bc:75:68:
         a2:0b:c7:9f:83:73:28:77:77:6b:71:71:8b:37:30:9f:35:61:
         3e:4c:16:18:a4:55:a8:13:02:40:1b:67:a9:c3:af:10:71:27:
         d5:24:4b:25:ce:5b:40:e2:16:bc:90:58:7d:6e:a7:3d:cb:72:
         1d:7d:d1:76:71:ac:64:a1:7b:db:a7:11:fa:c1:f0:a9:c4:3f:
         9c:20:db:a8:4a:35:24:1f:5c:85:a9:bc:c6:a8:bd:98:b6:10:
         02:09:bb:fe:2a:26:39:2c:43:94:c1:74:44:70:91:13:bb:7b:
         02:85:9b:46:9f:86:5a:86:1e:48:42:e7:7b:82:27:8e:b2:a0:
         b4:ab:aa:6a:6d:9d:0d:9e:34:44:7d:78:2c:62:c2:bd:e6:9f:
         d5:65:2a:64:6b:d7:fc:56:46:0b:81:e0:92:e8:c0:f0:e2:c3:
         fe:ca:96:e8:4f:34:df:05:aa:d2:46:bf:39:e3:e1:79:43:7f:
         53:e1:71:8d:17:b1:10:fd:b4:36:f3:6f:e7:07:67:de:3c:ab:
         92:ff:c7:ad:8d:4c:f8:5c:4a:fe:2f:12:00:2a:fa:21:95:75:
         c1:0f:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----