Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.mft
File:                     383B2C6B85855E4779ED18240ADF1496B0DEC78F.mft (raw, json)
Hash identifier:          0prmDQ7ZSGs3UKP6VOb63EjHEnFRueHpLWO9YV2ZB1g=
Subject key identifier:   AC:90:8C:5A:CC:63:09:3C:2A:B8:DF:AC:10:0E:5A:24:AC:88:3F:B0
Authority key identifier: 38:3B:2C:6B:85:85:5E:47:79:ED:18:24:0A:DF:14:96:B0:DE:C7:8F
Certificate issuer:       /CN=383B2C6B85855E4779ED18240ADF1496B0DEC78F
Certificate serial:       154645B5E8C5EC04AE292541707A2DFD7E181109
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.mft
Manifest number:          011E
Signing time:             Sun 14 Apr 2024 18:20:44 +0000
Manifest this update:     Sun 14 Apr 2024 18:15:44 +0000
Manifest next update:     Mon 15 Apr 2024 20:31:44 +0000
Files and hashes:         1: 3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (hash: DOlEYQ+3Opm1nyXjbXBSgW4YWOkBotQJHgtVGkM/Jbs=)
                          2: 323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (hash: q68IX68LB3lirupJyXkENGONHxKr7YQN9Lj/sK0q3dE=)
                          3: 383B2C6B85855E4779ED18240ADF1496B0DEC78F.crl (hash: IT8PkcjuoYW1XK2YPhn2/4xwMU2TWvrRG/n+f6eNvVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:46:45:b5:e8:c5:ec:04:ae:29:25:41:70:7a:2d:fd:7e:18:11:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=383B2C6B85855E4779ED18240ADF1496B0DEC78F
        Validity
            Not Before: Apr 14 18:15:44 2024 GMT
            Not After : Apr 15 20:31:44 2024 GMT
        Subject: CN=AC908C5ACC63093C2AB8DFAC100E5A24AC883FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:46:20:18:ba:98:44:a4:ea:7d:84:b9:50:
                    d7:60:a0:a4:9f:5d:eb:9b:2a:2d:ab:a1:e3:2f:b9:
                    b8:24:9a:2a:61:69:04:23:85:b0:15:10:0e:3b:51:
                    5e:e2:cf:02:a4:08:e8:7f:0c:09:11:c2:20:cf:de:
                    b9:b6:63:ea:54:03:1f:90:82:b4:0e:f0:2c:6e:41:
                    d1:46:87:7c:09:87:e3:1b:73:a4:96:45:d9:6d:00:
                    11:6d:a1:a0:86:ab:11:8b:45:ff:30:01:98:ce:5b:
                    45:cc:8c:7f:bc:e9:d7:5a:ac:b8:8a:52:22:93:32:
                    bb:77:2a:b7:e2:c7:0e:46:84:a7:46:dc:cd:21:23:
                    c4:55:67:79:1a:e5:e4:02:64:fc:43:d8:06:ce:1f:
                    eb:4a:e6:02:b9:b3:73:7d:0e:c4:17:f2:54:57:75:
                    50:27:37:69:78:14:31:96:07:f7:82:59:31:8e:76:
                    a2:38:b6:09:58:3e:d7:c2:86:60:79:67:80:b1:f2:
                    4f:32:07:c7:76:1e:93:52:ca:6f:5e:b0:3a:84:e1:
                    d7:98:64:52:1e:ee:8c:21:b1:b2:21:8a:2b:38:88:
                    09:06:cd:5f:81:c1:d1:8a:da:bb:ab:2a:ac:e6:13:
                    b8:fb:ec:f6:ce:a3:e0:0f:05:13:97:e9:6e:93:c1:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:8C:5A:CC:63:09:3C:2A:B8:DF:AC:10:0E:5A:24:AC:88:3F:B0
            X509v3 Authority Key Identifier:
                keyid:38:3B:2C:6B:85:85:5E:47:79:ED:18:24:0A:DF:14:96:B0:DE:C7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:63:19:fb:ac:f6:8e:a1:46:ef:12:64:2f:18:1a:69:2f:0e:
         87:41:a9:a0:4d:e1:1f:b9:25:85:ad:45:fb:5c:0a:5e:af:15:
         11:a0:28:52:c0:f0:26:4e:3b:60:bc:6f:87:6d:47:ed:1e:e1:
         a4:c4:7c:77:4b:6c:83:b6:c9:3e:3c:a7:12:9e:64:a7:4b:7c:
         81:e1:d6:57:82:0c:ff:9e:ef:d2:cd:b0:69:9a:f4:36:0e:ea:
         98:c9:15:04:08:e6:9f:8a:de:82:80:e8:81:5a:94:90:a3:aa:
         a2:b7:a8:91:63:0f:3c:08:46:d1:6c:dc:0c:d8:3a:38:c5:28:
         87:40:96:22:f5:84:52:cc:5f:95:c6:52:e6:a3:30:75:a6:30:
         5f:36:99:fa:62:fe:4a:30:4b:f1:cd:70:c7:c3:ac:9b:29:8a:
         55:7d:5e:0f:4a:4f:62:91:ec:0b:f5:74:78:77:d3:1f:f1:b7:
         42:ce:6d:1b:ab:0f:f2:2a:26:8a:d6:dd:59:8d:77:b8:8c:2a:
         9d:93:cf:37:aa:45:12:7e:b3:c9:a9:d0:cd:51:15:05:b9:09:
         5e:58:bf:6b:ac:07:4a:66:ec:b6:6b:8d:21:ef:b9:33:60:5b:
         2b:e7:8c:b6:01:7c:22:73:71:a1:23:da:81:b0:fe:50:49:96:
         cd:76:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----