Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.mft
File:                     42CB6D3316ED3B8DC720AB876EE22A61846279E2.mft (raw, json)
Hash identifier:          N39ExMbfR9JiWHBPw+75CsR3E4DWpMzQF2qV45v2ddY=
Subject key identifier:   E0:DE:92:37:B2:4F:B9:59:CF:D2:83:37:6E:F8:43:E7:10:01:24:E7
Authority key identifier: 42:CB:6D:33:16:ED:3B:8D:C7:20:AB:87:6E:E2:2A:61:84:62:79:E2
Certificate issuer:       /CN=42CB6D3316ED3B8DC720AB876EE22A61846279E2
Certificate serial:       3F76F3A02D210C62BAC286734CBF5E4B16CFBCEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.mft
Manifest number:          0111
Signing time:             Sun 14 Apr 2024 23:41:15 +0000
Manifest this update:     Sun 14 Apr 2024 23:36:15 +0000
Manifest next update:     Tue 16 Apr 2024 02:09:15 +0000
Files and hashes:         1: 42CB6D3316ED3B8DC720AB876EE22A61846279E2.crl (hash: fIYri3RJSzlT/Igm+TzvOZVuot69bFYOO6wyTJn/vfg=)
                          2: 323830343a3436343a3a2f33322d3438203d3e20323632343331.roa (hash: +LFFeJze3wGVVajDOYe4EbQy/Q8I2msR9qp9SEkSMtU=)
                          3: 3137372e33392e3137362e302f32312d3234203d3e20323632343331.roa (hash: Bq4emYJVHjJMMjj/vAen/JF+4b6HtHHCvcKcZY+qrrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:76:f3:a0:2d:21:0c:62:ba:c2:86:73:4c:bf:5e:4b:16:cf:bc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB6D3316ED3B8DC720AB876EE22A61846279E2
        Validity
            Not Before: Apr 14 23:36:15 2024 GMT
            Not After : Apr 16 02:09:15 2024 GMT
        Subject: CN=E0DE9237B24FB959CFD283376EF843E7100124E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:1a:2c:b2:c0:e8:62:7f:f4:4c:a6:36:25:
                    69:0d:de:bb:e1:ad:1a:89:40:14:97:b9:02:10:01:
                    9d:4d:88:6e:4d:a6:75:e1:8d:77:2e:c3:2f:10:c4:
                    f7:d3:e3:42:3a:0a:c7:f7:aa:6f:42:de:c6:c4:b3:
                    11:e6:b1:2a:b0:cd:d7:6d:a1:f2:80:2a:f9:71:23:
                    26:03:c2:8c:19:fd:43:86:7a:2a:f7:20:4f:17:f3:
                    32:fd:30:fe:7e:c2:30:df:36:a1:31:dd:4d:fe:0a:
                    3c:39:73:f0:95:d1:f8:55:5d:9a:d6:1b:4c:1e:98:
                    69:3c:73:93:4e:a0:0f:3f:78:c1:5e:d1:1e:52:1d:
                    fd:cc:3f:c7:25:19:88:7f:20:3b:e2:ec:cf:c5:9f:
                    d0:c8:93:40:72:57:d8:b8:15:38:da:99:c6:68:cb:
                    7d:5a:cc:ee:cc:25:11:e2:5d:f2:ee:8e:a9:2e:4e:
                    10:51:85:9d:06:9d:a1:87:db:6d:da:cb:ed:26:a0:
                    63:b5:06:17:6d:d2:2a:40:3a:82:99:cb:8d:58:db:
                    0a:6c:ca:59:e9:bd:64:c1:90:46:3e:a0:27:73:d1:
                    af:8c:e2:51:e3:cf:81:48:41:d8:20:b2:04:82:f1:
                    da:9f:cb:50:9d:04:c0:e1:27:ff:83:b6:75:2f:e2:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:92:37:B2:4F:B9:59:CF:D2:83:37:6E:F8:43:E7:10:01:24:E7
            X509v3 Authority Key Identifier:
                keyid:42:CB:6D:33:16:ED:3B:8D:C7:20:AB:87:6E:E2:2A:61:84:62:79:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9e:fd:92:d8:eb:ec:b0:92:d3:e9:db:3d:fc:38:6c:60:87:
         63:01:dc:fb:92:3b:74:48:a3:df:de:40:58:34:79:28:85:24:
         d0:3a:91:5d:50:a8:71:a1:60:8d:a8:7a:be:a7:75:1f:c7:74:
         28:60:75:41:e8:27:75:e1:4e:d1:8b:ec:49:2f:f0:95:99:94:
         ee:5d:b6:39:7b:96:d9:0e:45:a7:be:19:2c:97:c6:a5:20:4e:
         5b:85:ee:89:6d:ae:4d:2c:a3:e2:ea:e9:38:d6:1b:7d:12:5d:
         f3:91:a7:2c:ea:9f:a9:cb:c4:29:c3:a9:34:20:20:39:ef:36:
         b3:e3:31:7e:0b:a3:de:d9:6d:1b:87:d8:81:c6:63:15:3c:c8:
         82:66:6e:34:db:a6:72:0d:2a:67:83:12:3d:93:0e:45:76:06:
         9f:8b:fa:0f:e8:55:9f:82:99:a3:1f:6f:f0:f2:0b:20:42:89:
         4a:a3:ce:99:0a:f6:78:26:4e:00:60:f0:2c:7e:75:60:f6:47:
         b3:c2:b8:5e:20:75:ba:af:9d:1c:d4:eb:7d:c3:d3:20:e6:6b:
         8c:84:91:e3:68:2f:1e:08:35:83:1f:dd:bc:f9:c9:6d:f7:be:
         f2:01:2f:1c:6d:65:be:38:82:10:e5:f4:34:30:4b:93:53:70:
         2c:6d:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----