Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.mft
File:                     D543B4EC77A49985F4D5C92C06195CDAE41CDD49.mft (raw, json)
Hash identifier:          9nI4GKSu08mcZwOfQ5Rr2FhIfnlTogW//ggY+W8DOKQ=
Subject key identifier:   AF:60:7E:39:E3:FD:C3:C5:63:92:5C:AB:4F:4F:6D:97:82:4B:C4:E1
Authority key identifier: D5:43:B4:EC:77:A4:99:85:F4:D5:C9:2C:06:19:5C:DA:E4:1C:DD:49
Certificate issuer:       /CN=D543B4EC77A49985F4D5C92C06195CDAE41CDD49
Certificate serial:       07F56A5AE334127323C93F50BF0DA3DCC94DD3E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.mft
Manifest number:          03C6
Signing time:             Thu 14 Mar 2024 12:29:09 +0000
Manifest this update:     Thu 14 Mar 2024 12:24:09 +0000
Manifest next update:     Fri 15 Mar 2024 16:04:09 +0000
Files and hashes:         1: 3230302e3131352e36342e302f32322d3234203d3e20323730383932.roa (hash: sMEB4/F1Ejuz/PEe50pxNzfOJtid2bQZqckKvIw+nHk=)
                          2: 323830343a373330633a3a2f33322d3333203d3e20323730383932.roa (hash: j4rB4jbDzaiInk1fETiZkeU7xaaMG9EQ8OwnjAAzW18=)
                          3: D543B4EC77A49985F4D5C92C06195CDAE41CDD49.crl (hash: kNzcleKHXCRshURXrh0Obcx42pWrJPUHVIBywls1YCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f5:6a:5a:e3:34:12:73:23:c9:3f:50:bf:0d:a3:dc:c9:4d:d3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D543B4EC77A49985F4D5C92C06195CDAE41CDD49
        Validity
            Not Before: Mar 14 12:24:09 2024 GMT
            Not After : Mar 15 16:04:09 2024 GMT
        Subject: CN=AF607E39E3FDC3C563925CAB4F4F6D97824BC4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:c0:51:78:5a:0d:66:81:eb:e1:82:b4:a5:
                    11:f7:66:d0:5c:15:ee:0c:02:65:5b:40:76:c9:68:
                    da:34:95:27:e9:ba:a4:a2:b2:f8:04:77:d9:e3:0c:
                    d9:a9:61:37:c5:0d:4a:b9:f4:ec:51:16:db:11:d6:
                    20:3d:18:f0:4f:26:8b:a7:b3:1d:7f:df:8a:28:06:
                    a1:17:bd:e7:80:3e:46:01:2a:07:22:2d:25:ea:2b:
                    23:0f:0e:9a:57:b2:7e:1b:eb:8e:27:59:54:2d:aa:
                    d9:75:ef:76:9f:63:ed:60:a1:d3:64:4c:97:67:ff:
                    e9:ae:ec:0d:56:72:69:17:3e:c4:9d:00:33:5d:96:
                    0d:46:2e:9d:c0:7a:fb:37:f4:46:8f:27:b6:98:eb:
                    aa:35:f0:a2:22:03:d9:15:24:27:22:14:45:70:4f:
                    01:00:fd:3c:79:bb:f0:65:f1:06:8a:50:01:b6:d3:
                    77:80:2c:dc:54:38:7c:47:77:00:ec:e8:b8:10:72:
                    36:bc:3d:2c:b0:02:2f:98:19:7c:05:8e:d4:4a:cb:
                    3d:3f:df:94:c1:39:6a:b9:b4:9c:0d:d9:fa:9e:98:
                    b2:a4:92:dd:bd:f2:20:ae:b3:74:d8:03:55:af:cd:
                    03:81:56:6a:38:df:33:9d:1b:f6:d0:0f:c4:aa:5a:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:7E:39:E3:FD:C3:C5:63:92:5C:AB:4F:4F:6D:97:82:4B:C4:E1
            X509v3 Authority Key Identifier:
                keyid:D5:43:B4:EC:77:A4:99:85:F4:D5:C9:2C:06:19:5C:DA:E4:1C:DD:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:88:b3:05:a2:2b:6d:98:39:af:95:ef:32:67:19:0e:5a:26:
         5e:ef:ff:c7:63:2d:66:a4:a0:a6:17:54:d7:e1:29:7d:3a:1c:
         68:1b:36:bb:55:05:d2:48:11:97:55:d5:de:c7:09:c7:de:0d:
         a2:bf:c3:11:5d:e8:53:6c:f9:ad:05:84:55:79:2e:0d:23:99:
         9e:f1:02:92:a4:ca:53:b6:33:9b:b5:99:80:17:9e:da:05:0a:
         0d:c9:98:be:f2:de:6b:14:73:e8:aa:d5:9e:f5:53:0c:bb:9d:
         11:4c:26:d1:79:38:f4:68:84:20:69:f3:c4:eb:e1:4a:f2:1d:
         82:1c:d4:61:13:28:7f:6f:0f:a5:16:f4:32:d0:4e:4e:d7:24:
         78:cd:84:75:9e:98:ca:12:c0:0c:9f:09:2e:5f:b6:ca:92:4c:
         96:87:2f:9d:c1:f9:6b:18:bf:05:56:7e:dc:3c:e7:7d:bb:5f:
         27:79:16:57:26:81:28:fa:34:4e:c8:1b:59:18:d5:4f:04:89:
         f6:10:bb:4c:3f:ba:9e:fb:4e:03:26:84:7b:a1:91:85:2f:45:
         7f:ee:ff:dc:35:b6:8d:ca:d7:67:e7:9c:d6:43:e4:7c:cb:36:
         cc:aa:9f:f5:0f:95:10:de:2e:c5:26:1b:28:3b:ec:a6:2b:c7:
         13:19:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----