Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.mft
File:                     3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.mft (raw, json)
Hash identifier:          ZwOdgW/FIPl9H3xBPRzXVZdZOs4vdPoR9KY5nrGG3o0=
Subject key identifier:   09:47:34:1A:B9:63:A5:A8:70:71:99:04:3A:C3:87:A9:E9:15:62:F7
Authority key identifier: 3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C
Certificate issuer:       /CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
Certificate serial:       17A3AC5793F7F43B5FCCE7FE22A0AE733AB21692
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.mft
Manifest number:          017C
Signing time:             Wed 15 Jan 2025 16:03:19 +0000
Manifest this update:     Wed 15 Jan 2025 15:58:19 +0000
Manifest next update:     Thu 16 Jan 2025 19:32:19 +0000
Files and hashes:         1: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: 5ZoSA3t4CmuYl5galp38fak/ZKkB1wTwTIkdyhDqNRg=)
                          2: 3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl (hash: wj3ykEI3nxkuEf1SUctYv8HRn53YyaQI5M5hvhZSu/s=)
                          3: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: O3mA5ZaZ6WFPCXxd8+kDDaN0SasTCphV1VPk+esvktM=)
                          4: 323830343a333137633a3a2f33322d313238203d3e20323635303138.roa (hash: HjttF278tdvBzyumsyWz3FthS/QTFAlBikxhS8gF/Ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a3:ac:57:93:f7:f4:3b:5f:cc:e7:fe:22:a0:ae:73:3a:b2:16:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
        Validity
            Not Before: Jan 15 15:58:19 2025 GMT
            Not After : Jan 16 19:32:19 2025 GMT
        Subject: CN=0947341AB963A5A8707199043AC387A9E91562F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:85:39:bf:74:92:9c:3d:eb:af:74:55:04:
                    5e:46:aa:af:24:81:2a:e4:30:dc:74:10:85:5f:43:
                    84:dd:2c:46:de:e8:34:3b:6b:f0:73:4f:11:71:36:
                    bc:fb:8e:13:f4:46:7d:6f:a0:66:39:4a:83:1f:d6:
                    46:b8:64:18:56:3f:4d:4c:f6:37:ce:b5:6d:20:6a:
                    b6:79:4d:95:94:d1:d3:8d:19:fe:18:26:b3:b5:c9:
                    92:22:36:c6:e8:cf:f8:78:04:9e:c2:b1:a2:ef:9e:
                    fb:f5:3e:a0:87:50:8e:1f:54:75:7b:ee:7a:41:66:
                    75:c0:bf:5d:de:05:36:48:7f:9d:8e:38:59:b6:4f:
                    b5:7a:21:4c:57:70:6a:2a:bd:6c:ae:d0:e1:35:2d:
                    4e:42:ab:1b:f7:ec:86:06:10:04:68:b1:bc:48:38:
                    ec:2b:92:7e:4a:a7:e8:e3:63:9e:fe:04:bd:f5:04:
                    91:47:3b:da:87:24:00:06:cc:67:ee:a8:12:0b:91:
                    df:19:14:84:7d:6c:d5:05:1a:a9:40:52:bb:84:d1:
                    41:9c:55:1a:82:ea:1b:17:d5:15:a0:c5:85:16:e2:
                    b3:9c:a0:10:8a:b5:90:a0:fc:1b:24:14:cd:c7:b9:
                    a4:b1:79:72:96:2a:39:64:46:cc:60:f4:2a:65:7c:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:34:1A:B9:63:A5:A8:70:71:99:04:3A:C3:87:A9:E9:15:62:F7
            X509v3 Authority Key Identifier:
                keyid:3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:88:b3:e2:d3:cd:e7:c7:6d:e9:cb:64:14:ef:ee:52:68:61:
         79:1e:e3:46:d2:d5:92:65:d1:c2:5c:31:c4:0a:25:94:10:7c:
         13:d7:ef:d2:fc:46:ec:7a:e5:35:ad:70:19:67:da:2e:05:6b:
         3e:0d:17:a1:66:05:40:81:c6:4c:f2:a7:26:d6:3f:84:fa:38:
         64:ab:38:3e:bf:ee:a0:14:17:8e:0e:c8:1d:d9:1a:80:45:cf:
         30:35:52:f3:89:50:86:a8:b4:8b:f1:06:1f:38:b5:d3:9e:83:
         32:33:46:d1:22:e8:7b:51:af:fe:59:2e:ca:8b:cc:ee:e2:ec:
         70:57:b1:30:39:63:8a:bb:7d:fc:86:0e:01:c1:ac:9c:7e:43:
         e9:c4:5b:7c:60:c3:9b:7c:5e:12:69:87:b3:9c:de:e1:e3:fb:
         16:65:2b:25:df:61:a2:d4:d6:78:6a:b0:6f:61:5d:3a:19:34:
         2e:7d:31:17:3d:4e:a7:be:68:81:78:62:f7:b6:24:87:97:b9:
         0a:03:48:89:3b:9c:4f:19:b0:8f:d7:65:36:bb:cd:85:89:1f:
         ae:81:ce:e2:43:87:97:5e:11:89:35:51:66:e1:68:64:4c:65:
         54:ee:33:d2:13:53:95:98:ca:f4:ce:a8:25:77:8e:9d:1f:9d:
         4c:6e:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----