Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.mft
File:                     D543789826C11DFADC822D25F10DB64BE2AA4B3E.mft (raw, json)
Hash identifier:          emkUFiLq6Y2IqJnefD2NBsUJ5ZSzRLBHP5Casb/Atig=
Subject key identifier:   B5:F2:E6:2C:08:CB:3B:3D:51:ED:4A:84:FD:85:6E:0F:96:82:FB:F4
Authority key identifier: D5:43:78:98:26:C1:1D:FA:DC:82:2D:25:F1:0D:B6:4B:E2:AA:4B:3E
Certificate issuer:       /CN=D543789826C11DFADC822D25F10DB64BE2AA4B3E
Certificate serial:       1A529FE40B134E83B82CD9C45EEAF17541E147D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.mft
Manifest number:          0335
Signing time:             Mon 15 Apr 2024 12:06:35 +0000
Manifest this update:     Mon 15 Apr 2024 12:01:35 +0000
Manifest next update:     Tue 16 Apr 2024 13:05:35 +0000
Files and hashes:         1: D543789826C11DFADC822D25F10DB64BE2AA4B3E.crl (hash: VHlT4lbQXViViDd/ncSdZ6M7lFrZB35XH7SnvAtY4D4=)
                          2: 3134332e302e3138382e302f32322d3332203d3e20323634313836.roa (hash: ZyS9fgHApLRhkDvKp0QuSr+CPC8QDImhw648G0yNriw=)
                          3: 3133382e39342e3139322e302f32322d3234203d3e20323634313836.roa (hash: 5O+6JqFR5KxlP+stOPgPlhEtHKyb/9QHp6PozpsPVUI=)
                          4: 323830343a323364343a3a2f33322d313238203d3e20323634313836.roa (hash: J/27ObI57rn7w0f+aFYhH1osNmwo37+hxr/7BV7fT9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:52:9f:e4:0b:13:4e:83:b8:2c:d9:c4:5e:ea:f1:75:41:e1:47:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D543789826C11DFADC822D25F10DB64BE2AA4B3E
        Validity
            Not Before: Apr 15 12:01:35 2024 GMT
            Not After : Apr 16 13:05:35 2024 GMT
        Subject: CN=B5F2E62C08CB3B3D51ED4A84FD856E0F9682FBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:d4:5b:6c:75:e2:b4:6a:f8:06:f8:b1:d9:
                    92:48:8b:43:0f:af:20:69:a3:0a:79:c6:1b:c9:f2:
                    42:b5:79:f5:70:d7:f1:2f:5e:e5:98:f9:92:15:ac:
                    fb:56:03:0b:47:77:19:b1:fc:10:42:f2:a5:11:8f:
                    9e:79:e3:e7:9d:b1:61:5f:bb:c9:fa:d1:e1:40:2b:
                    21:fe:14:f0:df:7f:b2:30:da:fe:44:8b:a9:84:1a:
                    d4:41:67:11:17:f9:30:c9:4c:55:14:30:92:cc:52:
                    1e:66:a7:23:36:70:11:97:c4:3b:33:62:74:f5:ec:
                    bb:79:0f:27:ec:21:a4:28:c7:d1:2e:ba:81:83:40:
                    ef:00:43:fe:e4:1d:3a:e1:a2:e0:b0:8b:7a:26:bf:
                    10:79:f5:d3:b3:23:2e:7c:ae:a8:90:d5:08:d9:93:
                    c3:76:59:6b:47:2f:10:c4:18:5b:7c:21:9b:5d:33:
                    e9:da:90:34:c4:e1:fa:07:ff:77:ef:bd:22:62:64:
                    62:9c:ad:8f:5a:2a:ab:5f:15:ef:f4:72:0d:17:0b:
                    a6:93:3f:26:04:d2:20:6a:39:68:51:e7:10:46:3d:
                    47:3a:03:3f:28:6c:01:d0:e5:57:59:67:3b:35:4e:
                    b4:98:fa:04:39:55:37:e3:1f:10:90:da:81:f0:c8:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:E6:2C:08:CB:3B:3D:51:ED:4A:84:FD:85:6E:0F:96:82:FB:F4
            X509v3 Authority Key Identifier:
                keyid:D5:43:78:98:26:C1:1D:FA:DC:82:2D:25:F1:0D:B6:4B:E2:AA:4B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:f1:73:0a:9c:0a:35:bf:16:47:a5:8f:e3:ee:f8:70:02:
         f1:26:62:e8:99:d4:47:c6:47:c0:df:48:93:c0:f5:d3:5c:e7:
         97:95:05:a3:e4:27:84:dd:ed:d0:b7:8d:a2:32:72:1d:55:e8:
         ce:c0:71:0b:61:aa:b8:f8:d2:f0:ab:4f:49:89:6a:38:11:4d:
         a9:e7:fd:c5:63:44:3d:1d:a7:6d:b5:b9:8f:23:3a:7d:2e:dc:
         bd:40:23:2a:22:2e:1c:3d:05:65:ce:97:de:ba:de:9f:b2:73:
         8c:32:55:0a:f6:d6:e9:f1:91:49:72:69:38:49:9f:78:16:b7:
         b8:a7:b7:3c:47:25:a1:7b:05:3c:58:71:1b:81:a5:f8:f8:70:
         8b:be:69:3e:0c:3c:91:1c:c5:31:d9:58:d3:59:ff:da:df:e8:
         a9:b7:90:ca:e3:1e:e1:9a:a0:38:42:98:a4:72:84:61:c0:a5:
         68:49:08:54:95:8f:f2:d0:c7:00:bd:21:92:55:be:ef:91:b8:
         f8:a7:fa:b5:c7:ca:3e:ca:36:a6:d6:a8:6d:ba:8c:db:81:14:
         03:6c:9e:fd:8e:6a:1b:ce:bd:66:22:05:05:2c:d1:86:9b:3a:
         c9:8d:46:5a:19:98:b1:d6:34:df:cc:3b:f5:e1:51:48:0e:b4:
         df:9f:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----