Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.mft
File:                     3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.mft (raw, json)
Hash identifier:          72tvYendWrVx1XSgm0TMBVMs1UKL8Zsqm7dTEevWLys=
Subject key identifier:   C8:8B:22:3D:D2:AD:24:6C:57:7E:21:15:F5:F2:AD:00:24:72:14:0E
Authority key identifier: 3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E
Certificate issuer:       /CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
Certificate serial:       36AD5F11B227C6E19837A00CEB51FA97C2115ECB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.mft
Manifest number:          B3
Signing time:             Tue 09 Jan 2024 05:27:33 +0000
Manifest this update:     Tue 09 Jan 2024 05:22:33 +0000
Manifest next update:     Wed 10 Jan 2024 05:28:33 +0000
Files and hashes:         1: 34352e3138302e3233362e302f32332d3233203d3e20323639313533.roa (hash: W9Moxd1bk+SHnyQEVJJGzt/BWDcImL5PwFY0GbZG+Ms=)
                          2: 34352e3138302e3233392e302f32342d3234203d3e20323639313533.roa (hash: yJX17Jcvs33DVBnCLfq5tyMIrKHbRSn+xt70JLK4jgc=)
                          3: 323830343a363033383a3a2f33322d3332203d3e20323639313533.roa (hash: T53l2buqrOAm7dmQoNeyBxjIMsQkxwKrryeyjGJZwhw=)
                          4: 3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.crl (hash: V5PBSFtLhlgRaNu4DIK8RFB2HgvqsbLNDPHt2G8f32g=)
                          5: 34352e3138302e3233362e302f32342d3234203d3e20323639313533.roa (hash: dNI3fgMG7pl1nbdT2JGYHy+WfvVBBNFDFYv0gP9ewUE=)
                          6: 34352e3138302e3233382e302f32342d3234203d3e20323639313533.roa (hash: mXnrUEd9i32RnIzc2gH/ByQkgb4zKb5j2em1dQ26KiA=)
                          7: 34352e3138302e3233382e302f32332d3233203d3e20323639313533.roa (hash: kw5x9loE+shvvLOvZ5/gKHZFRM+vOv34yzWSfHhHH/A=)
                          8: 34352e3138302e3233372e302f32342d3234203d3e20323639313533.roa (hash: fO/jZMu4aBTy5CflgwU36onRqVdo+5h0XQnQS/+ZVMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ad:5f:11:b2:27:c6:e1:98:37:a0:0c:eb:51:fa:97:c2:11:5e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
        Validity
            Not Before: Jan  9 05:22:33 2024 GMT
            Not After : Jan 10 05:28:33 2024 GMT
        Subject: CN=C88B223DD2AD246C577E2115F5F2AD002472140E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:b5:05:62:1b:ff:a6:24:1d:27:2c:82:f3:
                    a4:24:88:f8:93:36:02:36:d6:98:09:43:40:56:9d:
                    1f:a4:eb:46:4e:17:51:ad:c4:4a:84:9a:55:fb:b1:
                    10:3e:66:b4:ef:e1:34:68:51:b4:f3:4e:19:8c:be:
                    1d:da:bb:18:4c:72:01:5d:63:ca:c4:17:c0:f3:8d:
                    3c:9f:5e:ac:30:f6:d0:3c:51:5a:1c:40:fa:c1:6e:
                    49:e6:cb:bc:f5:d5:6f:fc:57:4a:ea:21:d9:ae:71:
                    f3:47:13:33:b1:3a:a7:ee:36:72:3c:20:2d:58:a7:
                    8e:3d:21:e8:ae:82:9f:12:d4:34:5c:67:fe:f6:1d:
                    82:b4:3c:4f:3a:29:98:5b:df:22:5d:04:7f:e7:f8:
                    7c:42:3e:15:bb:76:92:13:3e:c6:10:66:55:55:bb:
                    40:e2:e1:99:86:c5:88:52:22:e5:f2:6e:59:0e:2d:
                    dd:b5:e7:d1:f5:fd:8a:4b:38:a8:53:f2:e6:4e:a7:
                    aa:c6:8a:a2:25:e5:57:80:dc:51:03:be:e4:31:1d:
                    72:c6:66:5d:0c:bc:94:71:02:54:f6:a6:32:af:cc:
                    8e:b9:40:3c:da:ce:44:12:74:d9:2d:60:2e:65:fa:
                    18:43:8d:30:16:10:4a:a7:f9:4b:e0:da:b9:37:9e:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8B:22:3D:D2:AD:24:6C:57:7E:21:15:F5:F2:AD:00:24:72:14:0E
            X509v3 Authority Key Identifier:
                keyid:3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:67:71:16:ec:6d:cd:ef:19:1a:34:0a:7c:48:0c:20:00:17:
         7b:05:3b:c2:7b:81:a1:eb:35:4a:75:e1:b6:f0:78:2d:b6:fb:
         c2:d0:98:2c:31:1b:74:bb:ef:6a:f1:fb:eb:5e:b7:af:c4:43:
         67:bb:45:cc:3d:f9:a6:af:60:a5:0f:ba:32:f4:46:87:85:79:
         29:ff:04:7c:f4:a7:60:72:bb:1e:0d:4f:e4:50:3e:59:45:e4:
         a3:2a:d3:33:eb:39:83:e7:d8:1d:53:43:df:5d:69:1e:f8:e2:
         30:10:03:2f:a8:9e:d5:bb:f8:28:25:55:d8:c2:a2:9d:d1:93:
         22:5f:25:e9:d3:68:92:f6:05:00:ea:3b:41:34:49:8b:d1:b1:
         9f:33:35:f3:2a:d1:2a:56:56:51:4b:18:08:8d:ed:15:d1:f6:
         d9:d8:61:eb:46:22:5d:0b:c0:08:1c:41:1f:e6:44:7f:40:84:
         b0:fa:c9:e2:61:41:7c:45:55:13:14:c0:73:30:3a:37:bb:1d:
         33:6b:df:0f:04:f7:93:f9:9d:2b:2d:a7:2f:d7:e9:49:15:93:
         ec:e7:26:a0:de:0b:53:17:52:bc:61:e7:80:b2:cf:e7:1c:29:
         2a:46:1f:1e:95:04:48:81:75:c2:cb:f9:c3:d9:d1:87:b6:73:
         aa:ca:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----