Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.mft
File:                     A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.mft (raw, json)
Hash identifier:          f6wtPrnGDnsA1PgBOZCcU5UdgomgzMM9o7QxaRPMSuc=
Subject key identifier:   42:63:54:15:26:D4:08:3E:54:35:5C:EB:4A:3D:60:9B:94:4F:A2:6E
Authority key identifier: A0:BF:27:22:63:CB:0F:3B:93:DC:90:64:3A:26:B1:B2:01:C8:CA:5E
Certificate issuer:       /CN=A0BF272263CB0F3B93DC90643A26B1B201C8CA5E
Certificate serial:       49433320C0380ED984493388DB4CE083330CC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.mft
Manifest number:          2D
Signing time:             Tue 09 Jan 2024 00:50:54 +0000
Manifest this update:     Tue 09 Jan 2024 00:45:54 +0000
Manifest next update:     Wed 10 Jan 2024 01:05:54 +0000
Files and hashes:         1: 3137302e38322e32302e302f32322d3234203d3e20323636343430.roa (hash: T9B6S3+xZPh2z8qg7c7WQor9fbcnygmd8F2SveeBlT4=)
                          2: A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.crl (hash: 41m5C/e0V8vma4/VI1IkLlCnHAuNXP7dYequhBs7Dm4=)
                          3: 323830343a333764633a3a2f33322d3438203d3e20323636343430.roa (hash: XxX0LPFvA1G/yTD+KBS31TaaqLFd985QeNpn1mW3VZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:43:33:20:c0:38:0e:d9:84:49:33:88:db:4c:e0:83:33:0c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BF272263CB0F3B93DC90643A26B1B201C8CA5E
        Validity
            Not Before: Jan  9 00:45:54 2024 GMT
            Not After : Jan 10 01:05:54 2024 GMT
        Subject: CN=4263541526D4083E54355CEB4A3D609B944FA26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:6f:63:cd:d8:6c:e5:cb:dc:1b:3a:e7:d8:
                    9a:b4:17:a9:52:ac:ad:f1:fd:90:2e:b5:c6:b3:31:
                    47:4c:96:a2:b8:89:26:a1:60:0c:54:c1:b6:3e:d0:
                    7c:d6:74:1b:af:aa:06:bf:81:f3:ec:a2:a1:30:83:
                    81:7a:a6:26:ec:94:e8:95:fc:46:2a:b2:e1:e0:db:
                    b8:da:4e:0a:57:e3:65:86:ed:43:62:91:ad:ca:45:
                    0c:7a:12:e2:a8:5e:69:c8:e7:3b:f9:de:6f:c8:eb:
                    cc:74:1c:2e:f1:dd:8e:ca:fa:39:68:e2:3c:06:12:
                    f3:16:76:50:6b:2a:7c:89:2b:d9:26:8a:34:05:a6:
                    c7:6a:68:75:d7:b6:44:49:75:e7:c6:6b:eb:60:b8:
                    19:aa:d8:ad:67:35:2f:1c:f7:b7:03:f6:58:3c:04:
                    77:3a:66:41:40:cc:8c:e0:37:ab:c6:4c:16:05:41:
                    e5:52:78:1f:30:7e:94:47:80:02:f2:b6:86:82:51:
                    16:d6:a6:0b:8b:16:a0:1d:d6:32:57:f7:f6:c4:92:
                    60:42:1a:5a:3a:32:60:31:b6:53:db:1b:d1:79:60:
                    b3:5d:9c:e4:35:3b:6f:7d:27:63:56:34:69:42:ce:
                    7c:16:ce:c6:69:ce:e1:47:6a:fc:e7:67:1b:97:f8:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:63:54:15:26:D4:08:3E:54:35:5C:EB:4A:3D:60:9B:94:4F:A2:6E
            X509v3 Authority Key Identifier:
                keyid:A0:BF:27:22:63:CB:0F:3B:93:DC:90:64:3A:26:B1:B2:01:C8:CA:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/A0BF272263CB0F3B93DC90643A26B1B201C8CA5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:d3:ef:f9:c1:4a:73:5a:9c:03:f6:b3:bc:32:ee:ed:f9:
         10:31:4d:0f:7e:c2:4b:50:ad:5b:11:1d:e8:34:c8:90:05:b5:
         d1:83:ea:e2:ba:fe:49:af:94:3f:5f:b5:51:84:4a:d5:f6:34:
         7b:d7:2b:1e:03:a3:19:a5:f1:2d:d3:e9:a3:08:f0:98:5c:e6:
         4e:ec:54:a5:6e:97:19:cb:38:a9:4f:91:78:ea:d6:09:c4:92:
         30:d4:f1:60:aa:ed:01:13:f9:59:ce:4f:68:b8:61:d0:eb:46:
         b2:97:17:42:0b:2c:63:fb:01:ce:c5:da:c0:5d:63:6f:5a:0d:
         64:15:28:12:47:f1:4b:fa:7a:17:31:69:16:32:75:90:b2:05:
         94:07:da:10:8f:df:da:6d:06:f3:66:fa:c3:2c:7c:20:ff:e9:
         65:b9:23:96:3e:72:48:5d:16:7b:e0:76:83:f1:50:5b:5c:1e:
         34:ae:93:d1:22:e9:cf:35:a4:98:25:7c:21:f3:d3:cf:3a:75:
         f3:48:6a:96:1e:8f:c8:27:0b:23:71:07:1f:e1:91:c4:65:13:
         e0:e2:ef:f3:04:61:9d:64:9d:ce:ed:a4:b9:9d:16:1c:57:18:
         67:9c:bd:49:ce:a9:9e:01:91:05:09:c5:0b:64:84:cd:c4:0b:
         6f:0d:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----