Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/E8D23BEEA96905773CECCD627FF715A569B77A07.mft
File:                     E8D23BEEA96905773CECCD627FF715A569B77A07.mft (raw, json)
Hash identifier:          /SohJehl3u0Azt2hI0Fkt935kknvbV7Gq08EwNzBy38=
Subject key identifier:   3B:F0:98:34:74:F1:C8:DD:E2:76:2B:6D:B6:01:D0:15:5F:1D:AA:D3
Authority key identifier: E8:D2:3B:EE:A9:69:05:77:3C:EC:CD:62:7F:F7:15:A5:69:B7:7A:07
Certificate issuer:       /CN=E8D23BEEA96905773CECCD627FF715A569B77A07
Certificate serial:       135B4FD72F5E6313DAB1DD7A6392CD6897D40D75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D23BEEA96905773CECCD627FF715A569B77A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/E8D23BEEA96905773CECCD627FF715A569B77A07.mft
Manifest number:          0C
Signing time:             Tue 09 Jan 2024 08:02:10 +0000
Manifest this update:     Tue 09 Jan 2024 07:57:10 +0000
Manifest next update:     Wed 10 Jan 2024 11:29:10 +0000
Files and hashes:         1: 34352e3137362e34302e302f32322d3234203d3e20323638393239.roa (hash: iETnpNeE+iOvxbLv9GrZ0vlNVgayGSSv36Z19JaXQ+4=)
                          2: 323830343a356363343a3a2f33322d3336203d3e20323638393239.roa (hash: ttjUQKzA6uF7f/qFTWxjLAWgJRZr9lNIUf92cw1LLC8=)
                          3: E8D23BEEA96905773CECCD627FF715A569B77A07.crl (hash: qDEhNNL2o4WryGHsoSDlQNWmTnXZXfmlLFUWkK80o9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:4f:d7:2f:5e:63:13:da:b1:dd:7a:63:92:cd:68:97:d4:0d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D23BEEA96905773CECCD627FF715A569B77A07
        Validity
            Not Before: Jan  9 07:57:10 2024 GMT
            Not After : Jan 10 11:29:10 2024 GMT
        Subject: CN=3BF0983474F1C8DDE2762B6DB601D0155F1DAAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:3e:36:db:95:5c:75:0b:31:f4:45:20:f8:
                    34:7f:1f:63:1c:8a:86:4a:4c:c2:4a:ff:9b:4f:90:
                    5e:96:06:64:0e:d3:d3:fd:da:be:ae:89:ce:83:f2:
                    fb:3e:8d:1e:60:31:b5:af:45:3f:9d:6d:3e:9b:58:
                    db:70:fd:2c:3c:0e:0d:16:7d:67:10:d4:0f:5d:e2:
                    dc:ab:b4:0c:02:fb:2e:4d:66:f9:5e:42:34:97:0d:
                    9b:e0:4f:cf:2b:8d:ea:8a:1c:cc:ef:e5:6c:9d:e5:
                    fe:35:d7:38:04:18:14:41:85:1e:38:26:ba:5a:73:
                    e9:5f:f6:92:a9:ee:ad:ce:ff:33:59:30:a2:9a:25:
                    e1:f9:1e:77:44:15:e6:5c:2c:cb:5c:64:89:f5:a6:
                    8f:67:5c:78:be:f2:5e:2e:ea:c3:e0:dd:5e:04:7c:
                    98:49:db:24:0f:59:04:6e:00:27:76:7f:d4:3a:bd:
                    1a:2e:b4:3f:ba:15:9d:94:07:56:c5:33:27:e3:ed:
                    04:eb:0b:d7:9d:84:73:41:fa:55:f0:dc:64:cb:cd:
                    56:93:55:41:7d:fe:4e:4e:2c:65:70:f2:ed:28:3f:
                    1e:e8:d8:d4:04:bb:f5:14:cc:84:77:d6:a8:ee:27:
                    bc:fc:ff:1e:dc:06:ba:be:b8:bc:6a:72:84:d3:ac:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F0:98:34:74:F1:C8:DD:E2:76:2B:6D:B6:01:D0:15:5F:1D:AA:D3
            X509v3 Authority Key Identifier:
                keyid:E8:D2:3B:EE:A9:69:05:77:3C:EC:CD:62:7F:F7:15:A5:69:B7:7A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/E8D23BEEA96905773CECCD627FF715A569B77A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D23BEEA96905773CECCD627FF715A569B77A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/E8D23BEEA96905773CECCD627FF715A569B77A07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:d5:5b:92:6c:e4:e8:ab:a0:59:59:e9:d5:c7:a2:24:58:
         53:e6:87:7f:50:19:ce:bc:fc:f3:d5:c8:7a:a4:c5:38:4b:09:
         c5:9a:cf:b4:11:7b:ca:5d:28:bd:6c:57:3b:1c:86:73:3b:07:
         2b:d4:f1:8a:58:12:7f:4e:2e:e8:5c:d9:0e:23:bb:fd:ce:29:
         4b:81:e2:5c:33:1c:a8:32:73:9c:1d:a1:91:43:13:19:da:8c:
         44:5d:29:bc:79:0b:45:7f:12:dc:06:9f:b6:65:4f:b1:1a:20:
         aa:6c:38:99:4c:72:ae:17:2f:ec:fd:03:05:08:14:1c:9f:03:
         ad:b7:5d:09:c4:85:37:8d:66:df:3a:1c:69:ec:35:25:95:65:
         d4:77:e3:8a:0e:34:f8:d4:6c:98:4c:f1:54:c2:ba:3a:00:fd:
         de:84:4a:9c:1e:31:5b:58:f4:a8:04:b1:57:d2:1b:43:9c:3d:
         5a:00:1c:1d:f5:62:17:2b:3f:68:aa:14:7a:2d:48:4a:ff:75:
         53:7e:aa:77:89:a0:61:d6:45:5f:bb:67:f5:96:37:6a:4d:ea:
         b4:2d:d1:fe:0c:58:3d:8b:c3:a5:33:81:1a:76:a2:d1:77:0a:
         ee:5d:bd:eb:21:d6:73:43:4e:a7:1b:b6:97:ec:14:ce:ab:a6:
         f8:bd:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----