Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/463D6128B6773FBAF05D2F85F17E7972078D1D27.mft
File:                     463D6128B6773FBAF05D2F85F17E7972078D1D27.mft (raw, json)
Hash identifier:          9lCjFuBfeLKvHXruMYsaKypHJkOwEZ2xshEEUoASizk=
Subject key identifier:   D5:B2:13:16:81:7B:CE:2C:7A:66:F7:78:36:A1:3E:5C:03:2E:B6:4C
Authority key identifier: 46:3D:61:28:B6:77:3F:BA:F0:5D:2F:85:F1:7E:79:72:07:8D:1D:27
Certificate issuer:       /CN=463D6128B6773FBAF05D2F85F17E7972078D1D27
Certificate serial:       3EE4F5D840253013B8B565BC09DB4886FB7F501F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/463D6128B6773FBAF05D2F85F17E7972078D1D27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/463D6128B6773FBAF05D2F85F17E7972078D1D27.mft
Manifest number:          0214
Signing time:             Tue 09 Jan 2024 09:34:46 +0000
Manifest this update:     Tue 09 Jan 2024 09:29:46 +0000
Manifest next update:     Wed 10 Jan 2024 11:41:46 +0000
Files and hashes:         1: 323830343a326635633a3a2f33322d3335203d3e20323634383836.roa (hash: zpaWFT5YXUkEe1NgA6Hy0AjKYtFrp+MC8Jj764TLwpc=)
                          2: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: wTMTBwRq36F1Cbe1U9ILAGDethlnXrn6ycdQ6JoIsm4=)
                          3: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: tqoA755buI7sxpK/9J99am5Eqt055wTPtDkke1jx0ik=)
                          4: 463D6128B6773FBAF05D2F85F17E7972078D1D27.crl (hash: iH2tJ1km6UoScbeER3wyRtFeunMOEVhxryCyN1sfrW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:f5:d8:40:25:30:13:b8:b5:65:bc:09:db:48:86:fb:7f:50:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463D6128B6773FBAF05D2F85F17E7972078D1D27
        Validity
            Not Before: Jan  9 09:29:46 2024 GMT
            Not After : Jan 10 11:41:46 2024 GMT
        Subject: CN=D5B21316817BCE2C7A66F77836A13E5C032EB64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:9f:68:d4:d8:7a:c9:2d:c0:bf:eb:57:93:
                    25:ff:b5:6b:96:a3:1f:83:86:6d:3f:bb:13:32:4e:
                    62:60:15:ef:76:94:54:12:0c:f5:ba:7e:ac:38:36:
                    f5:59:6c:49:ee:85:c5:3b:cf:fa:fc:c3:c0:f1:bb:
                    00:4f:5f:ea:6b:7d:38:99:34:fc:d0:6f:f0:58:10:
                    e2:9f:6c:7a:e6:5f:81:5d:7c:1b:cc:de:bc:e3:81:
                    78:28:06:a5:6e:09:1c:12:71:f1:4d:37:d2:90:0a:
                    ce:64:85:01:6c:f4:16:13:20:64:77:b2:17:90:6f:
                    9f:40:47:af:b8:a8:60:52:7f:38:ff:33:1a:1b:d2:
                    3d:b5:fa:e1:ee:87:6a:ea:9e:ad:a6:31:14:d9:41:
                    c0:c8:11:0d:f7:d9:03:91:a6:5c:72:43:76:7c:86:
                    a7:45:ee:f8:61:3a:01:fb:ed:c9:7b:bb:72:3f:f2:
                    7c:69:57:8a:33:15:b8:a6:4d:cc:cf:89:a0:80:d2:
                    a8:8c:74:44:3c:c5:4a:08:7a:c3:34:6f:6f:50:46:
                    d9:8f:95:93:fc:89:39:01:0b:e5:06:a1:41:39:c5:
                    9f:a5:89:34:17:42:b0:f2:d4:a7:df:18:ad:70:6c:
                    24:b0:8b:8f:7f:8d:22:03:bf:dc:e2:cb:32:38:a3:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:13:16:81:7B:CE:2C:7A:66:F7:78:36:A1:3E:5C:03:2E:B6:4C
            X509v3 Authority Key Identifier:
                keyid:46:3D:61:28:B6:77:3F:BA:F0:5D:2F:85:F1:7E:79:72:07:8D:1D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/463D6128B6773FBAF05D2F85F17E7972078D1D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/463D6128B6773FBAF05D2F85F17E7972078D1D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/463D6128B6773FBAF05D2F85F17E7972078D1D27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:87:16:19:ee:3c:16:f0:10:d6:69:d8:7c:64:37:87:71:cc:
         b5:f4:39:b8:44:47:2b:03:29:95:c3:02:b0:cf:7c:01:0b:85:
         82:ac:c0:e6:81:aa:c8:0d:79:cb:6e:91:e3:33:4c:67:ef:72:
         4b:94:63:cd:6a:a9:cf:ed:08:c9:31:96:2e:0d:2b:6d:3b:11:
         ab:65:70:71:8f:81:53:eb:77:ee:0c:1d:15:42:bf:f3:c2:82:
         d3:c4:9f:90:31:ad:6c:bf:58:1f:26:94:0f:3d:64:5e:7f:7b:
         fa:a2:41:f3:03:68:94:04:23:c7:ff:40:49:d2:b7:d2:9e:cf:
         01:cb:6b:0a:5f:8f:40:04:d6:42:a7:f0:69:cd:df:34:db:d7:
         5d:3c:e4:58:65:cd:e0:8b:e6:81:6b:3d:ec:a5:f0:4d:f4:d6:
         07:6f:1b:e3:61:af:5b:e1:b8:a8:e8:00:3f:6c:cb:d6:59:b7:
         5b:7d:48:6a:77:ff:6e:c4:64:77:54:19:6c:30:b6:c1:b0:81:
         75:49:e3:11:17:4a:66:ca:ac:4e:c6:88:b1:4e:5a:42:15:e0:
         a8:70:c8:85:f1:12:85:4c:ed:11:ca:e7:2d:78:85:35:62:88:
         25:fb:1f:33:75:28:a1:86:2f:fa:10:ca:d9:e3:45:61:18:60:
         3a:a9:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----