Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.mft
File:                     6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.mft (raw, json)
Hash identifier:          uHZ9WP2IYGug9nt0+7HptRyubXDcC0Yppb7EpjZEo4s=
Subject key identifier:   D7:06:14:44:B2:2F:3D:17:97:BC:3A:1E:C9:8D:5B:25:9C:99:25:74
Authority key identifier: 6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A
Certificate issuer:       /CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
Certificate serial:       3B0B38A9C2702EC25887A6EA5FCE3E84F7D3FAFC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.mft
Manifest number:          D8
Signing time:             Mon 15 Apr 2024 01:33:06 +0000
Manifest this update:     Mon 15 Apr 2024 01:28:06 +0000
Manifest next update:     Tue 16 Apr 2024 05:29:06 +0000
Files and hashes:         1: 323830343a356662633a3a2f33322d3332203d3e20323639313230.roa (hash: M4fqs/kGsnL8aWcMsGn7iynTlR6FNao/cS7697VLpqs=)
                          2: 34352e3137392e362e302f32342d3234203d3e20323639313230.roa (hash: EWApQolCvfs3UgQuxddVl5z43SpAoZJ4Da/9wunNkcw=)
                          3: 34352e3137392e372e302f32342d3234203d3e20323639313230.roa (hash: HEoWqQDOndJLFrTAknFKaI5tR0Gch0AZZdEHXloGJAM=)
                          4: 34352e3137392e352e302f32342d3234203d3e20323639313230.roa (hash: l7WwUk5H7HEp5VRrv8MYgYVCl6AqMAcrDHOJMvsL+74=)
                          5: 6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.crl (hash: 171myPtAGI37+Z1ixSgemDv+xUxtc1L6dT/7oShEUX0=)
                          6: 34352e3137392e342e302f32342d3234203d3e20323639313230.roa (hash: /lqbtQqWkzpqifkc4/G2YJ67KqYHTZ2smAvIoq6Gx2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0b:38:a9:c2:70:2e:c2:58:87:a6:ea:5f:ce:3e:84:f7:d3:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A
        Validity
            Not Before: Apr 15 01:28:06 2024 GMT
            Not After : Apr 16 05:29:06 2024 GMT
        Subject: CN=D7061444B22F3D1797BC3A1EC98D5B259C992574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:ab:0a:dc:54:2f:96:0f:29:e3:db:e8:c4:
                    7f:d0:b9:ce:4f:71:e2:4e:cc:25:ea:a1:d8:67:16:
                    7f:21:74:79:53:08:1d:10:c7:a7:ae:be:d6:d1:cf:
                    47:84:e7:ee:2e:b6:5f:9f:cf:1a:57:89:d1:97:90:
                    d4:c3:ca:86:e7:5d:91:68:37:11:f5:2a:c7:3b:ce:
                    36:ad:18:79:5f:14:9b:74:3d:78:3e:3a:ee:aa:b8:
                    36:2a:1e:ab:e5:03:69:3d:bb:c3:e0:56:51:2e:1a:
                    e2:24:de:07:8f:f5:41:c9:a1:f3:7c:d4:df:b1:b1:
                    36:bd:5f:0c:1b:f0:f3:06:41:47:9e:02:e7:09:33:
                    a2:b1:03:ac:9c:c4:fc:8f:1c:20:8b:c9:eb:11:98:
                    3a:2a:f4:09:40:51:24:f5:f6:8c:47:cd:fc:79:2a:
                    f9:4f:ee:1f:47:94:8f:ea:fc:64:3c:b0:08:02:0c:
                    e2:37:55:53:71:64:81:1f:34:5a:97:6f:cc:83:3f:
                    6d:65:48:81:b1:48:2d:e9:62:62:69:f0:63:b9:f1:
                    cc:ec:82:71:20:3e:01:3f:2d:cd:3e:ad:3c:d9:b9:
                    93:7a:36:a6:e5:22:99:0d:f3:41:70:7a:d4:aa:d4:
                    60:cb:18:90:6a:d2:34:cc:ef:0f:da:26:c3:9d:71:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:14:44:B2:2F:3D:17:97:BC:3A:1E:C9:8D:5B:25:9C:99:25:74
            X509v3 Authority Key Identifier:
                keyid:6B:6A:2A:9C:47:A9:F6:0A:7A:49:B3:AB:53:B5:8E:89:F7:12:75:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/0/6B6A2A9C47A9F60A7A49B3AB53B58E89F712750A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:46:c9:ba:e6:01:53:fb:e5:40:c8:1d:9e:5f:e9:6f:80:8e:
         5e:48:36:63:d7:1f:13:c0:1f:ee:e4:a8:28:41:82:57:3a:b1:
         d6:f0:a5:91:2c:53:08:d1:25:52:fd:a8:e7:3a:8f:56:7c:b2:
         59:62:8f:c8:12:27:65:84:ff:7e:20:4a:b8:61:f1:0e:d0:0f:
         63:0e:ef:23:63:ec:8f:be:a2:48:22:10:51:9a:6f:53:7d:f3:
         6e:8d:64:df:13:e2:45:66:2d:80:15:c1:98:16:6a:16:c1:08:
         45:d5:dc:4a:f6:8d:a7:91:c3:40:5b:95:95:5f:26:c8:d6:97:
         80:6e:c6:dd:64:94:80:f9:7d:cb:01:d7:1d:df:fd:01:b3:6e:
         35:5a:31:05:13:7d:b9:9b:c3:a2:0e:f6:cd:f1:66:05:3b:90:
         25:c5:c4:0c:4e:0e:5d:c6:4a:45:44:db:ff:e5:dc:b0:89:31:
         8f:fa:30:7b:f9:5e:e1:42:26:87:3f:40:93:c0:95:20:1b:0f:
         f3:91:e4:1b:c8:df:5e:02:e9:ce:2d:b6:3e:49:36:75:98:72:
         97:36:49:be:a1:f2:00:63:d3:aa:91:24:dd:ca:60:2d:4c:53:
         ed:88:2e:cd:0c:26:a0:12:6c:ee:cc:83:08:bb:1b:7f:cd:cd:
         af:25:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----