Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.mft
File:                     765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.mft (raw, json)
Hash identifier:          n+rBZrLQFASf9ZmmU1rHcfP9hviib+IbXlJyPQ0ybdA=
Subject key identifier:   56:54:B0:8D:2C:00:58:9E:7C:6F:9C:F6:DF:53:E8:9F:39:E8:6A:8C
Authority key identifier: 76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6
Certificate issuer:       /CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
Certificate serial:       643577F0B8D8CE21D69B99A6E21A643C88847658
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.mft
Manifest number:          0217
Signing time:             Sun 14 Apr 2024 18:03:39 +0000
Manifest this update:     Sun 14 Apr 2024 17:58:39 +0000
Manifest next update:     Mon 15 Apr 2024 20:36:39 +0000
Files and hashes:         1: 765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.crl (hash: p5EGmOnF2gR4IgB4hYgW+F+6R2x1J+9Shm8+bZo8hJI=)
                          2: 3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa (hash: rd+3uhbIS3RKjaztvLt2Uev7mzAdFPyTK17qob1xq8c=)
                          3: 3138362e3235312e32382e302f32322d3234203d3e20323632333830.roa (hash: xjkxOthrqW9kUQpnlEi7e+FGAyF53+LMNlh9EVIzC2U=)
                          4: 3137372e3132382e3233322e302f32322d3234203d3e20323632333830.roa (hash: TvREF7B5mgqLTJ4uegwCFIPnvt2SBXGf94T2SZEyJbY=)
                          5: 323830343a3839383a3a2f33322d3438203d3e20323632333830.roa (hash: +N0rfUa6e1DChdsuBOlaFRO8VOr1Cmlf8JMcIQdEGfU=)
                          6: 3133312e302e3234302e302f32322d3234203d3e20323632333830.roa (hash: O4h46gJYnlG1dPBbIGDUwybKy+lNNxl2hPC0EVolb+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:35:77:f0:b8:d8:ce:21:d6:9b:99:a6:e2:1a:64:3c:88:84:76:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
        Validity
            Not Before: Apr 14 17:58:39 2024 GMT
            Not After : Apr 15 20:36:39 2024 GMT
        Subject: CN=5654B08D2C00589E7C6F9CF6DF53E89F39E86A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:06:60:6e:70:37:f2:34:4d:3e:aa:4d:db:
                    fe:b0:16:67:90:e7:b0:9e:20:4f:83:f6:ca:ed:42:
                    02:8c:d5:b0:f3:a6:e4:7c:e9:ee:d8:42:7f:b6:aa:
                    61:1b:ed:72:04:60:56:27:50:83:50:b8:bc:d1:e4:
                    fe:79:ab:67:6f:00:3b:3d:ef:d7:9b:cf:35:24:66:
                    0a:52:8e:e0:2a:6f:90:fa:b4:3b:5e:fe:bf:3b:1c:
                    a1:df:03:42:40:0b:e6:e0:24:a4:9d:b1:c8:5d:9e:
                    eb:5f:74:07:4c:54:af:95:4e:7d:e8:88:2b:f8:cb:
                    6b:65:33:50:f5:04:8e:cc:54:0b:29:c3:4b:d8:11:
                    3e:b0:31:e5:1e:ec:de:5d:52:74:b1:01:68:ed:c1:
                    7c:af:69:db:81:7a:fb:6b:ab:18:97:1f:bb:a8:0e:
                    4f:dd:bd:15:cf:80:5e:8f:d7:49:cd:92:75:cb:ff:
                    6d:8f:ea:7c:b5:3d:53:c5:c0:34:d7:7c:ba:20:53:
                    4c:a3:d8:2b:ab:b0:17:4a:4a:dd:6f:18:d4:76:84:
                    4a:ee:fc:bb:6a:11:af:2f:fa:fb:2e:48:e1:2a:d5:
                    fe:b3:f4:7c:07:82:3d:dd:ff:fe:be:e3:00:ec:43:
                    bd:67:c7:bc:ed:a1:88:91:3e:a5:99:ad:71:e0:34:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:54:B0:8D:2C:00:58:9E:7C:6F:9C:F6:DF:53:E8:9F:39:E8:6A:8C
            X509v3 Authority Key Identifier:
                keyid:76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:18:96:cb:2b:86:22:d0:87:40:bd:9e:c9:64:2a:23:22:f1:
         e2:77:f8:f9:82:1d:6d:12:45:0b:37:34:01:85:e9:7c:f4:a1:
         f8:b3:ca:c1:22:fa:b3:88:31:1f:0f:f2:55:d6:c2:72:94:65:
         e3:4b:dd:17:90:ec:4b:35:3b:eb:2b:fc:ab:d0:7d:51:4f:dc:
         85:74:cb:2b:b1:25:66:83:d5:33:72:84:c8:a5:61:d1:b3:31:
         90:79:0e:cc:70:dc:5d:55:51:a9:72:ee:07:22:19:4e:9f:f8:
         16:62:86:2f:d8:13:b8:da:08:81:e7:53:d4:54:13:c5:07:c0:
         c9:3c:3b:29:54:67:da:09:72:bc:96:3b:ba:62:44:f2:c7:fa:
         04:ef:8a:19:a4:e6:32:89:ba:14:55:b4:36:c3:36:67:7b:4f:
         ec:bc:40:92:c7:ea:d5:19:a1:5e:9e:0e:de:6c:f2:4d:a4:4a:
         83:09:7a:da:4f:e7:ee:76:fa:e8:06:d5:a4:57:2e:2d:fd:36:
         f5:72:17:3d:18:93:d1:3f:c2:49:8d:66:0a:fa:41:f7:fc:70:
         97:21:12:a3:3c:3b:8d:92:41:db:2e:8d:33:2f:ee:45:86:1e:
         35:f2:74:cd:70:24:a3:46:80:55:51:c0:f6:a4:d7:b2:ff:c4:
         ed:19:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----