Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.mft
File:                     580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.mft (raw, json)
Hash identifier:          TWYWfLQv0zBCn3X2YFUkahIoY6H8l82txH4OtFbLmf8=
Subject key identifier:   61:FF:5D:78:92:05:B9:3A:82:0A:9A:81:BA:45:F1:1A:9E:D5:A7:87
Authority key identifier: 58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE
Certificate issuer:       /CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
Certificate serial:       7CDAF066DDD47288FA3086D50ECE3A231EEA3BD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.mft
Manifest number:          02F3
Signing time:             Mon 15 Apr 2024 04:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 06:11:00 +0000
Files and hashes:         1: 323830343a373036383a3a2f33322d3336203d3e20323730373235.roa (hash: C2Q5nHK8qfkoP2WiMy/GO3wMnOAf2d/dv0kFfOUGvmI=)
                          2: 580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.crl (hash: zpzsfZqlm8/czP6+ejM3OACtesSSR37GLw4SZ1hCB1M=)
                          3: 3138392e35312e34302e302f32322d3234203d3e20323730373235.roa (hash: 6S2hCEyxhdBYV3r5yuiJgHyr/qtwCp7gSwhVZ0YD3Rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:f0:66:dd:d4:72:88:fa:30:86:d5:0e:ce:3a:23:1e:ea:3b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE
        Validity
            Not Before: Apr 15 04:05:00 2024 GMT
            Not After : Apr 16 06:11:00 2024 GMT
        Subject: CN=61FF5D789205B93A820A9A81BA45F11A9ED5A787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:4b:5c:b1:bf:8f:26:d8:c3:e7:71:92:61:
                    b3:b7:1c:a9:47:39:97:d6:8d:33:a2:c5:08:93:8c:
                    8e:a0:47:3d:ac:a3:e7:17:c3:a9:34:34:3b:65:5e:
                    b1:8f:bf:6c:8d:ad:c7:36:e4:3f:4b:a3:f2:79:6b:
                    d7:42:1e:ee:a1:0d:c4:7a:21:e3:aa:10:01:fa:77:
                    61:bb:5e:ea:74:da:5a:97:79:f1:8f:eb:ef:15:de:
                    db:dd:4e:c5:10:7a:f8:d4:f7:9e:8e:55:ef:c8:52:
                    8c:ba:c1:1d:fe:94:66:40:b2:71:da:2c:6d:15:47:
                    72:a6:71:e9:d4:78:61:68:aa:5e:f7:44:6d:dd:b9:
                    c5:76:8a:f8:e5:55:0d:17:79:ad:7f:cb:45:ce:42:
                    58:f0:33:8b:70:42:ff:e2:67:b6:4a:03:e3:87:04:
                    82:77:b1:cf:e2:25:a3:c8:d0:66:08:1a:27:18:3c:
                    b3:6d:57:c4:59:bc:a0:3c:4f:23:74:23:de:11:f7:
                    a8:66:10:45:52:b1:74:ee:49:60:7d:ed:28:d8:f2:
                    4b:f8:33:e3:2a:0f:e7:0e:47:14:a1:65:0e:94:54:
                    fd:7e:bd:63:fd:3c:d8:12:9d:ad:ec:8d:c2:80:98:
                    43:16:12:a0:c8:58:c7:c4:02:db:27:ba:7e:bb:aa:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FF:5D:78:92:05:B9:3A:82:0A:9A:81:BA:45:F1:1A:9E:D5:A7:87
            X509v3 Authority Key Identifier:
                keyid:58:0A:F0:46:1B:33:6C:9A:8C:2D:F4:7A:3B:A8:1F:DE:F5:4D:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/580AF0461B336C9A8C2DF47A3BA81FDEF54D80FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:00:27:80:24:9d:d5:8e:97:30:fd:39:c7:bf:b1:c9:f0:
         e4:21:05:a5:18:89:2c:db:4c:86:a0:08:d6:34:cf:0c:2f:09:
         f4:c2:df:fe:45:02:77:3b:d8:69:49:c1:16:3c:9d:c2:f0:c4:
         92:5f:f7:4e:0a:19:bd:55:db:61:08:b9:ba:14:2e:cf:f8:a7:
         bb:99:96:81:ee:bc:c1:10:8a:06:51:ac:1c:fa:e5:a9:fd:43:
         51:d6:ce:d6:7c:2c:bc:72:53:e8:cb:88:e8:fa:9f:11:e6:08:
         08:c7:57:e3:b2:09:3e:1c:15:32:0d:4e:73:d9:70:9d:b6:31:
         99:75:a5:9e:6f:27:ff:6d:cd:64:b7:79:9b:1b:2b:23:8e:91:
         90:a5:04:61:7c:0d:b5:c7:6b:15:d5:1f:7d:7a:8f:4a:c1:6d:
         6e:01:30:0a:8f:83:1b:cd:da:69:0b:fb:a6:cb:9b:38:72:05:
         84:78:cf:d5:3b:d2:9e:0e:8d:d6:50:75:16:4d:35:ae:1e:45:
         07:0d:d7:ac:34:df:1f:44:2e:1c:8a:81:41:47:19:e1:6b:93:
         2a:44:17:6f:5c:e6:88:6f:c0:56:9b:f1:bc:4b:0d:51:49:ff:
         76:a7:8c:6f:aa:4b:3f:7c:dd:69:bc:7b:93:0e:81:8b:ee:cf:
         df:47:7a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----