Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.mft
File:                     B8A77988EAC7E76375143BCCA6FA803A833D4C0F.mft (raw, json)
Hash identifier:          mceD/KCIOFnwjGpFvb89lP0Xto2zRocPzxiZzYHqM3Y=
Subject key identifier:   6C:CE:C5:ED:9C:83:63:DF:A5:37:AD:B9:40:F1:D2:72:63:A4:CD:3A
Authority key identifier: B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
Certificate issuer:       /CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
Certificate serial:       0817947D9402D952829E4D3AF324119849252B08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.mft
Manifest number:          6C
Signing time:             Mon 15 Apr 2024 00:39:57 +0000
Manifest this update:     Mon 15 Apr 2024 00:34:57 +0000
Manifest next update:     Tue 16 Apr 2024 02:44:57 +0000
Files and hashes:         1: B8A77988EAC7E76375143BCCA6FA803A833D4C0F.crl (hash: JvHWQoKzAgskso+Vh1LdeB8WuA2fpvDteZoJGzvWyyM=)
                          2: 34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (hash: dZMCCKRzAfWlFRR1PciqqyQ4IuSRSkNjTQXbTHBJ7lc=)
                          3: 323830343a353766343a3831303a3a2f34342d3435203d3e20323638303937.roa (hash: du1YapRvk/U33KcovFxnTHOqkhaf5Xu4YINXDiIXiJY=)
                          4: 323830343a353766343a3a2f33322d3335203d3e20323638303937.roa (hash: NWZddmgKattmcOVA/gAzTOSUHNQepThzMqn0ROAbOv8=)
                          5: 3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (hash: zxuFCHqYntP0tUO7cdw2wVhD4avGubZLDOEj7q1fvV0=)
                          6: 3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa (hash: +4ZOm4dPgSuIfaBLQcJ/T2QyGeplVdpDPItb+8p1SBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:17:94:7d:94:02:d9:52:82:9e:4d:3a:f3:24:11:98:49:25:2b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
        Validity
            Not Before: Apr 15 00:34:57 2024 GMT
            Not After : Apr 16 02:44:57 2024 GMT
        Subject: CN=6CCEC5ED9C8363DFA537ADB940F1D27263A4CD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:11:d3:9e:e2:36:38:a5:d8:4b:5e:8a:51:
                    ad:a2:37:aa:a6:5b:b7:0a:ad:6e:d0:12:15:4f:6d:
                    16:5c:bf:cf:7e:11:c2:7e:89:2b:10:28:17:72:84:
                    fb:00:fd:bd:cc:9a:f8:2e:e7:77:30:e4:12:7a:16:
                    9b:21:81:7d:d7:ac:16:0f:52:2e:db:d8:87:02:36:
                    71:fb:cf:f9:ff:61:f1:f1:85:64:27:e8:4a:2f:7a:
                    4e:59:23:8c:9f:ee:8f:f3:db:9c:60:da:ae:e4:ff:
                    d9:5e:d4:50:10:ca:a7:5f:4a:e5:84:ff:5d:2a:bd:
                    f4:f0:ad:f7:6c:d7:91:a3:3e:6d:4e:df:e4:a5:48:
                    dd:0d:91:f6:9c:27:ec:85:53:aa:2f:39:dc:af:22:
                    2b:c4:27:6f:8e:4c:65:0b:e3:ec:9a:d6:76:6b:f4:
                    43:42:cf:a3:90:00:47:e5:8b:2d:67:c4:31:6f:cb:
                    49:f9:79:68:e4:fb:9b:bc:1a:7b:a8:7d:25:d1:3e:
                    e0:f7:03:58:4d:68:99:65:74:6b:6b:68:ee:39:e0:
                    7b:07:ca:d5:b2:34:f6:e4:d4:0f:ff:88:f6:c5:24:
                    4c:bd:2f:c4:6f:6b:da:7a:11:59:84:ca:8a:3e:04:
                    1b:0c:32:c0:b7:26:1a:f6:7a:96:0a:e6:c6:df:c1:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:C5:ED:9C:83:63:DF:A5:37:AD:B9:40:F1:D2:72:63:A4:CD:3A
            X509v3 Authority Key Identifier:
                keyid:B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0d:9b:8d:1d:13:b7:79:c1:27:32:b8:19:db:e9:93:e0:f0:
         5a:ae:c6:ad:a8:03:75:5a:69:2c:aa:5f:39:0e:c3:59:80:66:
         e5:27:3a:07:6d:86:71:c1:26:1e:3e:7d:0f:9f:c2:0a:86:0b:
         a1:ca:33:4f:8a:46:de:d8:6e:f0:e7:f7:1c:d5:c9:25:15:67:
         af:5e:e7:05:05:16:aa:15:93:4e:6d:c7:41:07:99:3d:be:fc:
         d6:fa:7f:49:54:a1:0a:48:c9:5e:d2:be:9e:34:a9:e5:e5:f7:
         7f:1d:c6:8f:94:61:2c:67:23:33:79:ec:e0:7e:67:9c:78:27:
         10:4e:59:56:76:bd:a2:a6:fb:e9:d2:56:3a:a9:c3:66:4a:14:
         bf:6c:bd:69:2b:e9:c5:61:95:8a:ee:bf:2f:07:14:89:9d:92:
         bb:1a:fa:e6:95:cd:78:4f:0f:8a:88:e6:c3:03:18:46:41:9a:
         0b:ea:0a:e6:9a:8f:af:d2:1b:12:62:89:52:a9:a2:e0:7c:90:
         93:84:f9:b5:8d:09:07:4b:91:c3:10:84:b1:89:0e:98:52:61:
         f0:cc:e1:b8:fd:f4:8c:63:60:d0:2c:73:31:9d:4b:f6:c7:37:
         94:0e:f8:c5:1f:a6:cd:b7:b0:e7:35:5b:cc:cb:e0:fe:73:5c:
         54:f6:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----