Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.mft
File:                     F54AF77B19B9B7EB0E281E779779F2742EABB361.mft (raw, json)
Hash identifier:          eEq5P5YgeAn/xXp5yWb0jjPxWVvpgkd+SuWheD+86aQ=
Subject key identifier:   25:70:7D:E9:21:30:AF:02:2F:61:8C:2D:D9:FF:23:BA:34:B3:C0:5F
Authority key identifier: F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61
Certificate issuer:       /CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
Certificate serial:       2C7B68C59A3115DAACD44AA2B18D4854F5BDBBD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.mft
Manifest number:          016D
Signing time:             Sun 14 Apr 2024 17:33:59 +0000
Manifest this update:     Sun 14 Apr 2024 17:28:59 +0000
Manifest next update:     Mon 15 Apr 2024 21:21:59 +0000
Files and hashes:         1: 3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa (hash: z870d2izUj+byIOJ3EcVpZFacLNSq3ruEt+LNAS9uPE=)
                          2: 3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa (hash: tNYTLsVFmRptvXaVSFf6E2eB07V+ldKjDyqCT34laLE=)
                          3: 323830343a6566383a3a2f33322d313238203d3e20323632333032.roa (hash: UqLEDS9rc44ayA280wtto3/3l+ED8VHf3koI1gjkUpc=)
                          4: 3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa (hash: PGDHPymEd+oCKEINeFY7gwe6jiyXExhew7oIKCkC7GE=)
                          5: F54AF77B19B9B7EB0E281E779779F2742EABB361.crl (hash: q2U/a3s7wWyfResuww6YVzOUA70zWCAhW2ZLszgdX/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7b:68:c5:9a:31:15:da:ac:d4:4a:a2:b1:8d:48:54:f5:bd:bb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
        Validity
            Not Before: Apr 14 17:28:59 2024 GMT
            Not After : Apr 15 21:21:59 2024 GMT
        Subject: CN=25707DE92130AF022F618C2DD9FF23BA34B3C05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:31:ab:ca:90:1e:e3:e3:3c:21:71:68:da:
                    c0:2d:dd:33:dd:e7:ce:c5:0c:d5:75:4f:f9:b4:6d:
                    cf:7f:71:b2:93:7e:2b:a6:b9:28:95:de:fb:ca:a8:
                    1c:48:ee:4f:af:22:68:d1:7c:eb:ff:c8:7d:5c:95:
                    f5:e8:7a:e2:9f:c2:50:37:78:04:12:44:a2:a6:80:
                    e5:a5:e7:34:77:e0:71:71:6b:22:76:8e:db:aa:08:
                    ef:29:dc:41:52:d2:44:b8:5a:94:a2:17:61:20:56:
                    df:ad:26:1d:15:17:14:59:01:39:4a:17:e3:e4:68:
                    dd:55:53:4d:a2:8b:cb:dc:b5:98:cf:a8:bd:ad:32:
                    12:0f:c6:a4:89:ce:02:9e:19:db:6c:7e:a4:cf:30:
                    70:ed:3b:02:33:d8:d5:e4:b1:6b:64:39:9c:a0:27:
                    ab:68:45:0a:21:53:cf:ab:eb:3b:a4:22:b6:5e:06:
                    d7:d1:35:88:19:71:a4:d0:c1:9a:f3:39:49:6c:54:
                    36:30:5d:3e:38:09:5b:a6:42:39:81:26:26:08:77:
                    0b:58:3d:fe:55:ab:e0:76:6e:7d:82:52:47:1a:9a:
                    38:d5:51:7d:f2:99:ac:30:9f:14:1f:83:e0:28:d4:
                    2e:84:15:35:48:ba:b0:96:bf:3f:0c:1f:5e:2b:8e:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:7D:E9:21:30:AF:02:2F:61:8C:2D:D9:FF:23:BA:34:B3:C0:5F
            X509v3 Authority Key Identifier:
                keyid:F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:c3:d8:39:6d:44:e1:c6:e4:d1:b4:97:a3:52:6c:8d:64:
         13:a6:cc:19:74:c9:78:4b:7f:15:aa:c6:89:cb:f2:7a:fe:44:
         1b:90:3d:14:1f:71:f4:de:c5:b2:c7:76:3d:d6:eb:4f:36:27:
         a3:73:f0:19:82:fd:0b:31:cb:3e:f7:e8:a0:5a:00:81:50:66:
         03:fe:9f:53:06:c6:1c:3d:f5:8c:a5:0d:ba:c2:c7:35:df:d0:
         fa:cb:bf:2c:19:71:b3:e3:89:46:83:70:c6:d0:bb:d2:7a:e4:
         0c:4d:3b:b6:51:ae:4b:8c:e6:9e:c4:a5:73:a1:98:a6:68:ff:
         c6:59:4e:47:68:61:8f:90:3c:bc:5f:50:b6:51:3f:f0:14:fe:
         32:62:27:0d:45:1c:2a:d3:43:b3:af:88:3a:45:eb:7f:11:d8:
         0e:26:dd:6d:b9:d2:28:03:06:aa:d2:a4:12:0a:e7:2e:d7:aa:
         2a:13:2e:10:a6:5b:0b:99:ab:54:59:c8:e8:4f:ed:71:e4:d0:
         f4:2a:f5:ef:09:5f:54:55:fd:82:33:0a:db:ab:84:75:fc:c1:
         f4:dc:de:a2:90:7a:84:ad:88:61:59:2e:eb:4b:21:ed:92:51:
         f0:49:19:d4:73:8c:86:40:cf:d2:6c:a4:14:2b:55:a7:e6:11:
         ae:48:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----