Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/89C326AE20D479ABE2624255309D2F687FA31537.mft
File:                     89C326AE20D479ABE2624255309D2F687FA31537.mft (raw, json)
Hash identifier:          D7nzQmhuecNxB28WFTMPEsQqhXYud2IhPt03hr97Q7g=
Subject key identifier:   76:2A:33:BD:26:23:80:DA:06:F5:CE:DE:BC:EE:78:D8:23:14:A2:1A
Authority key identifier: 89:C3:26:AE:20:D4:79:AB:E2:62:42:55:30:9D:2F:68:7F:A3:15:37
Certificate issuer:       /CN=89C326AE20D479ABE2624255309D2F687FA31537
Certificate serial:       7C3BD480BF62D59EC88BA082BD0CC13945F9EE41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89C326AE20D479ABE2624255309D2F687FA31537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/89C326AE20D479ABE2624255309D2F687FA31537.mft
Manifest number:          033F
Signing time:             Mon 15 Apr 2024 10:38:00 +0000
Manifest this update:     Mon 15 Apr 2024 10:33:00 +0000
Manifest next update:     Tue 16 Apr 2024 10:38:00 +0000
Files and hashes:         1: 34352e3138392e3232382e302f32322d3332203d3e20323639363132.roa (hash: veZNV+y5dwaOo/ymL1EpMs6T+Cx6XSO41/IXUDGIpbY=)
                          2: 323830343a363733343a3a2f33322d313238203d3e20323639363132.roa (hash: hGxNMtD2CjAT80McYg2LX5UkvZhnPuXSYQSlDngQwoo=)
                          3: 89C326AE20D479ABE2624255309D2F687FA31537.crl (hash: xoYvfmzt5iebDeoV+fVHaEav6DixvI/62fKIGijf9uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3b:d4:80:bf:62:d5:9e:c8:8b:a0:82:bd:0c:c1:39:45:f9:ee:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C326AE20D479ABE2624255309D2F687FA31537
        Validity
            Not Before: Apr 15 10:33:00 2024 GMT
            Not After : Apr 16 10:38:00 2024 GMT
        Subject: CN=762A33BD262380DA06F5CEDEBCEE78D82314A21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:9b:d3:fe:21:02:c7:bc:3f:e2:95:0c:c3:
                    b9:29:33:87:d8:a9:75:11:10:66:6b:8b:3c:2c:90:
                    4d:a7:f0:42:2f:1b:c3:71:80:9e:46:1d:f6:fc:ea:
                    8a:0f:ad:47:1a:ff:c6:e4:67:00:05:1e:92:e3:24:
                    cd:26:f6:96:b0:e1:57:46:33:ae:cb:7f:ea:2e:f5:
                    fe:ba:dd:c6:e8:24:3b:f8:c2:73:fb:49:fb:1d:1f:
                    0b:0f:db:22:bc:11:5f:67:bc:5d:db:47:7e:c4:88:
                    64:77:ef:53:c5:82:f9:f9:41:6c:f9:58:93:c6:15:
                    5d:29:f3:e0:37:2a:b1:a4:a8:7f:d1:8c:05:81:10:
                    c3:66:84:2b:5e:b2:e8:93:24:e1:cb:c9:e6:83:08:
                    63:16:77:47:42:65:bf:e4:45:13:4e:5f:3e:5c:8e:
                    6b:2f:a7:f8:10:78:73:cb:c1:a4:11:c4:f1:2e:7f:
                    ed:13:0f:15:02:33:fc:49:15:11:f0:38:45:5b:2d:
                    1d:db:1f:88:b8:88:82:3b:a7:93:cd:95:e7:40:54:
                    d1:a7:0a:17:00:ea:85:b3:21:3c:b9:16:3d:75:90:
                    8c:58:57:d5:e8:41:c2:2b:68:46:b1:83:ed:00:72:
                    d8:6d:49:0c:32:83:b4:44:3b:74:21:f3:dd:76:83:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2A:33:BD:26:23:80:DA:06:F5:CE:DE:BC:EE:78:D8:23:14:A2:1A
            X509v3 Authority Key Identifier:
                keyid:89:C3:26:AE:20:D4:79:AB:E2:62:42:55:30:9D:2F:68:7F:A3:15:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/89C326AE20D479ABE2624255309D2F687FA31537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89C326AE20D479ABE2624255309D2F687FA31537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/89C326AE20D479ABE2624255309D2F687FA31537.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:1e:3c:18:a0:32:9e:8f:77:6d:ac:ab:f8:cf:14:7e:5c:
         4f:34:e0:3f:35:fa:89:2f:df:15:91:1a:8a:2d:e3:d9:36:63:
         8c:4c:66:98:4a:37:8f:f4:4c:2b:3c:f2:1e:1f:10:84:6a:15:
         26:47:9f:7b:3a:55:11:4e:a4:0c:a5:05:6c:b1:18:c5:89:7c:
         be:a4:0a:ca:4c:4f:86:19:b0:01:95:35:b7:43:6d:83:f4:94:
         37:c9:b2:b9:29:ed:95:85:64:84:51:b3:91:49:3b:1a:d0:fa:
         03:7e:f5:ce:2d:f3:0c:75:29:5e:c4:57:f5:f4:e2:49:0c:5f:
         bd:2e:4f:5c:9d:48:65:50:b3:cf:72:16:02:4d:c7:f5:69:36:
         89:d2:97:23:15:a0:b1:e1:d1:d8:98:cf:11:7c:60:ed:96:62:
         93:a9:7d:52:85:53:52:33:87:0e:b8:8e:cc:73:96:cf:28:15:
         98:8c:08:0c:5a:c6:6b:ac:b4:63:26:e2:31:19:9c:1c:ab:c4:
         de:21:98:be:80:55:9d:a4:91:5f:9a:ff:14:d6:1b:e5:29:83:
         92:d3:a3:37:aa:d6:9b:30:1b:d2:a2:15:bf:c0:78:da:1b:1c:
         a0:f0:fd:96:54:ca:b0:96:03:38:9c:ef:54:c8:1e:a9:df:69:
         c1:9f:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----