Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.mft
File:                     0F65E02527C7C2583942CEAED0FA68C7FFC806C0.mft (raw, json)
Hash identifier:          eXhc31BPXkaFWusxKGAgkGOuIJScg5/6vpLlx9rxJE8=
Subject key identifier:   CB:7E:9F:0A:E7:DF:8A:7F:6E:99:91:60:D5:41:7C:29:80:5F:D4:56
Authority key identifier: 0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0
Certificate issuer:       /CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
Certificate serial:       65E9DD637ED5A16B1D1C5BF0B8EA78932E8EED07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.mft
Manifest number:          2E
Signing time:             Sun 14 Apr 2024 23:18:39 +0000
Manifest this update:     Sun 14 Apr 2024 23:13:39 +0000
Manifest next update:     Tue 16 Apr 2024 00:27:39 +0000
Files and hashes:         1: 323830343a343561383a3a2f33322d3334203d3e20323636393431.roa (hash: VKmelwYW8Yagpci0QXiFP24auQd7wjnsAKlZmJ5NxUo=)
                          2: 0F65E02527C7C2583942CEAED0FA68C7FFC806C0.crl (hash: LWNutegazRXz36+Sh20SHse00BvXcEMiE72pt8aLh5Y=)
                          3: 34352e3232352e34382e302f32322d3234203d3e20323636393431.roa (hash: I3BvNkMMKdn4vPbZqOeb0sP5W9Vr56k2foIPHJuJKzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e9:dd:63:7e:d5:a1:6b:1d:1c:5b:f0:b8:ea:78:93:2e:8e:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F65E02527C7C2583942CEAED0FA68C7FFC806C0
        Validity
            Not Before: Apr 14 23:13:39 2024 GMT
            Not After : Apr 16 00:27:39 2024 GMT
        Subject: CN=CB7E9F0AE7DF8A7F6E999160D5417C29805FD456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:de:26:5f:42:77:30:06:da:d4:ef:c7:f5:
                    44:b2:b5:9e:0e:8d:02:15:4d:24:d6:b6:93:6c:2f:
                    61:16:ca:62:53:68:34:00:b3:00:57:64:24:e5:e4:
                    ed:2b:88:f7:49:08:47:46:bf:bc:07:dc:1c:15:0c:
                    7f:67:76:f7:79:df:ee:3e:bd:60:61:8f:41:00:fa:
                    1f:b2:8c:d9:1a:e3:25:bf:4d:83:14:4f:42:3d:8d:
                    7f:97:0f:40:fc:93:bf:98:0c:20:7e:77:88:5e:7a:
                    f7:b9:b1:32:1a:a7:74:3e:ba:d3:8c:7f:e0:40:8b:
                    c6:99:01:82:d4:28:46:ee:57:0d:00:8c:21:f7:33:
                    af:17:89:ff:f4:ce:c9:33:c5:e8:1a:7e:06:3f:c1:
                    0b:48:84:5e:a1:d5:e5:5a:7d:10:0d:13:09:88:e0:
                    2b:6f:1b:b8:bc:4b:f4:c2:8a:cb:a9:b3:f1:b7:aa:
                    27:c6:ce:ac:9d:83:1b:79:70:c2:8c:82:0a:ea:37:
                    bf:f8:7c:05:7f:1e:71:4e:b6:cd:87:0e:02:b8:fd:
                    13:5f:3d:05:e7:ae:73:9b:07:67:b7:05:f6:61:6f:
                    c1:2f:57:15:01:8c:0d:19:47:c8:c2:d2:4f:75:db:
                    17:b4:52:dd:b9:b6:ec:e2:7c:10:21:ed:f1:f5:18:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7E:9F:0A:E7:DF:8A:7F:6E:99:91:60:D5:41:7C:29:80:5F:D4:56
            X509v3 Authority Key Identifier:
                keyid:0F:65:E0:25:27:C7:C2:58:39:42:CE:AE:D0:FA:68:C7:FF:C8:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/0F65E02527C7C2583942CEAED0FA68C7FFC806C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:40:9f:52:6b:0c:d1:58:ce:b2:11:a8:e5:ea:34:a8:78:18:
         49:af:dc:a6:e4:3d:7f:dc:6b:e5:15:aa:db:3b:81:1c:a9:ff:
         26:12:c3:43:3c:1c:73:4d:6c:0e:94:f5:73:ff:29:6a:2c:85:
         d2:33:52:c3:29:9d:ff:82:6e:38:ab:57:dc:1e:65:3d:36:16:
         de:ff:3b:77:38:0b:42:56:8f:27:07:73:e9:84:05:99:13:88:
         54:a0:f2:0c:af:04:8d:55:38:39:6f:9a:20:f0:75:8b:03:d3:
         47:8c:c6:36:44:ed:43:09:14:ce:e9:7b:37:6a:d8:47:cc:c7:
         92:82:4c:bc:b7:2f:b0:66:f0:59:bc:de:11:cf:bd:8b:de:42:
         89:74:32:d7:3e:0a:02:72:51:6f:75:ef:5a:dd:cc:09:75:58:
         a8:51:29:41:ba:49:5b:e0:f4:f4:4e:fa:cc:d9:27:df:ff:e0:
         00:88:0d:f2:82:f7:cf:66:8c:6e:f2:c1:2f:e6:75:d0:2d:7d:
         2b:e0:dc:8b:73:ec:dc:92:a0:9e:b9:5d:3f:24:18:c4:24:de:
         d8:31:de:35:dc:79:31:62:91:bc:85:80:58:48:40:6a:43:30:
         85:ce:ca:71:37:d2:b0:a6:57:46:5f:3a:eb:93:05:ae:ec:3d:
         19:08:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----