Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/A12218271B6A0EFA582616B7B5840154C85661CE.mft
File:                     A12218271B6A0EFA582616B7B5840154C85661CE.mft (raw, json)
Hash identifier:          XDB4oV8SaASHHzbjASaLpn4E3Qqy6E0shssAuqeGnug=
Subject key identifier:   90:29:76:37:F1:48:F1:5C:D3:E7:4C:07:31:DE:07:80:0E:64:C3:7D
Authority key identifier: A1:22:18:27:1B:6A:0E:FA:58:26:16:B7:B5:84:01:54:C8:56:61:CE
Certificate issuer:       /CN=A12218271B6A0EFA582616B7B5840154C85661CE
Certificate serial:       4D4ECFF2F35D611929539FFB2B03EC0AEA5F94C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12218271B6A0EFA582616B7B5840154C85661CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/A12218271B6A0EFA582616B7B5840154C85661CE.mft
Manifest number:          56
Signing time:             Mon 15 Apr 2024 06:33:38 +0000
Manifest this update:     Mon 15 Apr 2024 06:28:38 +0000
Manifest next update:     Tue 16 Apr 2024 07:25:38 +0000
Files and hashes:         1: 34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa (hash: vViiTPkRMtKpT9P2mw52/A2hrrQ49hanmKrjIqhhce8=)
                          2: A12218271B6A0EFA582616B7B5840154C85661CE.crl (hash: tOSWoPbKprjPxXxBGd5l89fVjlztU32ImqdJRWZOon8=)
                          3: 323830343a353964343a3a2f33322d3438203d3e20323638373238.roa (hash: Muum7cQk7UQDOn8pQ88GQa55lW1ITWIe6tQvPIjEIS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4e:cf:f2:f3:5d:61:19:29:53:9f:fb:2b:03:ec:0a:ea:5f:94:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12218271B6A0EFA582616B7B5840154C85661CE
        Validity
            Not Before: Apr 15 06:28:38 2024 GMT
            Not After : Apr 16 07:25:38 2024 GMT
        Subject: CN=90297637F148F15CD3E74C0731DE07800E64C37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:2d:c6:2b:74:f5:01:a2:f9:ee:6f:bb:fb:
                    84:14:42:7c:eb:ac:e2:71:83:a0:c7:01:f3:c5:e0:
                    90:72:e3:70:07:57:b9:e8:d6:54:a0:b8:4d:b3:43:
                    bb:cf:f1:52:22:87:24:54:84:8b:b7:f5:05:bb:ec:
                    74:6e:ca:c4:44:92:f8:69:07:9a:36:a3:85:74:d6:
                    04:c3:d6:57:a4:65:cf:0f:0c:15:3b:e1:a5:55:39:
                    af:66:c2:a1:eb:6a:82:ba:50:d2:62:f4:54:98:e4:
                    30:80:c5:55:18:ba:a8:f1:cb:d2:c4:bc:4b:fb:79:
                    fe:98:65:15:34:ab:ce:eb:8f:6b:4d:13:3f:2e:44:
                    2c:a1:1d:0e:62:2e:0e:a2:9b:66:c2:75:91:e1:a8:
                    cc:eb:3f:67:d3:39:b4:db:31:50:8e:7f:1c:2c:c3:
                    43:cd:2d:88:d8:21:cc:ea:44:ff:c3:d6:2b:c0:13:
                    5e:a3:84:e7:ce:ec:48:f7:94:84:c1:ea:f1:e5:5e:
                    b9:09:42:c4:10:19:69:f3:c6:18:e9:88:09:89:b3:
                    4c:4b:6b:1d:f3:1a:ee:92:06:6d:ff:1a:38:3a:24:
                    d5:45:01:13:77:cd:16:41:56:91:69:29:83:de:db:
                    5e:7d:be:c8:2e:1d:2d:e7:55:e3:7f:c7:2c:e1:e4:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:76:37:F1:48:F1:5C:D3:E7:4C:07:31:DE:07:80:0E:64:C3:7D
            X509v3 Authority Key Identifier:
                keyid:A1:22:18:27:1B:6A:0E:FA:58:26:16:B7:B5:84:01:54:C8:56:61:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/A12218271B6A0EFA582616B7B5840154C85661CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12218271B6A0EFA582616B7B5840154C85661CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/A12218271B6A0EFA582616B7B5840154C85661CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:04:53:69:43:8c:00:2e:73:23:90:36:63:df:fb:87:8e:
         f9:6f:c2:0c:fb:52:9c:8a:03:e0:47:e3:ff:c1:b6:62:cd:58:
         da:1a:7c:88:f2:a5:d1:65:21:5e:54:9f:02:af:32:ec:5d:f0:
         2c:07:d4:16:cf:4f:c1:96:42:52:47:86:4f:a9:f5:df:1c:bc:
         c3:fd:a1:c1:30:77:e1:76:fa:44:a8:3f:0e:a9:c6:7a:56:25:
         a5:fa:a1:dc:40:8e:e6:c0:be:49:8a:b3:e9:07:f0:d7:a9:bc:
         48:c8:cf:50:39:d2:7b:c8:7b:f4:0b:83:ea:23:f9:d4:aa:91:
         29:96:82:d4:96:c4:6c:1d:bc:14:ff:fc:2b:4c:09:0d:2a:e5:
         69:96:f9:b2:09:37:e6:f2:48:50:d3:72:81:10:00:7a:b7:5c:
         27:e1:66:33:92:cc:7e:19:d5:3b:fc:88:5d:7d:cf:d1:b4:95:
         00:7f:da:1f:8f:2d:10:f0:f5:f9:bf:ef:bf:46:b9:aa:43:ef:
         79:c3:df:20:70:e4:7c:07:0e:ac:0a:0e:c5:f6:0b:48:6c:fe:
         da:57:59:4d:0e:e1:45:cb:ef:92:8e:8d:cc:63:06:ee:6a:d2:
         e9:c6:c9:48:dc:3c:21:74:af:67:88:db:cb:3a:ee:51:b0:7f:
         d7:f3:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----