Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.mft
File:                     7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.mft (raw, json)
Hash identifier:          qb8FnvgjXZe2BglJUR9TtfohbUFtysV3cj6pm0942kc=
Subject key identifier:   C3:A4:36:0E:06:BA:02:A4:1A:CD:C0:29:ED:72:2C:10:70:F4:60:84
Authority key identifier: 7B:C1:0D:9F:0E:45:32:BA:A0:67:57:A3:5D:94:46:ED:8B:31:CE:82
Certificate issuer:       /CN=7BC10D9F0E4532BAA06757A35D9446ED8B31CE82
Certificate serial:       795ED6AFB5763AACB3E9D5DD8F0A1252F2E9A82F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.mft
Manifest number:          01F9
Signing time:             Sun 14 Apr 2024 19:50:00 +0000
Manifest this update:     Sun 14 Apr 2024 19:45:00 +0000
Manifest next update:     Mon 15 Apr 2024 19:50:00 +0000
Files and hashes:         1: AS28343.roa (hash: N7HhFyZp5HGZrHhNdMEjoOtt8EKr7XwV2LkuRGrPZzQ=)
                          2: 7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.crl (hash: VCZi+7QiZkKm0Wvd6j6RAmf2CWL3XfUF1lmuvFkfTJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5e:d6:af:b5:76:3a:ac:b3:e9:d5:dd:8f:0a:12:52:f2:e9:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BC10D9F0E4532BAA06757A35D9446ED8B31CE82
        Validity
            Not Before: Apr 14 19:45:00 2024 GMT
            Not After : Apr 15 19:50:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:32:d1:ea:a0:c1:99:8f:92:1c:7b:4f:55:ac:
                    77:4c:71:8f:ee:80:88:25:21:6a:fe:ad:c0:32:58:
                    af:1e:d1:f2:a9:14:7f:2c:85:8f:93:82:bd:42:70:
                    2c:ce:36:d8:17:1b:c3:47:5d:07:e5:b1:b1:67:74:
                    82:60:12:88:9c:15:3f:ca:66:6c:4c:f7:b1:48:73:
                    e0:23:b9:57:b7:b1:20:04:b7:9d:26:e2:e1:73:d4:
                    da:6c:6e:37:a0:6f:72:09:d4:64:d3:1b:b5:ec:5a:
                    72:d4:00:4d:c9:98:1b:05:1a:69:7e:95:9a:a0:54:
                    22:5a:1e:47:27:15:0a:8e:47:75:d0:aa:fa:21:e9:
                    54:a2:a1:c9:90:71:bf:75:ef:94:6a:6b:2b:21:98:
                    95:2b:fa:88:0d:2a:fc:89:aa:65:7b:a2:27:b7:f8:
                    19:1c:92:60:f5:5d:30:89:8e:d0:3d:09:8b:72:d7:
                    fe:c3:92:a1:74:8c:07:60:38:71:27:02:2c:f8:03:
                    1e:b6:a0:98:42:20:13:95:34:cf:8e:ff:52:7f:4f:
                    ff:fa:51:72:c1:29:cf:8c:48:aa:76:67:c5:43:f3:
                    90:6d:d2:d7:79:7f:b3:0b:c8:0e:18:a7:d5:a5:00:
                    d2:1d:03:dc:e0:01:9c:c5:82:8a:d8:b0:40:c9:65:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A4:36:0E:06:BA:02:A4:1A:CD:C0:29:ED:72:2C:10:70:F4:60:84
            X509v3 Authority Key Identifier:
                keyid:7B:C1:0D:9F:0E:45:32:BA:A0:67:57:A3:5D:94:46:ED:8B:31:CE:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/7BC10D9F0E4532BAA06757A35D9446ED8B31CE82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b3:76:98:3e:98:74:ee:da:86:14:42:f2:bd:66:80:3f:9f:
         25:0e:b5:fa:42:46:e6:40:8e:bc:3b:f2:31:d3:d6:4f:ab:15:
         a3:a4:86:4d:76:30:05:99:73:22:ed:a0:f2:06:d3:fa:a0:1f:
         7c:75:af:17:47:03:ea:4e:c2:9d:73:4f:0d:b2:15:a6:17:fb:
         c0:38:0c:42:45:0e:71:f7:25:17:b2:26:bf:be:da:86:2b:55:
         5e:c1:9e:ea:25:a2:6f:8f:c0:ae:9d:87:6d:2b:70:d6:57:3b:
         33:50:bc:bd:96:de:16:da:5f:5e:6d:3b:31:92:c0:a4:8c:b7:
         23:5e:da:a6:37:45:7d:57:a7:71:ad:b7:fa:42:c4:fb:ec:d1:
         2c:00:f8:dc:cd:2e:53:e0:25:94:65:a1:da:b3:84:55:83:57:
         f3:85:61:13:73:7e:4f:83:6f:6c:33:da:df:ae:82:c4:95:24:
         76:c6:9d:cb:11:c4:d5:0d:18:34:22:11:ba:b8:17:22:f7:7b:
         2a:f7:85:3e:d4:5b:d5:78:71:8e:76:eb:7d:4a:84:30:4b:4e:
         a7:f1:ba:0e:77:de:c7:31:4b:9e:01:3c:f1:c6:32:96:b1:3a:
         ca:84:2f:9d:5c:cf:e0:ee:a4:e7:55:19:84:1c:d5:0b:e4:b5:
         f6:db:6d:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----