Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.mft
File:                     991F9EF30E0F0974AA97C60E2654F0833FACCA1B.mft (raw, json)
Hash identifier:          6vr+ebVnH7eagavLQUCVtIMuod1yqfSWNjuuZm6gxbE=
Subject key identifier:   CC:CE:ED:11:80:72:E3:82:B4:4F:3C:AF:6F:59:2F:4E:57:A4:B8:5E
Authority key identifier: 99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B
Certificate issuer:       /CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
Certificate serial:       2D0D3A10F0773A228E663951180E02FB68EA90E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.mft
Manifest number:          0D
Signing time:             Sun 14 Apr 2024 17:45:55 +0000
Manifest this update:     Sun 14 Apr 2024 17:40:55 +0000
Manifest next update:     Mon 15 Apr 2024 19:34:55 +0000
Files and hashes:         1: 991F9EF30E0F0974AA97C60E2654F0833FACCA1B.crl (hash: qUd1tf30vArRh3iMQ6sv5cUkZgX0fPSleBCL4aMVL24=)
                          2: 3139312e362e3136362e302f32342d3234203d3e20323633313634.roa (hash: H60kxojK7jBL/HTJDgMW+/MJzRBB3lNT0CoseSfCJkc=)
                          3: 3139312e362e3136342e302f32342d3234203d3e20323633313634.roa (hash: 2JCGfGbBECPT0TX9m4LXunEdinvsbFTrHyFocvFxo5I=)
                          4: 323830343a313761633a3a2f33322d3332203d3e20323633313634.roa (hash: DjmtpYNoEICsakt7fGthlOWvfjKsdyUbDy0Onuea3BE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0d:3a:10:f0:77:3a:22:8e:66:39:51:18:0e:02:fb:68:ea:90:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991F9EF30E0F0974AA97C60E2654F0833FACCA1B
        Validity
            Not Before: Apr 14 17:40:55 2024 GMT
            Not After : Apr 15 19:34:55 2024 GMT
        Subject: CN=CCCEED118072E382B44F3CAF6F592F4E57A4B85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:45:14:ac:bd:a9:2e:f0:ed:2a:d8:b2:62:
                    0f:c5:44:d7:c4:95:78:0e:62:85:7e:8e:ca:50:aa:
                    bb:60:0e:e5:70:64:c1:2a:d6:ef:36:64:9e:89:54:
                    7a:71:ad:44:c8:c4:a0:71:f7:a1:78:6d:0d:56:a3:
                    db:61:89:b9:32:ac:27:0e:0f:d1:39:8d:a0:05:eb:
                    56:de:6d:26:25:0c:0d:e8:b8:59:a3:f9:a2:3c:55:
                    81:1d:e5:7d:72:79:1b:f5:64:e9:f8:d6:ed:02:2d:
                    ae:10:93:f7:2c:ff:a9:9b:16:4d:f8:63:9d:93:a1:
                    a9:e9:d9:12:40:79:dc:14:ea:2f:8c:9b:54:b4:6a:
                    68:76:c2:cb:2c:8d:f0:42:b7:60:d1:79:81:16:20:
                    44:4a:7a:50:e4:32:a7:ec:dd:ba:74:d2:ee:54:9f:
                    e4:9d:53:74:c9:6d:57:39:46:92:e9:f0:cb:1a:34:
                    fa:e8:90:ef:f9:d2:af:c8:d4:b1:a1:77:33:cc:e0:
                    15:4b:6a:9d:d0:97:c8:dc:03:eb:29:a0:af:4e:38:
                    61:13:a0:92:f2:1d:49:5f:8a:e9:a3:c5:db:86:ea:
                    30:92:bf:46:28:ba:5e:29:06:73:ed:29:52:d4:03:
                    b1:4a:65:39:ae:f3:93:ea:84:d0:d3:3f:a3:fb:6e:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CE:ED:11:80:72:E3:82:B4:4F:3C:AF:6F:59:2F:4E:57:A4:B8:5E
            X509v3 Authority Key Identifier:
                keyid:99:1F:9E:F3:0E:0F:09:74:AA:97:C6:0E:26:54:F0:83:3F:AC:CA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuH6kJE8VHhxxXVU6o7BKDweuKCKLhXjbBaGe1PtxLD/1/991F9EF30E0F0974AA97C60E2654F0833FACCA1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:25:a0:42:61:28:5a:06:8d:31:a1:2a:e2:47:14:66:8d:cd:
         e7:0e:89:2d:ab:f1:c4:cb:7f:34:b6:a0:f2:c7:65:74:65:50:
         c0:d6:9a:dd:9d:c5:24:a0:e2:a2:5a:7f:e1:6c:71:df:cc:c7:
         c6:20:12:f4:71:a1:9a:9f:4b:b2:7f:2a:c5:37:56:09:f2:c2:
         6f:23:0a:d9:1f:9b:3b:1d:65:7b:a3:a6:ec:c7:19:1c:2f:f5:
         9e:20:56:1b:1b:95:eb:c9:2f:dc:58:fd:50:ac:26:13:c2:43:
         77:e7:d3:a1:2b:02:17:de:ca:06:58:9f:76:52:5f:e2:36:be:
         a3:18:e7:b8:8c:23:11:6b:9d:85:b2:d0:3c:a3:12:d3:07:df:
         be:9a:b3:1c:52:45:15:16:2a:a3:82:09:9f:8e:54:70:60:be:
         e9:ba:5d:46:67:33:be:60:15:71:91:33:76:04:e3:d5:2c:0c:
         34:b7:7a:2a:70:46:0b:fc:5c:4a:14:c5:ed:5f:62:8a:92:24:
         f1:0e:11:eb:43:af:15:5d:16:cb:c9:a2:dc:f0:77:55:ef:f4:
         ad:41:8c:5e:76:69:81:74:9e:12:04:22:20:cb:be:c6:0d:fb:
         e4:10:33:a9:dd:dd:86:30:6f:a6:34:58:d1:6e:d4:0e:fb:88:
         0d:46:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----