Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzAdbcSazXq6yr4XLqxbdoB3jyG9dLM4ZhTc6R6CdnB/0/76665A9053E59A2995793914D06DDE9CAB8ABB91.mft
File:                     76665A9053E59A2995793914D06DDE9CAB8ABB91.mft (raw, json)
Hash identifier:          Is/wK9tDc856eW0Eicx7UxREX4HFY3G/Mxc/SIJevBA=
Subject key identifier:   E0:16:C7:DA:B8:19:4B:A3:52:86:27:DE:6A:7A:9F:30:6B:9A:A5:33
Authority key identifier: 76:66:5A:90:53:E5:9A:29:95:79:39:14:D0:6D:DE:9C:AB:8A:BB:91
Certificate issuer:       /CN=76665A9053E59A2995793914D06DDE9CAB8ABB91
Certificate serial:       15C3459636D39101FDFB1087CCD1E0F19C080317
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76665A9053E59A2995793914D06DDE9CAB8ABB91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzAdbcSazXq6yr4XLqxbdoB3jyG9dLM4ZhTc6R6CdnB/0/76665A9053E59A2995793914D06DDE9CAB8ABB91.mft
Manifest number:          0239
Signing time:             Mon 15 Apr 2024 11:13:43 +0000
Manifest this update:     Mon 15 Apr 2024 11:08:43 +0000
Manifest next update:     Tue 16 Apr 2024 12:04:43 +0000
Files and hashes:         1: 323830343a376633303a376230303a3a2f34302d3430203d3e20323731363732.roa (hash: k1pyACUNhFdueyyuuzxHJsCObEaSJOU0trSLCQnTcUM=)
                          2: 3137372e3130352e3139362e302f32322d3232203d3e20323731363732.roa (hash: Tc9e7S4WAVUlNhg4/TbvDTGjWYxaYPCblJfcwupLYoA=)
                          3: 323830343a376633303a666630303a3a2f34302d3430203d3e20323731363732.roa (hash: pK9couxz2ABL/L/FaBK7ReMttVUypSs//Wb3Q1/mGak=)
                          4: 76665A9053E59A2995793914D06DDE9CAB8ABB91.crl (hash: oc1yUiz0rkeBzo9GTqxOceUmzdu67EczSceMin5GgLY=)
                          5: 323830343a376633303a3a2f33322d3332203d3e20323731363732.roa (hash: tE/TgnjjetQ4dNFPD05shTTw5V8tQDcmSq/cnrVUcuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c3:45:96:36:d3:91:01:fd:fb:10:87:cc:d1:e0:f1:9c:08:03:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76665A9053E59A2995793914D06DDE9CAB8ABB91
        Validity
            Not Before: Apr 15 11:08:43 2024 GMT
            Not After : Apr 16 12:04:43 2024 GMT
        Subject: CN=E016C7DAB8194BA3528627DE6A7A9F306B9AA533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:0e:bc:bb:09:de:23:1b:1b:e7:f6:57:cc:
                    7d:31:fd:c8:7c:a4:ca:a3:37:28:65:2b:59:27:d3:
                    b1:8d:57:b0:97:18:89:5c:32:e9:20:40:89:ad:88:
                    ba:26:c9:28:1d:e3:13:2c:49:fb:be:9e:60:18:63:
                    98:c3:2e:d0:c1:74:35:33:e8:0e:e4:e6:ea:0f:a9:
                    a1:a0:f8:20:1b:97:bd:8e:71:54:71:d1:71:7f:7c:
                    91:94:e3:19:46:b8:18:d4:eb:23:11:4f:ae:7a:8c:
                    1d:1f:8e:34:0f:5f:3a:ba:76:69:8c:9c:c0:67:e8:
                    2f:7e:a2:c5:fa:52:65:2a:68:5a:8e:08:3f:35:5b:
                    e8:4d:ed:44:90:bc:e6:87:34:42:9c:e5:1d:0d:42:
                    72:dc:2b:90:b2:79:5b:6e:db:f1:49:97:7f:fe:cc:
                    95:aa:eb:59:6e:c2:3e:78:a6:ff:74:33:cf:a6:21:
                    3f:46:de:c9:83:bc:16:f7:8c:5f:f5:c3:88:1f:de:
                    22:a2:a1:a5:20:39:aa:73:c5:c5:7c:55:8f:52:4a:
                    44:8e:1c:a1:e5:26:51:e5:e8:b6:52:9d:3f:62:6c:
                    03:c9:be:0c:c2:f5:7f:f5:1f:1d:92:2f:59:17:3e:
                    fd:6b:9e:04:28:d1:1a:91:63:57:8e:38:66:21:6b:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:16:C7:DA:B8:19:4B:A3:52:86:27:DE:6A:7A:9F:30:6B:9A:A5:33
            X509v3 Authority Key Identifier:
                keyid:76:66:5A:90:53:E5:9A:29:95:79:39:14:D0:6D:DE:9C:AB:8A:BB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzAdbcSazXq6yr4XLqxbdoB3jyG9dLM4ZhTc6R6CdnB/0/76665A9053E59A2995793914D06DDE9CAB8ABB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76665A9053E59A2995793914D06DDE9CAB8ABB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzAdbcSazXq6yr4XLqxbdoB3jyG9dLM4ZhTc6R6CdnB/0/76665A9053E59A2995793914D06DDE9CAB8ABB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:3e:ae:cf:f3:88:da:fc:89:e0:14:9a:bd:61:fd:0a:4f:
         c1:ba:d0:36:b2:01:57:cd:5c:9a:1f:70:bb:e2:bf:72:ba:0b:
         96:ee:29:49:88:86:5d:18:72:ef:e4:04:a3:8e:4a:91:84:01:
         e4:e1:b2:78:f8:4a:03:91:58:76:06:0e:e5:8b:4e:cb:9c:d8:
         32:25:a5:a0:20:55:fc:29:93:c2:26:dc:cf:c4:6d:24:e0:4c:
         bc:dd:77:be:b0:63:e6:10:f8:2a:10:90:fe:00:d5:9f:dc:cc:
         b5:0e:66:c2:87:4f:77:00:3e:4b:ec:c2:be:31:91:30:fe:0a:
         34:62:a3:9a:77:7f:48:a6:e1:e2:be:6e:5f:a6:44:6d:7a:0b:
         65:2d:33:58:83:ba:10:85:78:5b:0e:5b:e6:ce:12:d8:48:3c:
         8f:35:ba:4d:ad:19:84:51:f5:de:d4:eb:21:27:3e:37:6a:30:
         8c:5e:b9:e7:c3:4e:ff:ed:1a:c9:ac:c9:89:6f:26:52:57:0d:
         db:97:9d:7d:10:4e:fa:eb:31:dc:e2:a6:f5:b4:c1:19:b8:fd:
         c1:3c:17:88:ca:6d:eb:65:ca:5a:3a:55:64:dc:40:4b:2f:d5:
         0c:0c:24:d3:1c:a9:60:0b:27:f7:b5:e2:50:19:5b:31:f9:c4:
         ca:37:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----