Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.mft
File:                     7D024D482794E0E96397A274EC4071AD93013B55.mft (raw, json)
Hash identifier:          W2HEMjFyA37HK+eEwKU6iTU5jbpX1cGI4aV9J2rY/nE=
Subject key identifier:   9A:C2:15:5E:8A:D8:BE:D9:F4:00:9E:1E:94:18:5D:C3:75:8D:57:B3
Authority key identifier: 7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55
Certificate issuer:       /CN=7D024D482794E0E96397A274EC4071AD93013B55
Certificate serial:       0EC00DA3B217AB0691410464815458A99C10BAEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.mft
Manifest number:          01D1
Signing time:             Mon 15 Apr 2024 09:41:40 +0000
Manifest this update:     Mon 15 Apr 2024 09:36:40 +0000
Manifest next update:     Tue 16 Apr 2024 11:10:40 +0000
Files and hashes:         1: 3133382e3138352e3133312e302f32342d3234203d3e20323633393134.roa (hash: Av6bJvAEp4vb9VdaUN/pYbLgVypiQR7QS5PZLM3xJXg=)
                          2: 3133382e3138352e3132382e302f32342d3234203d3e20323633393134.roa (hash: SlWVU49H5c1j5ubHVRqMREuTBAuGfE3GEQDfAEv9fsA=)
                          3: 3133382e3138352e3132382e302f32322d3232203d3e20323633393134.roa (hash: 0lJPSDK5pK3EJAezY/Q1mSexRu6fMB1ULCiKo69UHLI=)
                          4: 3133382e3138352e3132392e302f32342d3234203d3e20323633393134.roa (hash: Q78lWpSz25fbXt129D9wxFRNIW2L54097D6yta0N7E0=)
                          5: 3133382e3138352e3133302e302f32332d3234203d3e20323633393134.roa (hash: Hr4vtcc1ypnPsqkojQfayYlFYfTU6rhqqXPRj2dBz3A=)
                          6: 323830343a323761343a3a2f33322d3430203d3e20323633393134.roa (hash: 0HWZ1hOTv/VhmbUYr5scF8wBkJPxx7rgAkln/25K8GY=)
                          7: 7D024D482794E0E96397A274EC4071AD93013B55.crl (hash: u+kiZapX+mIBVrbtKA3I04gR9ZOG91OkElqi8pYmq0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:0d:a3:b2:17:ab:06:91:41:04:64:81:54:58:a9:9c:10:ba:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D024D482794E0E96397A274EC4071AD93013B55
        Validity
            Not Before: Apr 15 09:36:40 2024 GMT
            Not After : Apr 16 11:10:40 2024 GMT
        Subject: CN=9AC2155E8AD8BED9F4009E1E94185DC3758D57B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:d3:a9:65:a9:79:11:34:a4:a0:a6:7c:4f:
                    c0:eb:d7:16:a0:73:15:6f:fe:97:38:c0:f6:6f:41:
                    e2:05:95:88:ff:6f:57:de:f9:b1:95:4d:d6:70:23:
                    cc:03:1b:ab:ec:2a:14:0f:38:8c:9a:bb:7f:ec:29:
                    b9:e2:ab:98:52:9d:c4:13:d2:0a:5c:18:97:54:d6:
                    e0:86:71:0c:52:57:63:f0:bf:33:27:e3:ce:1d:de:
                    f3:a8:0a:c8:d4:35:25:2f:72:b0:81:65:f0:ed:42:
                    e9:49:39:e7:26:76:eb:9d:69:e6:ef:5d:9f:5b:28:
                    f2:d4:62:ef:f5:74:84:63:a1:e4:12:a2:a3:88:d8:
                    19:0f:e4:b1:46:4d:27:4b:a2:04:a9:68:1e:fc:59:
                    57:c1:bf:95:10:0f:8f:94:29:72:7c:75:c9:95:95:
                    fb:28:ef:e6:e0:c5:e1:cd:5a:83:e4:a5:d8:b0:dd:
                    04:69:19:9a:2d:fa:88:04:2b:57:ca:7c:50:4d:73:
                    d0:c0:90:67:59:1c:8f:3a:45:62:26:e3:05:cb:b3:
                    58:3e:12:90:15:87:41:14:67:c7:e1:94:86:bf:1c:
                    7b:d0:a6:66:96:e0:09:6d:62:c2:4b:82:97:5e:08:
                    7d:e5:e8:8f:1c:f9:9f:8b:08:a1:0a:92:f9:9f:1c:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:15:5E:8A:D8:BE:D9:F4:00:9E:1E:94:18:5D:C3:75:8D:57:B3
            X509v3 Authority Key Identifier:
                keyid:7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:91:af:62:4f:a6:4b:95:a0:05:55:f9:a2:21:2e:69:7f:
         d8:77:5a:ff:87:3b:19:c4:9c:4a:d1:26:09:bb:22:2a:5c:64:
         90:ee:c9:4b:90:df:fc:35:1c:9d:70:3f:3d:8e:c8:cd:87:db:
         cc:a8:e8:1d:b4:e3:fa:da:1f:01:9d:ec:87:17:27:ee:42:27:
         ad:9c:dc:47:ef:0c:32:1f:dc:14:ba:5f:f6:c7:1d:80:ef:cf:
         a9:c3:ee:f2:1d:a3:4d:44:ab:65:34:18:b7:5f:f5:ce:6a:c3:
         fa:70:e8:ec:88:69:f0:76:19:4b:c1:e9:81:3d:fb:fa:b2:de:
         c2:d9:b4:06:ce:5c:63:7e:d1:cb:ef:59:f0:5d:eb:60:e7:80:
         20:c5:34:f7:a8:d9:67:cb:ba:4d:de:56:73:7f:f3:f3:bb:fd:
         04:80:6b:15:10:99:76:cd:d1:87:d9:6d:ca:8f:2b:e6:dc:f2:
         2a:30:31:26:51:d8:65:91:83:68:4b:90:ba:45:ab:a7:f7:57:
         82:81:2a:a6:c7:16:ec:e1:03:60:f2:0e:ac:c6:1a:ae:45:e8:
         3d:d1:2b:3c:a0:b6:e9:5f:5d:e1:41:89:f6:38:85:92:50:6c:
         3c:25:13:8d:e8:d2:c4:f2:2d:47:6d:c4:9c:35:88:c5:34:82:
         d6:8b:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----