Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.mft
File:                     8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.mft (raw, json)
Hash identifier:          ZN7VzwS/ssgO68DXMfhdPfW3/JVnspUlPP3DRurDR38=
Subject key identifier:   86:10:A5:CA:95:72:A1:6F:9C:F0:12:FF:89:F0:4F:0D:39:DD:C9:28
Authority key identifier: 8E:1B:17:B1:51:86:A8:8A:EA:FC:73:B4:58:10:58:E4:A9:EF:EB:A7
Certificate issuer:       /CN=8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7
Certificate serial:       659213AF06115EB421395E5F7C276F8256339B53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.mft
Manifest number:          02AB
Signing time:             Sun 14 Apr 2024 18:28:54 +0000
Manifest this update:     Sun 14 Apr 2024 18:23:54 +0000
Manifest next update:     Mon 15 Apr 2024 20:53:54 +0000
Files and hashes:         1: 323830343a366432383a3a2f33322d3438203d3e20323730353136.roa (hash: KT+lCNgvNa9y8CRvJBPh1xSRRHc7YI/hBpxxnBIuHnU=)
                          2: 3138372e37332e3138302e302f32322d3234203d3e20323636353339.roa (hash: LRe+bq5Z90CxO9mK/n1RfvsSvkFFmVu+406slXdE5lo=)
                          3: 8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.crl (hash: O82VrP49Su0PBktuepEcSuyTkXWwwzqruVjV/xUDg14=)
                          4: 3138372e37332e3138302e302f32322d3234203d3e20323730353136.roa (hash: clbHlXSaluxjDhMfyMbsTO5oDAK6GeL4IDblM+l+h60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:92:13:af:06:11:5e:b4:21:39:5e:5f:7c:27:6f:82:56:33:9b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7
        Validity
            Not Before: Apr 14 18:23:54 2024 GMT
            Not After : Apr 15 20:53:54 2024 GMT
        Subject: CN=8610A5CA9572A16F9CF012FF89F04F0D39DDC928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:01:ff:84:f3:79:40:e5:50:22:b2:db:c7:
                    36:94:0b:a3:22:2f:b0:15:6d:60:72:a8:b5:cf:0f:
                    f0:29:4e:d5:62:f4:c5:c7:7c:42:2c:73:fa:be:18:
                    b3:48:3f:04:79:2e:d7:ff:17:a2:fd:cc:e1:26:85:
                    be:20:86:b5:d6:22:d7:35:9f:20:ed:e0:2e:47:b4:
                    59:92:c6:ea:a5:84:c7:0f:7d:c3:c0:8a:ea:e8:da:
                    de:09:11:ca:65:e5:2b:fd:1b:a8:97:ff:36:44:49:
                    7c:35:df:73:01:f1:a2:6d:8a:81:d1:ea:20:c7:62:
                    5f:e9:9c:74:6a:d5:bd:84:76:af:37:fa:f8:b7:2d:
                    2f:53:9b:a2:90:46:e3:a4:cd:6e:52:3d:07:80:a5:
                    b1:f7:06:c3:af:22:8f:98:0c:b5:36:de:fe:09:a4:
                    c0:80:76:66:7c:54:41:17:19:39:9e:4b:f1:49:fc:
                    87:57:e1:fc:20:d8:90:92:00:47:ed:24:c7:31:2a:
                    7f:db:d6:8a:11:3d:e5:21:56:15:8f:08:13:c1:01:
                    f3:86:47:3d:f0:ed:6a:df:13:e7:ae:c7:ea:8f:11:
                    37:93:87:d8:dc:85:45:b4:ac:cb:d7:74:92:9c:d0:
                    85:8c:e5:8b:a7:a2:a6:14:2e:94:e2:1f:18:f5:05:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:A5:CA:95:72:A1:6F:9C:F0:12:FF:89:F0:4F:0D:39:DD:C9:28
            X509v3 Authority Key Identifier:
                keyid:8E:1B:17:B1:51:86:A8:8A:EA:FC:73:B4:58:10:58:E4:A9:EF:EB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:0d:eb:50:6c:69:54:46:bd:a1:bb:b9:fe:21:9f:d2:0a:
         92:29:a8:54:71:75:3f:be:fe:b0:5b:db:9e:5b:22:c7:16:bb:
         ec:5b:77:bc:8b:4d:70:1b:d9:5a:76:c9:66:44:97:c7:82:a7:
         93:f3:1d:7d:87:b3:d2:d5:23:9f:54:d5:d6:82:a4:f9:0d:a8:
         9f:ae:8a:b6:3d:df:39:08:92:8a:c6:53:be:4b:a9:62:7c:65:
         31:b1:26:11:8f:16:4a:06:44:44:41:0e:7e:1f:41:a7:9f:6d:
         8f:3e:7c:4f:b4:62:7d:9c:6c:e9:e9:8a:7d:cf:74:a8:40:8c:
         09:62:eb:d9:3d:98:28:95:10:fe:5c:1a:61:31:04:57:37:69:
         3c:26:f7:20:92:c5:8c:8f:3d:0f:d0:96:9e:18:61:e5:ff:1d:
         01:2b:76:ac:d2:56:11:86:3e:01:36:4b:82:77:7c:35:0a:e6:
         aa:47:03:8b:66:1a:d5:de:d3:14:05:ab:ea:70:7c:22:a5:88:
         db:c4:83:de:31:fb:57:5b:1a:84:8d:46:e9:43:c6:5e:45:f1:
         8d:49:8e:2c:fd:02:1c:b7:80:5d:dc:d6:4e:67:e6:63:f7:6c:
         97:f3:b2:cd:5a:b5:34:e4:b1:31:c0:0b:05:06:fd:ad:1d:39:
         12:37:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----