Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.mft
File:                     F257D9B509B80BD942D7280B239502CBA4F69E86.mft (raw, json)
Hash identifier:          R6fbQs04ASiJl/faLahKzzSOUSB96dmn/DxIDAsqlfU=
Subject key identifier:   D1:FD:4E:8C:95:6B:AC:A5:40:BD:D9:28:CA:5D:62:0F:7F:22:30:37
Authority key identifier: F2:57:D9:B5:09:B8:0B:D9:42:D7:28:0B:23:95:02:CB:A4:F6:9E:86
Certificate issuer:       /CN=F257D9B509B80BD942D7280B239502CBA4F69E86
Certificate serial:       78A23B27B17964953EE1B8C161F9D159E7044D03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F257D9B509B80BD942D7280B239502CBA4F69E86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.mft
Manifest number:          9D
Signing time:             Sun 14 Apr 2024 19:21:32 +0000
Manifest this update:     Sun 14 Apr 2024 19:16:32 +0000
Manifest next update:     Mon 15 Apr 2024 19:50:32 +0000
Files and hashes:         1: 323830343a383231383a3a2f33322d3438203d3e20323732343938.roa (hash: 2zueD6WhguGlQk72W/sdKq5/LKmrXBI1Zopg31dhCVU=)
                          2: F257D9B509B80BD942D7280B239502CBA4F69E86.crl (hash: JYhihuACdms2YXACVp6JOUVXde4VcmDjVQCBJRlnxpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:3b:27:b1:79:64:95:3e:e1:b8:c1:61:f9:d1:59:e7:04:4d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F257D9B509B80BD942D7280B239502CBA4F69E86
        Validity
            Not Before: Apr 14 19:16:32 2024 GMT
            Not After : Apr 15 19:50:32 2024 GMT
        Subject: CN=D1FD4E8C956BACA540BDD928CA5D620F7F223037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:93:f0:46:16:cd:4c:3a:80:01:58:49:c4:
                    3a:28:a5:00:68:0b:ab:d2:ed:ec:89:66:0d:8c:4e:
                    e5:cb:ee:b2:34:e0:8c:26:8d:48:07:9a:2d:5d:40:
                    13:01:2b:b6:be:3f:17:95:c4:bb:f9:9e:a7:b3:01:
                    dd:e6:2e:88:c8:6b:b5:5b:6b:be:f8:d0:6e:61:f4:
                    56:66:b5:3a:4f:11:e9:2e:22:24:f7:f2:42:7f:81:
                    fe:2d:5b:38:c6:23:b2:bf:8c:98:95:2f:f4:11:8b:
                    eb:ab:02:2e:a7:cc:d6:6a:b9:28:4b:ad:c7:e4:f0:
                    af:3b:99:d7:11:fd:59:40:d4:c4:25:76:78:1f:ea:
                    7c:f7:1b:5b:d7:b6:94:99:47:bb:1e:5f:01:c6:a7:
                    97:c7:04:c4:2c:a8:4e:77:ac:39:52:9a:53:18:98:
                    95:8f:aa:3b:cd:5f:cc:ec:bb:46:2b:34:38:78:64:
                    8e:6e:c7:2c:87:8c:64:6a:b3:2d:76:4e:ad:d5:41:
                    e4:4a:3f:45:f2:ca:1f:67:24:18:08:26:70:a4:e9:
                    e2:b0:6f:84:12:4d:e4:a0:78:15:73:9b:4e:4c:a6:
                    02:f3:eb:ec:56:fa:8d:e5:37:b8:3b:c4:c6:dc:7f:
                    00:9d:89:2f:05:2b:74:ee:35:4f:11:bb:cb:ca:95:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:4E:8C:95:6B:AC:A5:40:BD:D9:28:CA:5D:62:0F:7F:22:30:37
            X509v3 Authority Key Identifier:
                keyid:F2:57:D9:B5:09:B8:0B:D9:42:D7:28:0B:23:95:02:CB:A4:F6:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F257D9B509B80BD942D7280B239502CBA4F69E86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC5q79XxcojkP7f4rnW277ADxFX1vMcQdAmf8LEZuamm/0/F257D9B509B80BD942D7280B239502CBA4F69E86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8e:3a:5a:cf:f6:f8:30:5c:07:64:2c:b6:4b:d2:09:f3:f0:
         0f:31:d0:ad:c4:f9:bb:f0:b8:f0:80:ca:dd:7d:8c:80:26:8b:
         6c:52:ac:49:ca:bd:fb:00:19:ff:54:76:f1:1c:f2:4a:21:66:
         ff:d5:9f:09:59:6f:1d:0f:d7:87:ea:94:bc:53:cc:1d:7c:3c:
         88:ea:a0:4f:6a:f8:dd:9b:b7:4a:64:7a:e3:10:0e:c5:d6:87:
         6a:22:fc:ee:9e:76:72:06:60:a7:06:e4:c2:6e:c9:b9:0b:d7:
         9c:e2:68:3c:9e:cc:7e:32:72:0b:5e:34:c7:52:8a:32:0c:4a:
         2e:6b:2f:cf:c2:20:bc:58:21:26:f6:69:e8:b2:b6:27:55:22:
         c6:92:55:d1:27:1d:34:2e:a6:3b:7e:dc:bc:70:f7:21:d8:8b:
         d3:4c:83:d1:52:ac:6a:c7:6a:32:94:99:a5:32:9b:98:30:8a:
         01:f5:79:cc:1e:3d:78:6b:e6:3a:c5:a7:92:0c:00:e2:3b:38:
         ed:a4:db:ad:e6:2b:85:70:68:17:20:4f:fe:89:68:17:c6:3b:
         de:30:fb:4a:50:bf:8a:8f:b1:23:4b:3e:3c:5f:5c:39:31:ee:
         29:df:42:9f:c5:42:ae:90:a2:5a:27:a1:bd:57:57:d2:2d:55:
         0f:c4:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----