Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.mft
File:                     0B05202569BCFD524B0B1BE663B49F875DE3A37E.mft (raw, json)
Hash identifier:          eQQnMbSQdxjbwbSoZ/xspv6liZYVtvGFn5xcjq5pwJo=
Subject key identifier:   7F:0A:42:D8:77:6F:BF:FA:BA:4E:A0:FF:77:7F:EA:2A:5F:EF:C6:C5
Authority key identifier: 0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E
Certificate issuer:       /CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
Certificate serial:       3BB84635477E61273AF51503851D4291031A01BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.mft
Manifest number:          DA
Signing time:             Sun 14 Apr 2024 23:57:06 +0000
Manifest this update:     Sun 14 Apr 2024 23:52:06 +0000
Manifest next update:     Tue 16 Apr 2024 02:29:06 +0000
Files and hashes:         1: 3137372e33392e382e302f32322d3332203d3e20323639303936.roa (hash: 2hjVAs7cTvKv9Cd2rGSrT1kcqNc8vI/NGpyVUsDGhsE=)
                          2: 34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa (hash: bi9SBiZ7agWyuh7LgZYaumkN0ID4/ghJIxJFH7NVsCg=)
                          3: 323830343a356636343a3a2f33322d313236203d3e20323639303936.roa (hash: Q+YRthcRLLSILL4ebvsy4fSi2YwoxWdyNaRol6+6weM=)
                          4: 0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl (hash: 3Cx5BFUSKCRPn02boAZ0vJUBGGM8s0kC+Q80JppZuWw=)
                          5: 3138362e3233322e38382e302f32312d3332203d3e20323639303936.roa (hash: nedCR+9BhGmRmmI5q7HSxQXjGfWXYE6+uFPwOHoRhFg=)
                          6: 34352e3138352e3132302e302f32322d3332203d3e20323639303936.roa (hash: 6FRUmzAJce+wIDPJFnIVDBEkJamX+rz7BELBbgba27g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:46:35:47:7e:61:27:3a:f5:15:03:85:1d:42:91:03:1a:01:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B05202569BCFD524B0B1BE663B49F875DE3A37E
        Validity
            Not Before: Apr 14 23:52:06 2024 GMT
            Not After : Apr 16 02:29:06 2024 GMT
        Subject: CN=7F0A42D8776FBFFABA4EA0FF777FEA2A5FEFC6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:8a:1f:11:5f:0f:6d:83:5f:d8:bf:e2:4b:
                    89:28:f2:3f:0c:90:6d:5e:c1:92:e6:d9:bf:51:92:
                    f6:63:e3:7a:7b:9e:bb:44:78:c0:73:a5:b5:f9:02:
                    31:0d:b7:4f:50:b5:6e:28:dc:36:dc:7f:ec:86:06:
                    20:e9:82:7d:67:7d:eb:07:00:86:4e:07:ea:c4:6c:
                    3a:83:27:1b:06:6e:d2:34:0f:aa:5d:47:1d:4e:04:
                    56:18:ee:3e:df:b7:c0:5e:5d:7d:d0:ac:be:eb:8f:
                    44:71:46:0b:67:2f:39:dd:72:43:f4:1f:23:a0:05:
                    68:d5:10:6c:dc:bd:25:e4:41:e2:df:73:77:6f:29:
                    4e:c0:b1:95:bc:94:1a:64:85:dd:8f:c6:94:3d:7d:
                    0d:69:9f:2d:e2:3f:ad:b0:54:b5:88:41:bd:07:fb:
                    95:6b:66:2b:0f:e6:93:de:44:b9:b4:e4:27:d1:fe:
                    bb:76:84:4c:e6:ca:c2:64:71:31:5b:fa:e1:de:c2:
                    cf:02:47:3d:a5:3b:58:c6:e9:da:7b:da:b6:ac:2a:
                    45:c5:66:01:16:e2:e2:44:b3:fd:70:50:da:fd:77:
                    9d:e2:68:d6:3a:d4:81:61:e0:df:ad:67:62:ff:6a:
                    df:cb:b2:17:de:45:65:fb:70:75:4c:f4:02:8c:1a:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:42:D8:77:6F:BF:FA:BA:4E:A0:FF:77:7F:EA:2A:5F:EF:C6:C5
            X509v3 Authority Key Identifier:
                keyid:0B:05:20:25:69:BC:FD:52:4B:0B:1B:E6:63:B4:9F:87:5D:E3:A3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/0B05202569BCFD524B0B1BE663B49F875DE3A37E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c8:33:ff:dd:85:4c:aa:a9:e8:1d:a1:4c:38:9f:05:2d:ea:
         ef:ef:e0:d6:25:8c:aa:99:0e:75:49:ad:61:04:9f:6e:68:5d:
         62:9c:c1:18:d3:f0:10:a7:9d:a4:e8:27:70:5d:bb:ad:7e:44:
         35:6c:20:36:0c:eb:35:ed:e2:c8:41:57:05:84:4f:ce:56:41:
         57:e5:1b:6b:ce:5e:40:e5:25:b4:77:8e:f1:a2:3f:90:5e:ae:
         4c:05:13:25:c5:98:21:08:15:e0:74:0b:d5:16:5b:51:77:47:
         05:86:ce:dd:5a:aa:f2:ad:3e:d3:11:2b:bb:bc:95:f1:2e:4a:
         80:f3:a3:25:33:50:68:29:09:89:3a:ee:c7:f7:15:4e:9c:d2:
         e1:8e:f3:54:d5:f1:20:12:d7:df:42:12:bf:7d:8f:88:8f:67:
         95:47:2a:12:06:9c:2b:7e:af:23:37:03:c9:ea:e8:24:ce:e2:
         5d:e4:f1:40:fd:a9:79:23:6f:dd:fa:aa:94:02:06:3c:2b:af:
         75:4e:7c:c9:69:d9:0f:d2:0d:a0:fe:e1:f1:88:92:71:14:2a:
         2a:35:e7:46:8c:8b:6a:58:18:85:ab:dd:2e:ff:17:fc:69:04:
         f3:64:a7:f9:58:86:1c:83:77:e6:ab:13:0f:bf:4c:23:9d:38:
         ed:0f:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----