Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.mft
File:                     7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.mft (raw, json)
Hash identifier:          dCVWKkru1w6JmuaO8CbIIihfriBAQ+8U1WrTHt291DM=
Subject key identifier:   10:33:2F:58:1A:E6:83:64:21:12:9D:DB:52:98:BE:46:C5:4A:AF:0D
Authority key identifier: 7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
Certificate issuer:       /CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
Certificate serial:       3F989C604EE71E88B677EDA71753FB87FDB10E55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.mft
Manifest number:          35
Signing time:             Mon 15 Apr 2024 01:19:49 +0000
Manifest this update:     Mon 15 Apr 2024 01:14:49 +0000
Manifest next update:     Tue 16 Apr 2024 04:44:49 +0000
Files and hashes:         1: 323830343a316232383a3a2f33322d313238203d3e203631373132.roa (hash: +bKTxiOkAlvaJRE2lc8B1k4pgo1ELAyBQj5kBrdHu/Y=)
                          2: 3133312e37322e34342e302f32322d3332203d3e203631373132.roa (hash: 43Ko1BP947k+EmXHTwSaZVE8IVfFQOeey/GbPjSvIeM=)
                          3: 7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.crl (hash: pGzS8Sygq4VmXD6keTwLNRP/aAQCAUECjnI5VUBLdKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:98:9c:60:4e:e7:1e:88:b6:77:ed:a7:17:53:fb:87:fd:b1:0e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
        Validity
            Not Before: Apr 15 01:14:49 2024 GMT
            Not After : Apr 16 04:44:49 2024 GMT
        Subject: CN=10332F581AE6836421129DDB5298BE46C54AAF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:f2:8e:33:8c:2c:11:e0:bb:9f:fe:c1:c6:
                    09:6d:ca:b8:89:ed:41:ab:b5:94:68:77:04:14:34:
                    97:36:60:97:fe:51:3d:c1:36:b8:52:5c:aa:a5:c3:
                    92:cc:8c:89:f0:49:b4:7f:74:49:85:79:02:41:f4:
                    63:ec:e9:4c:0c:0a:16:df:e0:a6:13:70:47:ae:d4:
                    70:c8:9d:eb:e4:57:d9:6b:b4:a6:aa:99:bf:36:ad:
                    4b:80:b3:7c:aa:2d:b0:34:65:ed:1b:db:60:a4:ab:
                    21:e6:39:f3:29:8b:c3:8a:33:d0:3b:1e:bc:a0:a0:
                    93:7a:8e:2c:12:4d:32:f2:25:c1:00:19:70:ea:b5:
                    99:d2:f1:49:e6:fe:09:79:cd:ff:63:7b:63:b2:77:
                    d0:32:fc:40:62:58:c9:d5:9a:fe:df:f6:3d:6e:f9:
                    22:5a:b7:96:f6:23:04:5c:d8:41:5a:46:7d:65:6f:
                    93:20:08:79:f0:3d:19:a6:aa:d2:1b:3e:ea:59:40:
                    aa:e3:4c:db:ac:e6:4d:01:8f:54:56:dd:43:de:0e:
                    2f:46:2b:ba:13:c6:4a:6e:90:9a:d4:44:82:ab:56:
                    39:69:aa:4f:b7:93:af:16:3b:57:1a:26:06:37:d0:
                    d9:f3:d7:d4:19:b2:96:80:fe:ce:cb:04:cc:92:18:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:33:2F:58:1A:E6:83:64:21:12:9D:DB:52:98:BE:46:C5:4A:AF:0D
            X509v3 Authority Key Identifier:
                keyid:7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:06:91:22:cb:0c:d8:21:de:23:25:f0:b3:1d:3f:9d:6f:
         b5:78:83:d1:ec:17:a5:6b:8b:39:e8:e3:03:c8:0d:4c:51:a1:
         09:4a:86:dd:bc:0e:0d:1e:c1:ef:b9:62:99:28:1a:45:cf:d2:
         62:94:5c:a2:70:28:8c:65:29:36:6b:a9:b6:83:26:fd:a0:40:
         1b:60:9c:5a:25:ba:bf:24:71:44:03:cb:4c:73:d7:84:73:95:
         d6:58:25:53:1c:97:e5:86:58:4d:b2:ef:da:58:c5:5e:8a:f0:
         46:fb:71:22:a6:59:3f:c5:fa:37:57:38:9a:38:d6:65:35:0b:
         d6:69:f4:38:12:12:df:e7:2d:a0:69:99:ae:6a:ad:24:c5:18:
         93:20:fb:d0:96:eb:3d:4c:b3:35:95:dc:d0:df:64:bb:30:0e:
         12:d3:98:7d:e1:53:42:a1:e5:1a:9f:57:4e:71:ad:06:db:72:
         98:0a:b8:f9:ca:0c:39:5c:fc:f1:de:c7:34:eb:81:02:78:48:
         a7:6f:8b:75:2f:1b:f4:e4:1b:0e:a5:b7:05:df:be:40:e1:07:
         d2:a2:7a:aa:d5:57:5e:fb:bc:ea:d1:15:0e:3f:a8:ca:27:c0:
         ec:50:e1:c0:5b:4f:de:10:f9:29:29:2b:20:1f:5a:30:43:f9:
         70:93:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----