Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft
File:                     AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft (raw, json)
Hash identifier:          OeWg1TcMR40qsL2H9N3Y81VZIXqKkbN1BF48V9eyXEU=
Subject key identifier:   C7:2C:A0:16:6E:71:7E:28:5E:8A:EC:7E:0E:AB:88:AF:07:10:CD:A0
Authority key identifier: AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD
Certificate issuer:       /CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
Certificate serial:       53DB778EE8AE6FC82C0A3CE2EC32A0D1002F0C61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft
Manifest number:          DF
Signing time:             Mon 16 Sep 2024 18:32:38 +0000
Manifest this update:     Mon 16 Sep 2024 18:27:38 +0000
Manifest next update:     Tue 17 Sep 2024 20:17:38 +0000
Files and hashes:         1: 323830343a343261383a3a2f33322d313238203d3e20323637353137.roa (hash: zQkb324/Mcrk+871vBVIopJIBrlw1dACgkdwH7rrt8E=)
                          2: AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl (hash: pZFQI6AcTRaDqCLl2LrIBA/FQ5RoR4M4v7g/RVGTrBo=)
                          3: 3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa (hash: RF6h7gnA4aeF1+n7QFT0bhkIUWJd+63DKBJP2hTIW2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:db:77:8e:e8:ae:6f:c8:2c:0a:3c:e2:ec:32:a0:d1:00:2f:0c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAF5B81D61057C224A29F86F6C466A2DE486BFFD
        Validity
            Not Before: Sep 16 18:27:38 2024 GMT
            Not After : Sep 17 20:17:38 2024 GMT
        Subject: CN=C72CA0166E717E285E8AEC7E0EAB88AF0710CDA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:cd:32:d4:dc:82:e5:78:be:5b:c2:58:19:
                    d7:de:70:f2:75:61:1b:79:b1:42:49:f9:9f:02:c4:
                    14:e9:8a:de:6a:66:07:6d:a8:b1:24:26:97:65:20:
                    cc:b9:52:38:94:35:78:55:17:68:3b:9b:3a:4a:7e:
                    19:eb:16:34:d6:de:89:d6:81:60:ed:32:16:2a:df:
                    c2:15:d7:ea:a9:4f:3f:ec:e7:18:90:a4:35:d3:99:
                    53:99:cc:71:4e:40:ab:bb:d0:e3:14:9b:0e:13:36:
                    c2:83:e3:02:40:a9:b6:02:5e:5d:0b:5d:a5:d7:eb:
                    72:99:7f:24:15:d6:8a:68:de:75:b7:66:9b:c2:60:
                    a7:10:b9:97:a5:4d:46:6d:11:db:08:6d:96:38:eb:
                    21:08:06:30:c2:2f:eb:34:e7:e5:69:0f:9a:2c:e3:
                    c9:e5:b3:77:fd:41:ab:1a:7c:43:de:ad:04:45:82:
                    72:db:2f:65:fd:e6:ca:bd:ae:fb:cf:bc:79:1b:51:
                    9b:c3:0b:00:86:08:d7:e8:62:37:d4:93:f4:5a:73:
                    00:51:ea:3c:9c:df:cc:16:bc:eb:f8:c6:61:55:c8:
                    98:b5:f5:c3:63:54:ba:14:52:75:51:62:9c:c7:2f:
                    84:34:ad:5d:2e:71:a5:e4:a2:c9:cb:d3:6e:b7:b2:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2C:A0:16:6E:71:7E:28:5E:8A:EC:7E:0E:AB:88:AF:07:10:CD:A0
            X509v3 Authority Key Identifier:
                keyid:AA:F5:B8:1D:61:05:7C:22:4A:29:F8:6F:6C:46:6A:2D:E4:86:BF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/1/AAF5B81D61057C224A29F86F6C466A2DE486BFFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:62:30:25:13:bc:93:9b:b7:e2:21:c5:f7:69:3e:c1:2b:03:
         a8:58:ac:17:17:a7:da:e0:7c:27:d4:5e:93:bd:78:45:4e:fd:
         be:e6:36:37:33:da:65:95:fb:1e:70:a7:b2:f8:30:93:61:42:
         56:42:ae:0e:70:b8:4b:03:e5:88:4d:e8:d9:e1:0c:7d:d0:0d:
         31:40:e8:b7:6b:ba:6b:46:06:bd:0c:b2:34:96:1c:9c:36:e3:
         5e:43:28:03:bc:fd:85:a1:bc:42:16:4e:9a:7a:0a:d3:4d:eb:
         77:61:87:0c:de:af:cd:1c:21:b5:c3:3f:6a:37:db:d8:d2:b9:
         69:ed:0b:a8:72:51:b2:63:69:e8:b9:f9:29:8d:c8:ce:c9:c1:
         66:33:34:2a:9a:d6:57:0c:be:26:41:9e:a1:ae:05:c3:5d:45:
         d7:7b:2b:58:3c:df:1a:20:b8:41:99:aa:17:1d:2d:41:86:6a:
         27:11:54:84:31:8f:e0:cf:b7:ee:8c:f8:d4:df:d9:75:70:fc:
         f2:1f:ec:d4:68:95:1e:ac:a4:03:f9:73:97:be:ba:3e:b7:30:
         91:06:01:09:65:2b:7c:3e:1b:08:f2:87:c0:9a:4f:1f:d6:f7:
         23:38:b4:b3:1e:13:eb:79:cf:1e:7d:0a:76:fe:0c:7c:00:04:
         ce:2f:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----