Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.mft
File:                     98716993F5885BA4377ED210D21A8A2D0CE43192.mft (raw, json)
Hash identifier:          PIybNeZVNFUogzxZHDoG7UEK52uYtTRd5zA/w5asDio=
Subject key identifier:   79:70:CF:E4:14:C4:78:4A:CE:B0:FF:4D:80:42:F7:1E:0A:B9:F5:C4
Authority key identifier: 98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92
Certificate issuer:       /CN=98716993F5885BA4377ED210D21A8A2D0CE43192
Certificate serial:       2909387ACC312D10AA14DAEA2BF66EB9FB2B241C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.mft
Manifest number:          23
Signing time:             Mon 11 Mar 2024 13:28:12 +0000
Manifest this update:     Mon 11 Mar 2024 13:23:12 +0000
Manifest next update:     Tue 12 Mar 2024 15:42:12 +0000
Files and hashes:         1: 323830343a376566383a3a2f33322d313238203d3e20323731363538.roa (hash: 24qaq8fBUQfCqJqq38ptI8cZirlWDa7hBWGAbw0BXTs=)
                          2: 3133312e3235352e3133312e302f32342d3332203d3e20323731363538.roa (hash: SVVK4bGaaqUGzerM26xih23PS5bfry8/WVd0wTByzlY=)
                          3: 98716993F5885BA4377ED210D21A8A2D0CE43192.crl (hash: QL0cto3wXF2zvi2NttUNJseIsSjxr4GKXO/lhDqthl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:09:38:7a:cc:31:2d:10:aa:14:da:ea:2b:f6:6e:b9:fb:2b:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98716993F5885BA4377ED210D21A8A2D0CE43192
        Validity
            Not Before: Mar 11 13:23:12 2024 GMT
            Not After : Mar 12 15:42:12 2024 GMT
        Subject: CN=7970CFE414C4784ACEB0FF4D8042F71E0AB9F5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4b:fa:1f:fa:1f:9e:e8:81:2c:d7:ff:2a:9d:
                    09:b1:77:6c:0b:bf:3e:27:a2:93:f8:e7:33:04:bf:
                    ee:aa:36:99:66:78:4e:43:94:8c:f7:b0:8e:08:ef:
                    61:bf:fb:91:fd:5e:1e:11:8c:63:fe:fb:16:69:e2:
                    95:87:df:ac:c8:df:67:9e:02:56:f8:81:2d:22:5a:
                    ff:f1:0a:74:58:d7:60:4f:90:3a:cd:3c:50:9e:cd:
                    07:66:14:5d:c1:45:b6:83:44:cc:4f:b4:4d:b5:2f:
                    b5:0c:18:46:52:21:e6:ad:1b:d0:d2:78:2a:d4:44:
                    73:20:87:cd:77:4c:66:57:f8:e8:1b:e8:80:ac:e5:
                    fe:ed:00:5f:37:e6:45:e1:c9:b0:ca:0d:62:70:37:
                    67:08:26:80:88:06:e9:b0:e7:0b:6b:24:c4:4a:fe:
                    b1:f1:5d:d6:54:96:19:98:c3:27:a6:ec:1c:a8:7c:
                    7e:53:b5:17:21:de:71:47:33:12:7d:e7:55:89:66:
                    bc:df:d3:9d:b1:50:97:3b:70:d4:f8:c7:6a:0b:57:
                    ca:eb:d2:86:39:9d:7f:ca:e5:43:73:4c:35:ea:0e:
                    9a:e2:81:c3:63:2d:f7:0f:42:fc:b2:d9:4e:4f:05:
                    38:5a:3f:2f:96:a3:2f:ad:a4:64:7f:2a:35:a1:e9:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:70:CF:E4:14:C4:78:4A:CE:B0:FF:4D:80:42:F7:1E:0A:B9:F5:C4
            X509v3 Authority Key Identifier:
                keyid:98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e7:df:35:02:74:f7:9d:80:f3:37:0f:c5:55:63:ad:f3:86:
         0f:d1:a1:9a:0d:fa:7d:27:2f:b8:c0:b7:99:da:e3:57:98:e7:
         57:13:de:a6:e1:c9:4d:de:c2:22:14:ee:46:b5:45:dd:53:35:
         d1:28:6a:ca:12:28:e0:d7:29:6e:a3:dd:67:46:f4:84:45:98:
         06:06:a3:ca:f7:75:35:ef:6d:64:39:1b:df:d9:76:dd:4d:a3:
         b7:63:54:71:4c:6d:09:31:fa:06:c8:8f:c1:c9:d2:a1:5b:1d:
         94:5e:46:49:75:5b:a6:30:ef:3a:ff:b6:72:4f:09:a1:27:95:
         ef:55:78:43:0a:a7:31:17:1e:d3:23:84:a8:14:6b:07:09:55:
         61:8c:51:16:01:48:c1:76:5f:3b:e4:c5:ab:87:dd:05:bf:69:
         93:af:ea:fb:d8:46:f4:56:52:72:79:84:a0:34:95:8d:bb:6d:
         88:d7:fa:3d:31:85:19:42:8a:5e:e9:27:c1:26:c8:d6:2a:99:
         63:57:5a:28:f0:79:48:c2:22:9d:86:d2:60:45:1c:88:b4:50:
         d1:c0:b4:aa:56:0e:fd:f9:a9:7b:6c:8c:a6:a2:b6:d6:2d:3d:
         10:23:7d:43:d1:4f:ee:ba:43:50:be:8c:14:f2:2e:fc:52:9f:
         b4:ec:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----