Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.mft
File:                     897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.mft (raw, json)
Hash identifier:          2Qc9gZo4SGgA0EmexYW7CfmS8FqMwU4tnmqNTzdglR4=
Subject key identifier:   98:70:10:AE:FA:52:B5:2E:58:56:BA:03:65:BC:F7:BF:F8:D0:AC:FE
Authority key identifier: 89:7E:CA:82:75:DA:E7:F1:0E:15:E0:E1:F8:9E:32:34:CA:A5:C6:E1
Certificate issuer:       /CN=897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1
Certificate serial:       60A48C788E8D534BF2421AA6997E8F184595580C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.mft
Manifest number:          72
Signing time:             Thu 31 Oct 2024 11:54:48 +0000
Manifest this update:     Thu 31 Oct 2024 11:49:48 +0000
Manifest next update:     Fri 01 Nov 2024 15:40:48 +0000
Files and hashes:         1: 34352e3137362e302e302f32322d3332203d3e20323638393234.roa (hash: 8qIUkr12/5GZ1GYc65faBV3h+ltz2vQ25vo2jbvMIOU=)
                          2: 897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.crl (hash: nqb/r4nRLXLQ9dlaJt2bB1VSjlL9VVwZA+G/gz3FRhg=)
                          3: 323830343a356362303a3a2f33322d313238203d3e20323638393234.roa (hash: UGDzSSoDBn2U3lTe+fjW9KQw4Pe2jWUX6DbagrBRpo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:8c:78:8e:8d:53:4b:f2:42:1a:a6:99:7e:8f:18:45:95:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1
        Validity
            Not Before: Oct 31 11:49:48 2024 GMT
            Not After : Nov  1 15:40:48 2024 GMT
        Subject: CN=987010AEFA52B52E5856BA0365BCF7BFF8D0ACFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:40:c1:b2:27:8e:8a:de:08:7b:eb:9c:67:
                    10:25:de:26:25:a7:1d:b3:4d:11:db:dc:f1:4d:05:
                    19:6b:bd:26:b8:b1:74:db:4f:a2:20:a3:73:32:c2:
                    03:de:92:c7:33:87:8b:81:2b:d7:bc:45:f0:17:e9:
                    b3:28:9f:3e:1c:b5:85:a3:60:ad:45:f1:13:36:cf:
                    75:5f:ef:0c:92:ee:a0:ef:72:c7:25:aa:56:23:bc:
                    72:da:f7:91:93:82:af:dc:17:9c:08:84:b7:46:4f:
                    10:bc:6a:a2:98:cb:e0:aa:03:1e:b3:60:f1:3a:0d:
                    a1:d8:db:83:78:65:e9:1b:87:87:81:b0:cc:24:aa:
                    6f:e1:95:d6:67:e7:85:33:1c:7e:dc:19:4c:df:ba:
                    9b:c1:49:10:32:07:19:f3:8e:37:bc:02:c1:6f:d6:
                    e5:e0:59:c0:e9:5c:89:b6:f7:0d:67:97:92:a1:2e:
                    87:cf:62:46:01:9d:03:87:b2:1a:32:4c:3b:f9:09:
                    23:e6:93:ea:1f:d8:c0:fe:4c:c8:5f:b2:7e:31:2a:
                    f4:3d:20:11:5d:13:36:ff:7b:57:ca:3a:0c:d4:c5:
                    8e:6a:55:98:d5:3f:1c:03:6d:db:ae:2f:0c:15:8f:
                    66:4b:c1:ed:d5:ec:50:20:f2:57:a4:38:10:a0:7a:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:10:AE:FA:52:B5:2E:58:56:BA:03:65:BC:F7:BF:F8:D0:AC:FE
            X509v3 Authority Key Identifier:
                keyid:89:7E:CA:82:75:DA:E7:F1:0E:15:E0:E1:F8:9E:32:34:CA:A5:C6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/897ECA8275DAE7F10E15E0E1F89E3234CAA5C6E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:7b:e4:28:f1:5f:97:c9:12:fb:f0:31:ca:15:94:75:eb:
         c5:70:c5:5b:c8:03:2d:8d:ae:00:99:c6:4d:c4:82:13:b8:a1:
         35:e4:ba:d5:0d:b5:ac:43:e2:2d:3d:25:e6:b1:16:5f:f4:16:
         2b:22:c8:f8:11:12:b8:c4:5d:5b:6e:4a:c4:c2:ab:fc:d5:73:
         38:49:20:85:33:a2:41:0b:1e:a3:96:ef:9e:0a:f4:c8:31:8e:
         9b:48:c5:2c:6e:8d:8e:13:20:6d:bf:7e:33:ed:2a:dd:c5:82:
         2c:da:23:66:f8:66:f3:03:5f:cd:26:bd:5a:08:bf:b5:b7:71:
         3a:c4:5e:69:a2:c1:0d:2f:70:21:75:77:13:bc:9c:1f:ad:ae:
         1a:09:51:41:2d:df:f4:ac:21:ce:92:8f:1f:fc:45:68:9d:d8:
         86:a8:0a:49:61:46:81:08:c5:18:9a:26:63:84:93:14:6e:bc:
         f0:0f:b4:07:33:28:f1:dc:30:08:f7:11:dd:0c:49:ee:ee:e1:
         58:04:2e:d0:55:cc:a1:5e:26:9c:d0:41:16:7e:6a:e8:c5:f7:
         9d:1c:7b:b8:67:fb:3c:e8:7c:84:6c:35:01:18:de:80:d0:93:
         3f:f1:ca:21:97:6d:7b:1e:1d:6b:cf:be:4e:92:8d:bd:39:e6:
         90:1b:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----