Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.mft
File:                     AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.mft (raw, json)
Hash identifier:          HJTQ3TpPozUj+jVR8Ac64m4U6W/pju6v4dcaDtds5VU=
Subject key identifier:   A8:FF:EA:74:77:7E:C5:9D:00:93:EE:ED:6C:68:51:5E:44:F9:BF:32
Authority key identifier: AE:A6:DC:E0:90:7A:7D:F8:8B:EB:D5:C0:9E:EE:07:1A:4B:E0:E5:5B
Certificate issuer:       /CN=AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B
Certificate serial:       6B7F7600497ACD6863373EC5020097BFCB155223
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.mft
Manifest number:          04DA
Signing time:             Mon 15 Apr 2024 00:24:48 +0000
Manifest this update:     Mon 15 Apr 2024 00:19:48 +0000
Manifest next update:     Tue 16 Apr 2024 14:05:48 +0000
Files and hashes:         1: 34352e3138302e3230382e302f32322d3234203d3e20323639313535.roa (hash: Pomhy7pwlokzsrtImzhLNonAE/jrrK2215H+U6ZnOig=)
                          2: AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.crl (hash: E9VqBgiVOXzbWiS+js0iy9q/GWwJBvx4lF5G3YWal+M=)
                          3: 323830343a363034303a3a2f33322d3334203d3e20323639313535.roa (hash: eXWlli7K0g7fWAD0fRpwpuxezit+xyEuRBS3nTBBmus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:76:00:49:7a:cd:68:63:37:3e:c5:02:00:97:bf:cb:15:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B
        Validity
            Not Before: Apr 15 00:19:48 2024 GMT
            Not After : Apr 16 14:05:48 2024 GMT
        Subject: CN=A8FFEA74777EC59D0093EEED6C68515E44F9BF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:ec:b4:08:1f:a2:54:1c:b6:d1:0b:a8:dc:
                    f3:f1:5d:d8:85:a4:f2:06:0a:e9:4b:1a:ac:39:68:
                    68:58:66:df:89:c5:48:e7:a4:f2:fc:16:ba:1b:8f:
                    bc:b2:f4:fa:0c:51:1f:df:96:1e:15:5c:dd:49:77:
                    06:5d:79:5a:72:49:85:5c:b9:4e:6a:e2:ea:0b:12:
                    59:32:c7:6d:ff:85:45:e3:4f:87:97:42:93:b6:e8:
                    5b:df:bf:15:0f:4b:c1:60:fc:39:a1:05:11:6d:a3:
                    23:96:10:dd:97:c7:52:55:6a:dc:90:b9:53:ea:fa:
                    03:96:85:80:04:d8:99:e1:b2:8a:ea:69:a5:29:7b:
                    7d:c9:7a:c3:03:1b:28:f5:71:63:30:c8:4a:97:00:
                    6e:f7:a5:c1:52:d9:99:45:b2:85:ff:81:51:d8:3d:
                    5f:16:3d:02:c9:e3:8f:36:1e:cd:b6:6c:f0:de:68:
                    df:1e:8a:e5:07:2c:6f:74:06:1e:0b:03:cf:5e:40:
                    54:9b:0b:3a:f4:60:1e:c5:fc:45:53:b1:b9:17:8d:
                    a9:90:a0:9c:24:2f:47:5a:ed:24:b4:fa:f9:ac:ff:
                    19:f2:60:31:20:3f:69:73:97:f8:cf:25:b9:ac:49:
                    16:67:61:43:4d:e3:3e:e7:57:d2:39:30:f1:54:09:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:EA:74:77:7E:C5:9D:00:93:EE:ED:6C:68:51:5E:44:F9:BF:32
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DC:E0:90:7A:7D:F8:8B:EB:D5:C0:9E:EE:07:1A:4B:E0:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/AEA6DCE0907A7DF88BEBD5C09EEE071A4BE0E55B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:05:33:c7:00:71:43:37:d5:99:44:ab:6c:2c:bb:69:c6:55:
         c3:44:59:10:27:19:11:40:ee:48:99:f6:b5:27:5c:db:2a:00:
         75:b5:42:bf:30:ad:53:f6:b0:d1:45:3b:5c:bc:c4:56:7b:63:
         8c:de:8a:10:eb:6d:bf:5d:be:6d:8d:dc:9c:4d:e5:64:9e:3e:
         ac:c7:7b:51:e5:f3:f0:c3:9c:48:98:a4:bf:ac:2a:c6:ee:44:
         d4:8d:6a:ac:95:e3:5d:fd:5f:cd:3e:a1:15:4d:ea:61:85:78:
         e0:38:30:3b:20:2b:17:ac:60:7f:0b:88:4c:0e:43:ad:d9:d2:
         eb:9e:cf:eb:54:69:03:01:00:d8:88:d6:c6:7d:19:dd:5c:d7:
         98:79:76:0d:d9:bb:53:3e:63:80:a1:bf:96:c9:9d:68:f5:b7:
         b7:90:08:11:6e:d2:33:e1:98:27:85:02:91:7e:45:08:54:14:
         ed:6a:46:6f:5b:de:3d:36:a3:78:09:05:54:1b:ac:b2:68:9b:
         59:eb:80:57:fa:6a:9f:05:d3:f3:f9:96:2e:b6:f1:47:d1:f1:
         91:d4:fe:52:3a:de:58:b8:15:1d:c5:75:d6:d7:72:48:00:27:
         29:2c:1e:ee:7c:ff:e3:62:c5:31:20:ca:f4:3f:20:ed:2a:0b:
         3c:c2:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----