Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
File:                     8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft (raw, json)
Hash identifier:          g68dYb0h9is+CAfLjS+ZJW8iPoUo3TKjyv5PiVUUG+c=
Subject key identifier:   AB:8A:C1:4A:84:F9:23:70:1C:CE:1C:FA:D9:4B:C7:F5:33:53:ED:19
Authority key identifier: 80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Certificate issuer:       /CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
Certificate serial:       74591EE7E67666081A8C85698ED4AACFD0967344
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
Manifest number:          D0
Signing time:             Mon 09 Sep 2024 03:41:04 +0000
Manifest this update:     Mon 09 Sep 2024 03:36:04 +0000
Manifest next update:     Tue 10 Sep 2024 07:12:04 +0000
Files and hashes:         1: 3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa (hash: ZqAmE9seeIBvSQ0FtQf2hmgDinuYqKWWIn2RCkd9J1U=)
                          2: 8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl (hash: lgtA2XQLZ0y3kzcgwAPQKOeZO58dFB537F7fJvyxG5o=)
                          3: 323830343a313964303a3a2f33322d3332203d3e203631383230.roa (hash: +jJ7McYtxL/FnVrF3UxCxBdWgTKFHWTy7J7NhUIJ63U=)
                          4: 3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa (hash: sdHgg6PWq2yC2fMW3izgPppqlQkIopanDofpFEEB+28=)
                          5: 323830343a313964303a383030303a3a2f33332d3333203d3e203631383230.roa (hash: l1tnOuXxA4zzo2eaD1amrTfYVO348xXyIrG4hw7MYJg=)
                          6: 3230312e3133312e3137362e302f32332d3233203d3e203631383230.roa (hash: IBQNxIsGKEwTVKb3hmimDRJzCmRXj9qlU6Mvk5CKs2I=)
                          7: 323830343a313964303a3a2f33332d3333203d3e203631383230.roa (hash: jxhiPRssu37cHMkR7YIW2tUBiuLRCIyZnffX7j1q9RE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:59:1e:e7:e6:76:66:08:1a:8c:85:69:8e:d4:aa:cf:d0:96:73:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Validity
            Not Before: Sep  9 03:36:04 2024 GMT
            Not After : Sep 10 07:12:04 2024 GMT
        Subject: CN=AB8AC14A84F923701CCE1CFAD94BC7F53353ED19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:ae:03:c9:9c:18:19:58:7b:eb:44:ea:a2:
                    60:bd:c2:63:b3:d2:c4:99:b6:8a:6a:d3:8c:34:7a:
                    8c:44:ae:d5:f5:5c:5b:73:0a:31:79:eb:8d:bd:85:
                    e3:e5:b3:37:35:20:c6:d8:15:cf:dc:28:ea:56:ac:
                    2a:55:e9:4a:6d:ee:8f:83:5d:f9:c2:a4:89:14:e9:
                    51:7f:34:2b:00:60:f0:28:78:6c:c5:ee:57:9c:62:
                    35:b6:c0:4a:88:94:dd:1b:b4:b5:87:81:5a:30:21:
                    f2:79:28:a0:71:56:5a:81:09:e1:64:3c:a8:4d:0d:
                    4d:15:a0:1b:d1:39:dc:a6:28:0f:46:b4:53:09:34:
                    a5:7f:e2:f6:50:11:02:7e:ab:58:ff:03:55:86:d0:
                    d2:75:7d:42:4e:4a:d8:0e:c8:d1:ea:32:85:0a:52:
                    0c:cc:01:e9:0e:01:47:8b:0e:91:4c:cc:b3:21:49:
                    ac:4b:bc:ee:0a:95:d4:f6:b7:a6:73:3e:32:05:06:
                    07:2a:fb:fa:60:5c:a8:70:a0:d9:e9:52:13:8b:5b:
                    d9:99:57:8f:8b:aa:95:db:a5:57:cb:6c:92:3f:ec:
                    65:6d:f4:82:fa:64:2a:ad:7e:92:19:49:c5:b7:b4:
                    c8:6f:b6:6c:4b:f3:d7:bf:e8:89:ac:67:84:fc:f9:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8A:C1:4A:84:F9:23:70:1C:CE:1C:FA:D9:4B:C7:F5:33:53:ED:19
            X509v3 Authority Key Identifier:
                keyid:80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:8d:cb:92:1e:f0:c4:63:cf:32:50:ae:24:d9:cc:30:35:
         70:80:9c:cb:b1:4e:b4:d3:fd:84:e5:80:f7:90:7f:ec:52:fe:
         e6:a8:d2:c7:5e:9b:00:b4:e3:30:03:59:b9:78:a2:4a:2a:34:
         7f:87:79:4b:3b:2e:2c:3a:6b:03:7e:b6:e7:58:7c:83:68:c5:
         86:ee:a5:77:10:6d:20:cf:95:8b:71:ea:8e:67:87:f6:e4:04:
         08:75:16:c8:66:3a:b4:cf:c7:75:4e:92:65:5f:bf:bb:43:fb:
         85:b0:ff:65:32:ea:ea:01:87:f9:b3:2c:b4:95:6e:9a:b4:ea:
         6e:aa:3a:66:9b:e6:c1:45:3b:7f:f4:c7:02:33:94:df:97:45:
         45:0a:c9:fb:8e:73:d0:7c:60:15:f5:3b:60:13:bc:97:be:aa:
         83:e5:99:75:34:f7:13:5d:69:71:fd:ae:e3:f9:4e:bf:b4:f8:
         3e:d6:ad:1e:6b:25:43:9a:92:d5:24:9a:3f:27:b8:2e:65:95:
         ea:07:f2:fe:eb:be:1c:38:88:3b:d5:2f:4b:41:0b:4a:84:17:
         23:6a:29:d4:31:9d:cf:a8:d4:03:90:12:2c:ba:6a:9f:31:e2:
         b7:32:68:60:f2:8d:0a:b8:eb:6e:bb:ee:f2:cc:ae:51:41:81:
         45:67:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----