Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.mft
File:                     DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.mft (raw, json)
Hash identifier:          gtTfcBwIERNaLrnTRN4pyAC1ZuSmyx7c+A/SA9/9C4o=
Subject key identifier:   6C:D6:7B:AA:77:49:FC:17:39:CA:2D:33:46:B8:E6:1C:D2:60:48:96
Authority key identifier: DF:6C:77:3F:AC:32:C4:13:C5:DD:90:A3:1A:1B:CA:BB:6F:B8:EB:50
Certificate issuer:       /CN=DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50
Certificate serial:       7020F3A25AB070233E8EF06730F75EE16E378CFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.mft
Manifest number:          01D2
Signing time:             Tue 12 Mar 2024 09:40:47 +0000
Manifest this update:     Tue 12 Mar 2024 09:35:47 +0000
Manifest next update:     Wed 13 Mar 2024 10:20:47 +0000
Files and hashes:         1: 3137302e3234352e382e302f32322d3234203d3e20323636353139.roa (hash: k9aCxairRDKjxlkWSS2p+avdxS5NW8emR+mV8xpwyjM=)
                          2: DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.crl (hash: CjICdjRwAR5EZH9wuBKhgfhe8SH5xejeku8hNXy3D0c=)
                          3: 323830343a333930383a3a2f33322d3438203d3e20323636353139.roa (hash: qeFZER8dg80FQhviKvKsvgyZuCg9FJKFk59uF/0Ihoo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:f3:a2:5a:b0:70:23:3e:8e:f0:67:30:f7:5e:e1:6e:37:8c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50
        Validity
            Not Before: Mar 12 09:35:47 2024 GMT
            Not After : Mar 13 10:20:47 2024 GMT
        Subject: CN=6CD67BAA7749FC1739CA2D3346B8E61CD2604896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:05:bf:b1:c7:f8:eb:50:ba:93:fa:7a:f4:ba:
                    5c:27:b0:89:95:8a:cf:14:07:10:77:e6:06:45:c7:
                    24:fd:d2:11:98:72:7b:de:d7:64:33:89:c9:b0:e9:
                    21:a6:86:34:d7:11:e6:45:23:d4:93:64:85:ed:4b:
                    d9:b4:65:12:76:52:74:de:3b:04:4c:6a:b8:3b:9d:
                    53:b1:8d:ff:4c:05:27:2e:74:e4:18:22:40:60:36:
                    76:d2:07:16:7b:5a:eb:25:13:69:0f:03:5b:27:3e:
                    0c:70:02:b9:84:27:b0:0b:66:4e:22:e7:ca:54:e3:
                    90:72:e7:bd:17:9b:17:73:66:27:bf:44:ce:0f:ab:
                    e6:5d:34:1a:4f:bc:90:f8:35:92:13:c6:10:64:10:
                    7e:6d:3c:9c:bb:a4:b3:85:81:3c:30:4e:6a:d7:54:
                    97:8c:ff:e4:2b:05:e5:fa:5a:fe:c2:7c:c4:4f:b4:
                    c4:b5:e9:1a:29:5c:d9:57:68:f3:bd:e8:27:1c:b9:
                    65:df:e7:a2:4e:09:e7:20:7b:fb:77:a1:8f:df:62:
                    8f:9e:11:51:bd:a3:56:05:31:2d:d9:f2:ec:39:a9:
                    61:c5:22:70:c0:f5:79:bb:25:c6:03:c9:3e:18:94:
                    47:17:05:5b:14:75:7e:6d:49:ba:24:8d:05:a9:09:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:7B:AA:77:49:FC:17:39:CA:2D:33:46:B8:E6:1C:D2:60:48:96
            X509v3 Authority Key Identifier:
                keyid:DF:6C:77:3F:AC:32:C4:13:C5:DD:90:A3:1A:1B:CA:BB:6F:B8:EB:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/0/DF6C773FAC32C413C5DD90A31A1BCABB6FB8EB50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:3f:6b:b6:a4:5c:3b:75:65:31:40:05:c3:a2:87:ec:ae:
         22:9e:f4:8c:45:31:9f:2c:63:d3:e4:26:0d:09:ae:02:9a:fc:
         02:85:ff:78:56:9d:f5:ab:dd:cd:54:00:70:18:7f:a9:1b:34:
         1b:b0:d1:9b:b7:58:eb:7b:a8:a3:44:aa:6a:ff:26:1b:82:17:
         1f:1f:a6:1f:c8:0b:68:9c:c9:85:fe:ec:cf:3e:64:21:c6:42:
         2b:bc:78:2a:4d:4f:77:bc:aa:e7:f7:c1:62:dc:55:e9:b6:4d:
         59:54:3c:9e:0f:c6:9f:fa:a3:9d:11:ee:42:68:3f:7d:27:6d:
         2f:0a:8f:c7:85:07:e2:70:78:42:84:c4:34:c2:dd:ed:b4:ce:
         ce:57:47:bd:aa:30:55:c3:1f:1a:85:c7:bf:d5:88:16:90:0a:
         7c:77:5a:e7:1d:b6:06:65:27:d0:fb:2e:69:6a:77:43:3f:4f:
         f9:51:25:04:e3:85:8d:b9:8b:36:f3:3f:64:42:f3:00:5b:d6:
         ff:bb:a2:ac:8e:1e:d7:ce:f6:39:8a:8a:3b:a7:09:6e:90:2f:
         c5:7c:af:9a:3f:ce:48:b5:84:9d:36:cd:bf:1c:af:c9:ca:35:
         5d:12:ba:90:cf:9c:a4:e1:de:ae:a4:ad:1a:b0:cc:5b:be:9b:
         cc:ac:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----