Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.mft
File:                     C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.mft (raw, json)
Hash identifier:          NZDsZ0Ua8kJ7EkXDBcdr9aJKev9RLialWY/VqcHO++Y=
Subject key identifier:   B9:B8:DD:FC:D0:E1:B1:89:09:26:2B:29:03:35:EE:03:E7:25:47:2F
Authority key identifier: C8:4A:B5:B4:43:07:3D:A7:A0:BA:92:01:BD:8F:7F:E9:05:9B:B2:51
Certificate issuer:       /CN=C84AB5B443073DA7A0BA9201BD8F7FE9059BB251
Certificate serial:       4A7FB6F7AADE6AC49C9FF2455FC08932C782EF04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.mft
Manifest number:          20
Signing time:             Wed 25 Sep 2024 13:07:29 +0000
Manifest this update:     Wed 25 Sep 2024 13:02:29 +0000
Manifest next update:     Thu 26 Sep 2024 14:46:29 +0000
Files and hashes:         1: 3230302e392e32342e302f32322d3234203d3e20323636323135.roa (hash: oj/4FQCBGLAJklZ6yG6md8ykUB6yHSpNtfgjXXwmCcs=)
                          2: C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.crl (hash: yxiO2OMG2GtToV5NF5PhsMP7PemvVKTgBizjoJVpkLU=)
                          3: 323830343a336337633a3a2f33322d3438203d3e20323636323135.roa (hash: ET1oDfnO8b42AX7GS+6+JjeWCVkKMUTOxMWjlcd8+jk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7f:b6:f7:aa:de:6a:c4:9c:9f:f2:45:5f:c0:89:32:c7:82:ef:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C84AB5B443073DA7A0BA9201BD8F7FE9059BB251
        Validity
            Not Before: Sep 25 13:02:29 2024 GMT
            Not After : Sep 26 14:46:29 2024 GMT
        Subject: CN=B9B8DDFCD0E1B18909262B290335EE03E725472F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ae:f6:cc:6e:f9:e6:99:d8:44:da:7b:e3:a0:
                    4b:15:e0:bb:a6:cb:67:95:7c:69:b0:d3:f5:af:c2:
                    0f:39:bc:6f:9d:87:a3:6c:c0:a1:a0:b3:62:80:35:
                    fc:8e:1b:c1:4a:5f:a8:63:86:46:5a:3c:98:36:28:
                    31:71:d4:29:f4:a2:1c:7b:26:0f:c1:a2:13:5a:ba:
                    bc:01:f8:63:74:d0:a8:11:e5:d6:78:a0:d3:db:43:
                    ef:ec:d6:81:92:1b:e5:72:97:fc:3b:2d:b1:8a:14:
                    a0:00:e6:10:42:bd:f5:f5:a2:86:f0:ab:74:0c:81:
                    31:8f:a2:c4:4d:4c:cc:76:a2:81:04:87:53:49:c0:
                    ee:71:5d:07:02:e6:ab:65:60:64:44:e1:4d:c1:60:
                    91:4d:da:d6:6c:eb:36:f7:2d:d4:1d:cb:64:01:56:
                    ad:d5:94:0b:6e:8f:24:1c:b7:7f:d7:ca:48:3c:44:
                    2b:ca:bf:ae:c9:d8:19:ee:b3:1f:9b:1c:da:c8:ed:
                    a4:2c:c6:f9:cf:6e:0b:df:e0:68:82:f1:cf:3e:62:
                    dc:f9:78:83:21:03:ef:ca:f9:b7:8a:cb:f0:13:68:
                    9d:41:8a:88:49:a1:ca:75:88:f5:8b:60:0a:b6:e8:
                    0f:4d:a0:62:6f:3a:66:13:3b:d6:16:ad:5d:75:fe:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:DD:FC:D0:E1:B1:89:09:26:2B:29:03:35:EE:03:E7:25:47:2F
            X509v3 Authority Key Identifier:
                keyid:C8:4A:B5:B4:43:07:3D:A7:A0:BA:92:01:BD:8F:7F:E9:05:9B:B2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62hDT5hS8LgaZfjuT6Exn1C9o832waJmyC3xHpEmpnmf/0/C84AB5B443073DA7A0BA9201BD8F7FE9059BB251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:88:af:be:15:4e:58:8e:de:d3:4b:90:e1:8e:f9:19:c5:
         9a:90:b6:4c:7e:82:56:95:73:e6:ff:c6:31:0f:f4:eb:f8:66:
         1c:07:02:18:cd:6d:1d:8f:18:51:db:b3:c1:81:18:50:c8:d0:
         01:10:60:87:ac:00:4b:29:d3:20:c9:bd:a2:79:f2:b4:cf:db:
         5e:7d:de:cd:2b:34:fe:60:f8:09:1e:6d:3b:08:e3:fd:d2:b0:
         31:44:86:d6:dc:37:e5:90:46:34:79:1d:58:f3:fb:78:83:28:
         79:8c:1e:06:7e:7d:8d:09:04:a8:9f:47:f8:96:39:2a:37:11:
         2e:9e:4e:97:b2:3a:24:de:50:7c:bb:d0:9b:20:fe:06:49:56:
         bc:14:e1:c4:5d:51:1e:4a:d9:41:a0:3d:2d:62:ae:90:14:9a:
         60:88:29:48:b7:f7:88:3b:51:a5:f4:98:99:eb:88:af:7c:bf:
         97:4f:b7:2c:17:9d:d3:dc:a9:35:b1:c6:8f:16:4f:23:68:b6:
         4c:41:b7:1b:56:7e:5a:76:5f:e1:e3:21:d1:d9:af:c2:27:2b:
         5e:e6:5f:6f:49:aa:4d:bf:d8:98:66:db:58:87:b3:5b:1f:e9:
         f5:24:18:ae:a7:6f:6b:ea:b2:98:34:6e:84:64:61:5a:90:ae:
         60:d9:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----