Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.mft
File:                     898859FBCDF505522D04699B7BFFC51B18DA4F2C.mft (raw, json)
Hash identifier:          X4px0cqM9T1NpKhwewqVwYHgzP0pkyjMiryT+iaDrFc=
Subject key identifier:   02:B9:DC:53:EA:61:76:20:F8:78:86:8A:A7:69:21:5F:60:7A:E0:53
Authority key identifier: 89:88:59:FB:CD:F5:05:52:2D:04:69:9B:7B:FF:C5:1B:18:DA:4F:2C
Certificate issuer:       /CN=898859FBCDF505522D04699B7BFFC51B18DA4F2C
Certificate serial:       0508430107669E641D490592FC2872F385A67B98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.mft
Manifest number:          0116
Signing time:             Tue 29 Oct 2024 12:16:07 +0000
Manifest this update:     Tue 29 Oct 2024 12:11:07 +0000
Manifest next update:     Wed 30 Oct 2024 12:16:07 +0000
Files and hashes:         1: 898859FBCDF505522D04699B7BFFC51B18DA4F2C.crl (hash: lICz0U4WAQMGlyh7FJLjbW0lyThKgARLH5bG6DwEn4Y=)
                          2: 323830343a366461633a3a2f33322d3438203d3e20323730353438.roa (hash: hjygXO70HgFz1ty4fAUg7eABboy7HP4w8kKPoJCWljY=)
                          3: 3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa (hash: YKQepcOQKpzOSh9aqriTbC364OsHknTI+m/HhZA86IY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:08:43:01:07:66:9e:64:1d:49:05:92:fc:28:72:f3:85:a6:7b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=898859FBCDF505522D04699B7BFFC51B18DA4F2C
        Validity
            Not Before: Oct 29 12:11:07 2024 GMT
            Not After : Oct 30 12:16:07 2024 GMT
        Subject: CN=02B9DC53EA617620F878868AA769215F607AE053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:15:b4:bf:1b:5f:77:57:ac:a1:f6:fb:31:
                    42:88:73:16:ac:1d:f9:b4:27:95:05:55:51:b3:ca:
                    58:a4:15:82:bc:11:ef:3b:9c:71:bf:3f:5f:87:f0:
                    f8:4a:e9:2b:0c:ff:ff:48:9e:93:2e:d7:31:00:f9:
                    e5:99:74:12:d2:2f:1f:06:46:ac:3c:73:55:c5:03:
                    3c:56:3a:0c:0b:9b:7a:d9:44:ef:00:17:67:46:72:
                    8a:eb:61:7d:ef:50:96:1a:4d:cf:03:c3:31:be:63:
                    32:8a:36:2c:39:92:05:ca:0b:06:3d:56:0b:37:23:
                    94:aa:be:20:cc:3c:2b:ce:2e:1a:2b:83:d5:61:55:
                    c0:9e:ea:4b:35:11:d5:fa:a9:e0:ea:58:1c:33:7f:
                    da:b7:42:1e:84:b8:57:7c:bc:70:3f:1f:54:ac:e6:
                    2b:9b:12:fc:78:9d:46:d0:c7:65:46:f7:6c:0d:9f:
                    e3:ed:9e:6d:bc:f2:00:74:62:6d:db:6a:69:2c:ba:
                    d5:a3:e3:38:e5:12:a9:6c:15:b4:aa:e3:77:18:ff:
                    24:92:2a:69:3a:f6:a5:75:64:88:2b:1e:f0:aa:84:
                    d7:99:60:8a:16:7f:fb:56:ef:ab:f6:81:d8:dd:0c:
                    0b:ca:e4:3e:86:49:87:92:ce:db:ca:9f:b4:5c:cf:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:DC:53:EA:61:76:20:F8:78:86:8A:A7:69:21:5F:60:7A:E0:53
            X509v3 Authority Key Identifier:
                keyid:89:88:59:FB:CD:F5:05:52:2D:04:69:9B:7B:FF:C5:1B:18:DA:4F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6V2xnPURfXb8rf8fC5jyxrbMU9Td2h4tWenWGdAeWdhf/1/898859FBCDF505522D04699B7BFFC51B18DA4F2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:dd:30:f2:db:99:8f:95:fb:a5:a0:a2:22:c8:4d:33:24:
         51:f4:88:b3:cc:e0:6c:4a:54:95:2a:ea:30:63:fd:e8:c1:04:
         95:10:41:9b:1d:29:f3:84:ba:47:2b:74:31:ee:80:97:00:5e:
         e1:44:4d:38:f5:ac:90:81:35:39:f7:a4:f1:5f:d2:2f:11:ba:
         fc:23:a9:79:44:fd:a8:93:31:30:68:81:e2:77:a6:c8:d6:76:
         34:f9:8c:c0:a3:2d:ae:39:9e:ae:2c:35:d4:5e:2d:36:e2:83:
         37:5b:17:07:f2:46:cb:ca:6c:4c:0f:53:39:de:e8:e7:42:d0:
         83:c1:71:2e:fa:30:18:18:77:6e:ce:5a:95:b8:34:93:6c:29:
         41:f1:de:0d:d4:17:17:5a:35:0d:57:93:6d:97:9f:43:83:c7:
         fd:b5:80:d1:66:8b:63:a7:da:13:3a:42:b3:97:80:88:cf:a4:
         4c:43:e2:f1:9f:41:48:82:58:22:16:0f:54:eb:78:b8:ae:28:
         b9:5f:40:7e:5d:65:b3:d1:2b:ef:67:70:ba:b1:15:12:0d:be:
         77:3e:84:0a:2d:25:98:2e:86:ae:c9:88:cd:bf:3f:8a:19:cd:
         26:71:8e:5f:3a:70:b5:c8:63:74:18:2a:be:d3:4e:a8:8e:13:
         a6:6b:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----