Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.mft
File:                     63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.mft (raw, json)
Hash identifier:          0fcdrf9jfCRjCqqWORXTkwWn+BhtcFPLbdyDX32/Kvc=
Subject key identifier:   C1:9C:F3:2C:89:62:70:43:97:8A:3D:3C:16:93:33:E8:5D:C7:B3:4B
Authority key identifier: 63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66
Certificate issuer:       /CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
Certificate serial:       0A97FB6555F905C4093ECC3D6B3B30007413B190
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.mft
Manifest number:          05F5
Signing time:             Mon 15 Apr 2024 00:42:42 +0000
Manifest this update:     Mon 15 Apr 2024 00:37:42 +0000
Manifest next update:     Tue 16 Apr 2024 00:55:42 +0000
Files and hashes:         1: 323830343a356465303a3a2f33322d313238203d3e20323638393938.roa (hash: dLA7RYsreZv88JX/u/JqHW1y4DyBezLAEklnMRs7xw4=)
                          2: 34352e3137372e3134382e302f32322d3332203d3e20323638393938.roa (hash: vrAc7Qk9v2rhGDltN9edlxNgbJpwz4C2C8vuRsyPcIQ=)
                          3: 63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.crl (hash: kfz0ePKEzGRxa0jzHUV9L2hZoJYvRdfsa4CQ/8838dw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:97:fb:65:55:f9:05:c4:09:3e:cc:3d:6b:3b:30:00:74:13:b1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
        Validity
            Not Before: Apr 15 00:37:42 2024 GMT
            Not After : Apr 16 00:55:42 2024 GMT
        Subject: CN=C19CF32C89627043978A3D3C169333E85DC7B34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:98:fe:cb:82:a1:d7:c9:c6:7d:48:0f:d4:
                    0a:e7:e8:1a:5c:7d:ae:55:49:da:b6:02:32:ba:74:
                    52:4f:73:9b:9e:05:0e:51:1f:1b:b5:57:75:9f:df:
                    6b:a0:30:9e:ea:14:37:a5:7d:27:14:00:c2:c5:45:
                    0c:44:5f:d3:eb:55:c1:be:d8:0c:a9:3f:5d:04:60:
                    a5:77:d6:d8:26:ec:79:88:b7:64:f8:cf:cc:32:19:
                    21:f9:12:1e:21:15:c0:60:f0:c5:1f:ea:bd:95:89:
                    c8:97:9a:ab:90:5d:96:be:c9:50:d0:27:12:d2:52:
                    88:41:88:f2:18:35:b9:b5:ff:35:7f:ab:2d:81:75:
                    9f:6f:cd:da:5b:79:dc:65:93:5b:5c:00:ba:91:31:
                    65:69:01:6a:72:a7:09:d6:31:55:62:d6:23:80:2d:
                    36:8f:04:e4:86:c1:15:c7:2a:d0:9f:4f:fb:e9:a5:
                    a8:18:8f:54:89:af:a7:b9:4d:ba:8e:bc:6a:63:a0:
                    74:33:d2:da:02:06:5b:35:27:2d:b1:70:57:57:53:
                    e5:f6:69:b4:06:3a:7d:e4:cb:5a:4a:5c:4b:a9:f5:
                    90:4b:ff:6c:4e:70:73:d6:06:0c:bd:1f:88:70:d0:
                    7a:d0:6d:54:57:07:6a:09:86:a1:9f:f1:35:97:35:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9C:F3:2C:89:62:70:43:97:8A:3D:3C:16:93:33:E8:5D:C7:B3:4B
            X509v3 Authority Key Identifier:
                keyid:63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:72:b7:62:c4:3b:9f:5b:60:4b:96:98:82:84:7a:e8:9d:60:
         e6:fc:66:74:b4:9a:f8:fe:97:d7:c7:aa:92:61:e9:ba:c4:07:
         e5:c4:7c:ac:ea:59:40:89:76:09:0f:da:ff:6d:2e:0e:99:ba:
         d8:67:cf:8d:b8:f2:31:89:e3:7b:4a:d4:6b:41:31:22:0a:30:
         2a:2f:b2:9f:78:f5:c4:28:d9:9a:c4:13:e3:93:be:c5:7b:c2:
         54:e1:0e:92:93:fd:2a:d7:63:a8:24:fc:f2:90:ae:4a:4d:0f:
         92:24:8d:c0:ce:28:88:9b:7f:ff:08:ea:2f:b0:4f:80:5c:f4:
         dd:82:7a:d5:1b:fe:9d:9c:49:11:2e:95:84:d2:e7:52:fc:8f:
         5f:12:ff:db:c7:86:f5:42:87:9c:40:5c:8b:37:02:df:a4:63:
         46:7b:5b:c3:c9:a2:8a:f8:eb:8c:fd:89:6d:33:4a:c4:b3:c4:
         c7:cc:e7:75:2e:67:53:77:4a:ce:f5:7a:74:23:79:6b:cd:a9:
         42:73:61:a0:74:60:85:2e:32:ae:e8:c0:87:d9:04:48:a0:a0:
         26:62:b7:14:b7:94:4b:5c:82:47:d8:43:10:6f:55:8d:02:4e:
         6b:a9:2f:12:c8:38:35:b9:e5:51:cb:17:39:f1:73:b6:e5:71:
         2d:3c:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----