Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.mft
File:                     B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.mft (raw, json)
Hash identifier:          6kv2uj09r5DR7KCNZya7c9rTZko+2D9oh54zMO3lNkM=
Subject key identifier:   68:03:0F:8D:DF:EF:84:FA:DE:F0:FB:66:C7:99:F3:07:DD:4F:78:5F
Authority key identifier: B7:FA:4D:E3:78:CD:54:DE:57:9C:94:C2:05:9C:B4:52:1F:0B:A6:BA
Certificate issuer:       /CN=B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA
Certificate serial:       692E9A30BA865B5428BD55F0DAF3AE4C471E85EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.mft
Manifest number:          A2
Signing time:             Sun 14 Apr 2024 21:54:08 +0000
Manifest this update:     Sun 14 Apr 2024 21:49:08 +0000
Manifest next update:     Tue 16 Apr 2024 00:28:08 +0000
Files and hashes:         1: B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.crl (hash: yssPXuRXw/v8e+dT6BlS9qIqmc0x/1uA9PyxWGRkeaY=)
                          2: 323830343a363231633a3a2f33322d3332203d3e20323639323736.roa (hash: bD/Y4BqVlL3TtuWniylN7KdlCEkAVMi1Fnac5gBIJY8=)
                          3: 34352e3138322e39302e302f32332d3233203d3e20323639323736.roa (hash: J3PCBxX5/ZQQACILjpRI/6GC/R+7Ag74ffO8gB0zD24=)
                          4: 34352e3138322e38382e302f32322d3232203d3e20323639323736.roa (hash: C9cM2bJnk3r+S3XYnEfcdCGIOMlVRPtfodRm1vvmq6I=)
                          5: 34352e3138322e38382e302f32332d3233203d3e20323639323736.roa (hash: zjhNaV81E+AhhWp2//3eiwqxL9xOwLOCQuKhA5rm0jU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:9a:30:ba:86:5b:54:28:bd:55:f0:da:f3:ae:4c:47:1e:85:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA
        Validity
            Not Before: Apr 14 21:49:08 2024 GMT
            Not After : Apr 16 00:28:08 2024 GMT
        Subject: CN=68030F8DDFEF84FADEF0FB66C799F307DD4F785F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:4c:8d:5c:57:f9:50:f0:21:5d:c8:3c:a0:
                    6b:5a:94:d5:c2:d0:4d:17:36:a2:11:91:7a:d5:e2:
                    d8:10:67:0c:8d:be:6b:d5:07:82:e3:c2:02:e0:06:
                    3d:1f:0e:68:3d:08:30:24:eb:7e:db:dd:ec:46:8e:
                    1e:c2:18:ef:d9:a6:d7:57:b9:b9:ec:29:f7:b0:23:
                    cc:ba:1a:a3:33:9a:b8:46:ab:0b:77:9f:ee:dd:a3:
                    fb:08:bb:4d:34:b5:37:6c:0c:e4:a0:19:87:b5:27:
                    bb:c7:c2:e3:7e:34:88:be:6f:0f:9d:74:a6:b5:b2:
                    71:0f:63:f3:41:ff:b5:18:87:3c:88:27:ea:5b:4e:
                    98:2e:97:2c:50:d7:b8:93:b5:42:f1:93:c9:a6:41:
                    93:69:23:df:2c:88:85:b8:41:8d:3f:ef:bf:7d:2d:
                    a6:8f:6e:e7:10:43:12:e3:0f:6f:81:12:f6:94:67:
                    44:f9:cd:8b:73:8b:a9:b6:14:25:b3:ef:e0:08:ae:
                    98:6b:dd:be:fa:12:24:15:16:a8:e6:1c:98:4a:c2:
                    86:af:8c:46:2c:6b:18:24:37:04:3b:5f:60:8b:0b:
                    a8:a9:22:41:05:45:30:14:6d:11:2e:9d:4a:db:11:
                    66:18:c3:ad:ee:26:d1:38:09:c6:fc:9e:89:45:85:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:0F:8D:DF:EF:84:FA:DE:F0:FB:66:C7:99:F3:07:DD:4F:78:5F
            X509v3 Authority Key Identifier:
                keyid:B7:FA:4D:E3:78:CD:54:DE:57:9C:94:C2:05:9C:B4:52:1F:0B:A6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:db:ae:f9:b1:00:03:82:4c:7c:a5:83:d0:4f:e2:09:80:36:
         3f:2c:0b:18:6e:d6:26:85:51:78:54:50:8a:be:45:9e:d6:a0:
         f6:6d:d9:7f:8c:75:b3:c2:a3:81:1c:cc:a8:57:d1:bb:04:e1:
         39:a5:e1:39:36:43:33:3d:fa:13:9f:77:15:99:78:71:f4:5a:
         f8:9e:74:b7:c7:23:81:ba:96:a0:00:a0:f8:0f:0b:f9:31:3f:
         64:3d:f9:fc:01:85:57:d6:8b:cb:38:72:b5:55:e6:5c:44:a5:
         d7:4f:09:a3:fa:f9:77:ac:05:73:c5:89:14:1c:de:71:85:6e:
         e7:39:9b:81:ba:e3:19:dd:09:3c:5c:b7:f3:1d:d6:47:6f:7a:
         0a:91:7f:26:83:d2:57:a7:77:7e:f6:df:79:cc:5f:30:e3:0b:
         37:c4:ca:4a:0b:ce:fd:d7:ea:93:80:f7:84:e2:d4:9f:97:8a:
         61:08:91:02:ae:05:78:ed:39:6b:55:1b:f6:ae:7b:df:a7:bd:
         75:9b:16:54:bf:f0:53:5b:27:f9:35:32:b6:65:15:29:75:1e:
         63:6c:66:90:ce:47:00:fd:24:66:e4:17:74:0e:0f:03:e3:f4:
         52:a7:7d:ac:6d:a8:8a:9e:1d:a4:3e:6f:67:7e:0a:f2:2a:d8:
         c6:57:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----