Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
File:                     D297690F68F4535C1EEA34AA4421792C2944DF34.mft (raw, json)
Hash identifier:          qz4M+ZdesAfAy6cQqlyJ31UgjRccmFUvIf8Jj3u0PpI=
Subject key identifier:   69:96:59:5C:B4:A2:E2:5F:85:C6:7F:22:E1:F9:BB:BC:4E:15:7D:3D
Authority key identifier: D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34
Certificate issuer:       /CN=D297690F68F4535C1EEA34AA4421792C2944DF34
Certificate serial:       05F0087169EAAC12ECAD495638344DF295E6DB63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft
Manifest number:          FA
Signing time:             Thu 10 Oct 2024 04:32:37 +0000
Manifest this update:     Thu 10 Oct 2024 04:27:37 +0000
Manifest next update:     Fri 11 Oct 2024 06:00:37 +0000
Files and hashes:         1: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: owJN/6NNL7NFL+XKlc7t7W28nKfaSgNWegitPA55y2E=)
                          2: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: JAhfrLwww1xAyrWBRWSKRosD8QOE8aDL1q3U0NU32ao=)
                          3: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: IOCGH0H2ZR3ksxhaNESnH6zhq3TpZuhVy7aQBfjQrPg=)
                          4: D297690F68F4535C1EEA34AA4421792C2944DF34.crl (hash: 5cUyCNn1BXeCU4yzaSvE6IjF4+crHlPzZiF7R9jTPvM=)
                          5: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: 9Z6/eDQ8mtxGrHhvwWmiPQMrlsn8gURBt4/KKy244AQ=)
                          6: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: AeLBaNeZHq7+hmFcDaA7bBi5XfBhBNvc92qxpbcP8No=)
                          7: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: iLjiZiG3ddzgl7bWD6ble9YgFY4gbegKJ20qhD5O1jA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f0:08:71:69:ea:ac:12:ec:ad:49:56:38:34:4d:f2:95:e6:db:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D297690F68F4535C1EEA34AA4421792C2944DF34
        Validity
            Not Before: Oct 10 04:27:37 2024 GMT
            Not After : Oct 11 06:00:37 2024 GMT
        Subject: CN=6996595CB4A2E25F85C67F22E1F9BBBC4E157D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:d7:93:e3:f1:5b:8f:19:ed:9a:b8:8f:79:
                    32:81:d8:3b:a9:cd:7f:3d:3e:7d:1f:20:01:26:b6:
                    70:7e:7d:f6:84:2e:f8:33:a8:4c:cd:49:a6:f2:c5:
                    1d:77:e7:17:e7:22:2b:ee:0f:99:da:d2:06:e5:d5:
                    c1:cc:9f:82:ed:a8:b0:df:75:66:b0:ca:50:5c:a7:
                    ed:0c:69:29:6a:67:ac:3c:8b:a3:3b:93:4e:73:97:
                    7b:de:0d:d8:30:34:0a:69:92:24:46:18:d7:ad:b1:
                    a3:1d:e8:7a:eb:34:d6:a3:eb:6e:9d:3c:bd:9f:26:
                    7f:77:d1:6c:a4:fd:9f:3e:4c:a4:8b:f1:14:17:1b:
                    9b:3d:7f:a9:04:1e:fc:b7:64:32:c2:b7:b2:2b:e6:
                    81:4d:65:45:6e:6f:d1:d7:56:92:fb:0a:63:94:a7:
                    b8:39:75:ee:39:a8:67:e0:20:27:a3:f8:a5:13:5a:
                    a6:c8:dd:b5:bd:97:59:29:80:28:76:94:6d:16:2f:
                    ae:de:80:c9:43:97:a6:37:2a:9e:c6:45:fc:d9:65:
                    47:af:19:38:c6:a8:bf:9f:d1:ed:4f:3c:88:ed:e2:
                    8c:98:dc:c5:3f:75:a6:89:da:17:aa:cc:a1:fc:62:
                    03:ed:c9:7c:b1:9b:c3:32:0a:64:95:5d:54:db:73:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:96:59:5C:B4:A2:E2:5F:85:C6:7F:22:E1:F9:BB:BC:4E:15:7D:3D
            X509v3 Authority Key Identifier:
                keyid:D2:97:69:0F:68:F4:53:5C:1E:EA:34:AA:44:21:79:2C:29:44:DF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D297690F68F4535C1EEA34AA4421792C2944DF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D297690F68F4535C1EEA34AA4421792C2944DF34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1b:f8:98:2f:92:42:8f:20:93:95:73:0e:39:fc:f4:d0:12:
         59:63:4b:00:df:0e:b8:d4:98:d1:ed:58:59:60:a4:5e:69:63:
         10:62:e0:1e:d2:47:f8:48:52:08:fc:a0:af:98:9c:59:e9:0f:
         89:c1:a1:76:18:94:9c:18:f5:7f:fe:a9:54:48:be:b4:ec:03:
         74:b3:ed:54:28:1c:91:ef:62:1f:53:e4:4d:bb:fe:32:9c:08:
         07:64:fa:5a:51:db:66:9b:e5:b5:8d:7c:ea:28:57:08:18:9b:
         b5:f1:75:11:5b:b1:d6:29:7e:9f:f9:f7:78:0a:43:18:3b:89:
         23:2f:e6:c9:d4:84:c3:d6:c8:f4:89:58:1b:8c:ff:01:a6:09:
         b7:2a:10:bb:74:2f:c1:c6:90:f5:a4:ce:1e:53:f3:b7:c3:71:
         db:48:5f:2a:e9:c9:1e:94:c3:83:7c:b8:4a:98:4a:60:00:e5:
         e0:1b:e3:4a:9b:61:c3:d7:f5:2d:bc:76:eb:f4:a4:5b:73:33:
         76:59:0d:d4:d2:66:98:b9:c6:d6:86:15:1e:6b:dd:a7:6c:b0:
         a2:24:a1:74:74:80:af:d7:22:e1:49:13:45:a1:a0:9a:4a:02:
         d0:32:84:8b:ee:8b:47:15:4d:47:96:72:87:ee:39:cf:4b:63:
         39:c1:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----