Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.mft
File:                     23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.mft (raw, json)
Hash identifier:          Xj6iB2P1ok/qNvgdSryxFtThFDOwWyPYmNc3Lbx/MDc=
Subject key identifier:   1D:19:8F:14:23:D2:7E:79:BB:AB:CA:E1:41:88:54:17:84:5F:1D:20
Authority key identifier: 23:EE:0E:8B:65:48:40:C9:A3:B2:F5:BA:ED:A9:19:31:23:C0:8C:0E
Certificate issuer:       /CN=23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E
Certificate serial:       5DB685004CCA06265063266AA5F31CC9A32E8020
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.mft
Manifest number:          85
Signing time:             Tue 09 Jul 2024 12:31:33 +0000
Manifest this update:     Tue 09 Jul 2024 12:26:33 +0000
Manifest next update:     Wed 10 Jul 2024 15:02:33 +0000
Files and hashes:         1: 3138392e382e3132302e302f32322d3234203d3e20323730373332.roa (hash: ultZeL8C5rNX4x2BaSX0u0wbkUpb9X/4OGvY/i9sb2Y=)
                          2: 323830343a373038383a3a2f33322d3438203d3e20323730373332.roa (hash: wFKt4psRB6jNxAFPuK4e3wOh/Su1zpwRZ1Ercy5kLwc=)
                          3: 23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.crl (hash: IsJeuvqCyvJ3kh+z5crWfz7/R1+K6/K7J0z23DCurY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b6:85:00:4c:ca:06:26:50:63:26:6a:a5:f3:1c:c9:a3:2e:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E
        Validity
            Not Before: Jul  9 12:26:33 2024 GMT
            Not After : Jul 10 15:02:33 2024 GMT
        Subject: CN=1D198F1423D27E79BBABCAE141885417845F1D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:5e:f0:bc:48:e4:05:4f:db:00:b3:f4:65:
                    e0:c5:ce:7b:31:81:61:17:1a:fd:af:30:18:60:f6:
                    6b:41:dc:06:90:1c:75:52:a7:e5:9f:58:48:de:6b:
                    3b:57:43:df:7a:e7:48:d4:f1:b8:2f:0a:15:7a:6a:
                    17:a3:e4:29:29:19:e3:e7:3a:0f:2f:0e:3a:d3:40:
                    65:3b:4a:ac:c3:48:59:bc:1b:ee:35:69:55:d6:f2:
                    f0:45:33:a4:7f:4c:9c:9b:47:3d:54:7a:a0:09:0a:
                    ec:a8:19:60:8a:d9:98:11:37:3f:48:f9:9a:23:9c:
                    6c:25:1d:c2:61:b1:95:31:25:f4:6b:e8:5c:70:c1:
                    96:46:d0:d7:00:75:0c:5b:f0:81:ef:9c:61:d8:71:
                    46:0d:4c:d1:01:0a:fe:49:5f:a5:8b:ca:da:c0:77:
                    4b:8a:84:e0:2e:d4:92:ab:26:43:1b:56:21:dd:29:
                    7c:88:9d:8d:fb:ee:82:33:c2:bb:c9:8a:81:ea:aa:
                    2b:13:87:19:4f:fc:17:bf:dd:c3:7e:c8:0e:57:cc:
                    5e:2d:9f:fd:a0:f5:26:82:40:e6:3c:0a:7b:c7:b3:
                    c8:db:37:63:0f:e5:06:28:bf:0b:be:5c:42:77:24:
                    4c:68:ef:fd:22:07:4d:3f:11:71:7c:32:de:6a:f6:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:19:8F:14:23:D2:7E:79:BB:AB:CA:E1:41:88:54:17:84:5F:1D:20
            X509v3 Authority Key Identifier:
                keyid:23:EE:0E:8B:65:48:40:C9:A3:B2:F5:BA:ED:A9:19:31:23:C0:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:3d:0d:0e:64:80:41:84:74:30:23:cd:b8:35:88:0e:ab:
         73:b1:54:2a:33:aa:13:42:a2:89:a8:e3:8b:78:75:55:ff:53:
         48:cb:97:91:4d:38:95:11:67:e8:75:8a:69:c7:9b:76:44:fc:
         38:0d:1a:49:81:40:2f:36:cc:32:9f:31:37:a9:b0:8d:6a:32:
         81:49:64:9c:08:2f:8b:04:5f:01:fa:10:87:86:21:9e:44:f0:
         b6:d8:88:35:bf:da:67:ef:6b:75:91:16:b4:1d:d7:74:ec:40:
         8a:96:1a:bd:f3:76:8b:3d:9f:4b:d4:65:30:fe:87:f8:a0:d3:
         5e:dd:83:8b:0e:4e:9a:0b:db:25:70:5c:b2:3a:5d:89:d5:6c:
         c5:c6:c0:59:60:3c:46:f3:08:ee:27:38:7c:1a:f9:e5:cf:6a:
         6d:09:33:ad:65:9f:8e:4e:29:1c:f6:ad:44:72:65:15:b7:1c:
         ab:76:be:72:be:98:8d:c1:fd:7c:64:7a:2d:fd:40:00:f9:70:
         8a:a0:88:f2:32:61:8f:35:c5:fa:c6:39:98:09:2c:37:d5:77:
         29:a3:00:da:36:51:a4:87:76:fd:6d:f2:ab:4b:13:eb:e2:44:
         ab:be:0d:ab:59:fb:85:de:a6:08:7f:71:99:52:25:62:72:11:
         42:fe:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----