Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.mft
File:                     8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.mft (raw, json)
Hash identifier:          J7yTCiEkHev6WPmyuZPAys+Q8OHrTGtUeqEOWQ5p5Hk=
Subject key identifier:   85:15:1F:A6:C1:49:E5:98:AC:D0:77:71:E1:35:95:47:CF:53:99:F4
Authority key identifier: 83:45:A7:56:1C:0C:4A:73:A3:0F:B2:FE:B6:C9:A6:0A:4E:89:AB:A3
Certificate issuer:       /CN=8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3
Certificate serial:       74251554220889BAB9CDD586F385700B3217F796
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.mft
Manifest number:          60
Signing time:             Mon 15 Apr 2024 09:22:26 +0000
Manifest this update:     Mon 15 Apr 2024 09:17:26 +0000
Manifest next update:     Tue 16 Apr 2024 11:18:26 +0000
Files and hashes:         1: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: WOPjxf62wcyedmnJxIXkOzEIPqgUuq1M1IxoIe4etbs=)
                          2: 8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.crl (hash: 3znIwQ6M8KFQaG/tViowGzCWUpf3WRp2ww4COfju6AI=)
                          3: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: MQqC3D8diz4xnlI4OWYP+AWhkvMIEqJexlCjaZHdfMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:15:54:22:08:89:ba:b9:cd:d5:86:f3:85:70:0b:32:17:f7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3
        Validity
            Not Before: Apr 15 09:17:26 2024 GMT
            Not After : Apr 16 11:18:26 2024 GMT
        Subject: CN=85151FA6C149E598ACD07771E1359547CF5399F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:4d:cc:cb:64:06:2f:c7:eb:57:51:c3:86:
                    df:f0:61:de:3b:ad:7a:9b:9b:e4:53:bb:db:2b:d1:
                    df:47:00:c4:99:5b:ee:67:ee:c1:ed:6a:b5:f4:b6:
                    5f:be:27:06:18:d3:4c:f1:c4:2a:d4:cb:b9:fb:6a:
                    af:09:c8:27:e8:1d:ed:11:63:ed:92:f0:00:67:96:
                    13:04:a9:33:a2:22:69:48:66:66:35:82:86:b5:17:
                    cf:c0:e6:09:e3:85:71:89:b8:da:bb:fb:26:7c:f3:
                    c9:84:41:3d:3c:ac:21:c3:54:57:00:ac:58:1b:8b:
                    09:ec:6b:e1:3a:e7:3b:1c:5f:20:b1:2d:d6:85:7f:
                    0b:11:f2:d1:53:0f:22:b0:ac:99:ff:67:3d:29:a5:
                    c6:ba:67:3b:7a:c7:44:70:35:e5:1c:18:c5:5d:ba:
                    f5:0b:cf:60:87:42:b1:5d:db:27:e0:00:82:92:6a:
                    9c:24:8c:2b:58:4f:7f:86:9d:e8:38:30:89:d5:98:
                    00:5a:7a:12:73:d4:19:cf:2a:4a:5e:93:a2:0f:c2:
                    00:dd:a2:bd:4a:e0:f9:95:24:62:86:a3:bf:f7:7e:
                    dc:d9:ab:41:59:e0:89:f7:13:31:76:e0:27:a3:4d:
                    d9:50:f7:26:eb:03:31:f2:92:94:6d:d5:2b:71:a4:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:1F:A6:C1:49:E5:98:AC:D0:77:71:E1:35:95:47:CF:53:99:F4
            X509v3 Authority Key Identifier:
                keyid:83:45:A7:56:1C:0C:4A:73:A3:0F:B2:FE:B6:C9:A6:0A:4E:89:AB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:89:c2:0d:a8:02:b2:83:09:aa:20:12:f2:54:2b:97:b6:
         a8:1a:60:1f:65:3b:83:3b:ef:44:6a:28:51:ab:f6:7f:70:64:
         b1:2f:ae:00:76:b4:22:7b:ff:98:04:5c:e3:a3:6f:12:2a:97:
         43:28:d0:00:90:6d:06:56:e8:a3:3a:09:ff:84:5a:3b:39:5d:
         d4:48:a6:c5:6c:6e:04:f5:32:14:24:e2:da:7e:44:11:22:a6:
         91:e7:4e:4b:7d:77:91:1b:3f:c4:71:6c:6c:cd:9a:e4:1f:ca:
         f0:8c:0b:40:1c:f7:71:21:ab:d7:b5:a8:2a:51:80:31:ef:4f:
         1a:e7:91:74:e4:00:23:1c:d3:9c:1d:68:af:6a:dd:44:69:83:
         44:d0:89:9d:bd:66:9c:10:83:34:ec:04:61:be:cc:59:6b:e6:
         1e:04:5f:00:62:d5:90:09:63:09:ea:4b:a1:51:92:a0:f7:e1:
         76:aa:6b:84:ec:8c:29:fd:c3:c9:51:8b:5d:c4:9c:84:f0:f5:
         85:fa:25:9e:2c:a4:c4:fd:f9:eb:60:77:a5:53:3c:1b:0d:b8:
         54:ed:38:3a:a1:5e:d1:e5:1b:2b:6a:e4:2c:61:b6:2b:7c:2f:
         c7:3e:f1:00:b7:1b:0c:1c:3b:d7:0f:33:7e:0d:df:8a:4b:e5:
         73:f8:eb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----