Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
File:                     559666084672FD61F081E49F0C76FD1203851E54.mft (raw, json)
Hash identifier:          T9Izaqu8ykuNwoEZDPbboUxgmhb439sjVBzcC7Ndu3g=
Subject key identifier:   F5:69:8A:8D:04:BC:84:D7:C5:FB:04:09:C6:74:AC:C9:A6:EA:FC:A9
Authority key identifier: 55:96:66:08:46:72:FD:61:F0:81:E4:9F:0C:76:FD:12:03:85:1E:54
Certificate issuer:       /CN=559666084672FD61F081E49F0C76FD1203851E54
Certificate serial:       3612A4482AE84C7E837EC957956A7CCD4936AC27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/559666084672FD61F081E49F0C76FD1203851E54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
Manifest number:          0401
Signing time:             Sun 28 Jan 2024 09:11:02 +0000
Manifest this update:     Sun 28 Jan 2024 09:06:02 +0000
Manifest next update:     Mon 29 Jan 2024 11:31:02 +0000
Files and hashes:         1: 3136382e3232382e3137362e302f32322d3234203d3e20323634393236.roa (hash: LKwYorDReLpsjIfO00Mlw9VS5VVufH2zXKwsPn4T11Y=)
                          2: 559666084672FD61F081E49F0C76FD1203851E54.crl (hash: RoYoQeYp9/fTyI6CT2ogN7vPZrazzCzmOJOC4Tbh8u4=)
                          3: 323830343a333030343a3a2f33322d3438203d3e20323634393236.roa (hash: fTHzdic9n9Bwmjqb7D6RRCdGJ4Vzw28262nPvEXPZyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:12:a4:48:2a:e8:4c:7e:83:7e:c9:57:95:6a:7c:cd:49:36:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559666084672FD61F081E49F0C76FD1203851E54
        Validity
            Not Before: Jan 28 09:06:02 2024 GMT
            Not After : Jan 29 11:31:02 2024 GMT
        Subject: CN=F5698A8D04BC84D7C5FB0409C674ACC9A6EAFCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:4e:b4:5b:a4:19:fb:ba:7f:fa:27:d3:12:
                    8f:09:f4:4d:16:0f:3b:b2:f5:6d:d7:e4:94:96:cc:
                    c3:c8:2e:77:31:75:de:95:42:c0:71:de:bc:72:df:
                    01:a0:c9:67:18:c8:fc:ce:07:c9:fe:22:8b:28:7e:
                    7a:36:da:8c:18:09:af:5e:c4:5e:6a:6b:e0:4e:27:
                    00:6c:35:0e:4f:a8:aa:d9:c8:87:94:e4:65:a3:02:
                    11:32:b0:ff:6e:46:16:70:ac:59:35:7d:09:a8:33:
                    8d:c7:83:53:35:37:9a:33:18:88:fc:9f:f9:c1:bc:
                    71:69:18:26:54:42:1e:8c:5c:96:af:38:68:7a:cd:
                    c2:1d:81:cb:36:82:1f:7b:0a:8e:9f:8f:83:7c:d6:
                    d4:fc:e8:6c:f5:55:ae:02:7a:d5:64:ad:7b:93:a4:
                    b1:c0:b6:a5:37:fd:a2:35:33:10:b8:8b:fc:2b:9b:
                    fb:2d:b0:84:e3:24:d5:72:46:30:8b:8c:8b:e9:92:
                    18:8e:01:3a:6d:8a:34:64:ba:76:1c:98:74:bb:34:
                    e9:23:b1:07:13:15:ea:6e:9f:40:79:d3:a6:d4:10:
                    0e:ed:36:07:0f:f9:33:5f:6c:ff:cf:72:a2:d9:26:
                    36:ba:7d:30:a7:7d:34:cd:93:91:dd:2e:39:e5:65:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:69:8A:8D:04:BC:84:D7:C5:FB:04:09:C6:74:AC:C9:A6:EA:FC:A9
            X509v3 Authority Key Identifier:
                keyid:55:96:66:08:46:72:FD:61:F0:81:E4:9F:0C:76:FD:12:03:85:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/559666084672FD61F081E49F0C76FD1203851E54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:24:4b:12:50:29:8f:17:b9:5c:04:07:49:dd:dd:c4:62:cc:
         eb:87:d1:2b:0e:07:a1:3a:b2:3e:e3:d6:fa:24:38:67:a0:3d:
         70:44:d1:15:f5:62:da:d3:6c:5d:5b:a6:1f:dd:b9:fc:ef:9b:
         0c:46:10:6e:1c:9b:c7:d5:59:e5:60:9f:17:da:b8:2d:6a:19:
         54:ed:fe:86:e7:d0:5d:bd:c2:4a:73:0c:bf:b4:e9:c1:c7:a4:
         68:3f:3b:d4:62:73:97:f1:83:a8:ab:2a:53:05:24:95:6d:61:
         f3:bb:b8:ef:c3:e7:15:d1:11:c4:ef:e5:b7:b2:fa:97:fb:92:
         eb:34:9c:b6:16:a2:45:92:bc:5f:d5:9c:7e:3b:16:25:9b:b4:
         e3:65:3a:72:30:65:52:00:5a:01:74:8f:7c:aa:b0:d6:b6:0d:
         7b:5f:ed:f8:3f:8d:2a:42:93:3b:2f:4f:77:e3:74:04:79:18:
         bc:ba:fc:9d:11:75:b2:50:82:06:95:43:eb:d7:75:7d:65:b9:
         99:db:80:b5:54:4b:8f:a6:be:bc:52:ec:31:98:34:99:83:7c:
         b0:46:8c:29:c5:24:5b:b9:b9:16:6d:af:ee:67:40:91:97:6c:
         2d:77:cd:0f:3c:55:10:25:ff:1a:39:d8:1f:e6:97:e2:46:71:
         56:d4:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----