Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/98D50B2D08410861BB81F581F56EDEF424AB28FD.mft
File:                     98D50B2D08410861BB81F581F56EDEF424AB28FD.mft (raw, json)
Hash identifier:          EXV7o+7JLzQ/Ss/uZ9C0e+SIH0g7KVpVWpcEk83b3Hc=
Subject key identifier:   59:52:3A:65:FE:AF:0D:26:3B:5B:D3:CE:AE:37:F0:42:8F:7C:1D:21
Authority key identifier: 98:D5:0B:2D:08:41:08:61:BB:81:F5:81:F5:6E:DE:F4:24:AB:28:FD
Certificate issuer:       /CN=98D50B2D08410861BB81F581F56EDEF424AB28FD
Certificate serial:       6935953C5BBBECF10E7606A54313F768AF62AFFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98D50B2D08410861BB81F581F56EDEF424AB28FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/98D50B2D08410861BB81F581F56EDEF424AB28FD.mft
Manifest number:          7D
Signing time:             Mon 15 Apr 2024 04:54:08 +0000
Manifest this update:     Mon 15 Apr 2024 04:49:08 +0000
Manifest next update:     Tue 16 Apr 2024 07:00:08 +0000
Files and hashes:         1: 3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (hash: tU8qDqvCQCQapWy6QZnGEIGU5BflnQ3ljLPiML9QD9k=)
                          2: 98D50B2D08410861BB81F581F56EDEF424AB28FD.crl (hash: 2qw55bVDHMUFyRzlPSqB/dsCPALKYBgqMREiwEiZqLw=)
                          3: 323830343a373634633a3a2f33322d3438203d3e20323731313032.roa (hash: eObWnoBhgW33Kfd8WvA6P39mgqZ8UxIN8/ACxD4cmmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:35:95:3c:5b:bb:ec:f1:0e:76:06:a5:43:13:f7:68:af:62:af:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D50B2D08410861BB81F581F56EDEF424AB28FD
        Validity
            Not Before: Apr 15 04:49:08 2024 GMT
            Not After : Apr 16 07:00:08 2024 GMT
        Subject: CN=59523A65FEAF0D263B5BD3CEAE37F0428F7C1D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:c5:00:7f:fc:a6:31:a8:64:b4:60:38:fd:
                    2f:b0:2b:ec:af:70:c1:1b:f3:ee:0b:a9:70:79:e2:
                    8c:93:ea:6f:79:90:9f:d4:93:68:c7:19:45:c1:e0:
                    90:36:cf:77:28:78:a1:b0:03:25:13:2e:f3:09:81:
                    3a:5d:a6:2c:4d:2c:bd:82:cb:82:2a:f5:a3:ab:87:
                    3b:e9:2c:46:b8:58:2c:e7:0a:d4:8c:4a:e0:75:f2:
                    1e:f1:37:8f:f0:a9:7e:9a:0b:20:f4:68:fa:44:58:
                    87:9a:7e:e6:b2:f5:61:49:54:67:4c:38:7e:9c:3e:
                    7e:2e:ee:80:fb:21:c1:ea:8f:b8:a7:fb:1b:d5:8b:
                    f4:d1:92:39:e8:78:1e:95:46:85:c0:d5:94:8f:76:
                    36:17:d3:ab:7c:f6:d6:d1:6d:ab:a2:00:4c:15:fd:
                    97:81:b6:fd:f9:00:4a:4e:86:81:8e:77:7d:81:d6:
                    a0:39:48:62:08:61:4f:f7:0b:5a:92:41:32:ff:96:
                    e5:89:be:7f:e1:f2:74:87:a5:09:10:af:bf:72:47:
                    69:74:94:84:c2:d3:4f:0f:bd:89:10:ad:60:4e:56:
                    6a:9e:93:46:b1:ae:6b:60:d4:fd:7e:3d:a0:c0:3e:
                    7c:9a:ff:c6:26:3d:a2:4e:9a:3a:74:fd:0f:5a:79:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:3A:65:FE:AF:0D:26:3B:5B:D3:CE:AE:37:F0:42:8F:7C:1D:21
            X509v3 Authority Key Identifier:
                keyid:98:D5:0B:2D:08:41:08:61:BB:81:F5:81:F5:6E:DE:F4:24:AB:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/98D50B2D08410861BB81F581F56EDEF424AB28FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98D50B2D08410861BB81F581F56EDEF424AB28FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/98D50B2D08410861BB81F581F56EDEF424AB28FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:34:f9:90:28:13:7d:30:0d:ae:53:01:39:54:c1:2e:ba:
         29:0f:cf:5a:e5:53:31:c1:a8:79:66:38:b4:78:92:6f:21:29:
         a4:b3:ec:ea:7e:a6:02:37:9d:69:c0:45:b6:39:40:64:66:ab:
         14:cf:b8:43:51:01:f7:91:84:92:c6:b3:8d:1f:0c:08:ef:fb:
         47:f8:25:54:81:92:d0:87:c0:ae:d8:db:20:6f:30:cc:97:28:
         9e:1b:e8:cd:57:b4:72:fb:ab:be:89:50:6c:59:37:80:58:de:
         98:61:64:ed:fc:31:37:77:59:42:62:15:71:b0:38:b6:9b:3a:
         cf:c5:aa:43:97:06:94:46:81:d3:d6:03:32:05:e8:d3:82:3c:
         04:32:2c:01:1c:d1:07:cc:dd:5a:60:4a:29:26:ef:30:64:35:
         42:d0:b4:64:18:ea:ad:50:6e:c9:2b:cf:46:d9:6b:cc:72:55:
         9d:d0:2b:44:8e:62:4a:9b:a3:1d:3a:27:c8:ad:d2:48:ad:fb:
         93:76:d9:02:74:98:ca:49:81:87:2e:e2:01:3c:bc:92:b7:6b:
         54:3c:30:d0:5e:9c:a9:30:9d:2d:99:10:c6:bb:1c:2e:17:e3:
         ea:b4:24:63:da:43:66:f9:c2:23:e1:7f:ab:97:e8:99:f6:a8:
         19:b7:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----