Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/9CA6203F3AA21FEA39023DD53376A6DB04B9F135.mft
File:                     9CA6203F3AA21FEA39023DD53376A6DB04B9F135.mft (raw, json)
Hash identifier:          ghvSqq8877fom8nAfH7bdKYqpu55Wj4lT5e8m6QNjOM=
Subject key identifier:   CF:28:07:08:82:AE:55:64:5F:D3:C6:46:AE:4A:E4:A8:4E:94:24:D4
Authority key identifier: 9C:A6:20:3F:3A:A2:1F:EA:39:02:3D:D5:33:76:A6:DB:04:B9:F1:35
Certificate issuer:       /CN=9CA6203F3AA21FEA39023DD53376A6DB04B9F135
Certificate serial:       7DB3DF74E9BF0CDF78AC2BC67091FBCD223835B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6203F3AA21FEA39023DD53376A6DB04B9F135.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/9CA6203F3AA21FEA39023DD53376A6DB04B9F135.mft
Manifest number:          03
Signing time:             Sun 25 Aug 2024 01:43:57 +0000
Manifest this update:     Sun 25 Aug 2024 01:38:57 +0000
Manifest next update:     Mon 26 Aug 2024 04:43:57 +0000
Files and hashes:         1: 323830343a373634633a3a2f33322d3438203d3e20323731313032.roa (hash: O+IKrn+Hucy//6Z30pqwYT3EaaPwvivosWwqj2XUjto=)
                          2: 9CA6203F3AA21FEA39023DD53376A6DB04B9F135.crl (hash: COHrXnu9xXDso48g7i3pcrgQveyaHPc7EpzxuZsEjlM=)
                          3: 3137392e34382e3232302e302f32322d3234203d3e20323731313032.roa (hash: NUxXXLfWH1AQi1nhkYL3jITO5P4ZOhseO6OsrxL61rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b3:df:74:e9:bf:0c:df:78:ac:2b:c6:70:91:fb:cd:22:38:35:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CA6203F3AA21FEA39023DD53376A6DB04B9F135
        Validity
            Not Before: Aug 25 01:38:57 2024 GMT
            Not After : Aug 26 04:43:57 2024 GMT
        Subject: CN=CF28070882AE55645FD3C646AE4AE4A84E9424D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:9c:c5:ac:b0:b3:25:81:35:c6:4a:d2:56:
                    76:be:f2:6f:7d:d9:22:39:7e:a4:9d:26:6c:c1:c9:
                    06:69:b0:30:4d:66:4c:ab:2a:92:34:ae:30:29:7d:
                    9d:26:7d:89:14:e1:18:70:06:84:e3:e5:14:5c:6b:
                    c6:df:4d:3b:5d:74:56:d2:61:b1:c3:15:90:06:6f:
                    1f:c4:63:65:f7:62:ab:d7:5f:c6:0e:2a:b3:35:51:
                    6a:8c:7e:4f:5b:58:96:2a:e5:f4:bb:d9:33:a6:1b:
                    eb:ce:29:a7:cf:6e:e0:f3:84:ab:c5:f5:9c:24:2d:
                    dc:ad:be:3c:70:e9:53:b5:6b:7b:c2:9a:d2:a0:57:
                    39:f5:63:c5:3a:dd:b8:ff:21:59:92:44:0b:d9:c7:
                    ce:fb:e2:66:b5:7c:40:78:08:9c:6b:43:fb:30:26:
                    60:fd:0a:b6:d8:9c:5f:8c:37:19:96:bf:ac:7d:73:
                    87:b0:52:bd:73:f1:c7:b3:cf:d5:d1:74:6e:d9:54:
                    7d:5a:1a:27:a6:6f:ea:c0:11:72:c6:7b:5a:3a:0c:
                    d3:9a:0f:6c:72:ae:5a:26:e8:2f:8a:26:f3:77:c5:
                    ed:c1:0d:62:0f:ba:22:59:9e:56:81:73:fe:a6:8e:
                    6b:50:0e:18:67:c6:49:10:31:4e:05:4b:e8:ff:cd:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:07:08:82:AE:55:64:5F:D3:C6:46:AE:4A:E4:A8:4E:94:24:D4
            X509v3 Authority Key Identifier:
                keyid:9C:A6:20:3F:3A:A2:1F:EA:39:02:3D:D5:33:76:A6:DB:04:B9:F1:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/9CA6203F3AA21FEA39023DD53376A6DB04B9F135.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CA6203F3AA21FEA39023DD53376A6DB04B9F135.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/9CA6203F3AA21FEA39023DD53376A6DB04B9F135.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ea:dc:23:85:1e:49:f8:77:80:12:8c:d8:c7:0a:a3:98:f4:
         ba:e2:6b:db:de:2b:ce:6a:8e:5d:fe:3d:e3:ec:fa:96:c6:9a:
         2a:af:10:1d:23:5b:c5:00:74:dd:ed:81:b7:de:c8:81:9a:9c:
         ba:61:43:ff:53:71:69:83:0b:83:ee:26:34:96:ad:45:5c:56:
         cd:8f:3f:83:5c:54:b3:83:c5:71:c0:3a:2e:16:03:78:9e:14:
         16:ca:3c:59:15:5a:37:89:a8:86:58:13:7b:ad:65:ba:93:ab:
         79:a8:fe:c0:28:78:ef:8f:43:86:86:41:4b:79:02:02:a9:d2:
         9c:49:41:62:93:c2:8a:5b:b6:68:53:61:07:90:ce:7c:0c:06:
         e3:a2:41:35:1b:69:20:a1:cf:9f:ea:e7:ae:4f:95:9e:5c:37:
         8b:c1:27:23:a9:57:55:8f:a9:79:9c:e6:60:3e:71:35:47:46:
         c2:11:f3:40:45:ea:33:2c:9f:19:ba:c2:7e:b1:17:8b:e8:c7:
         ed:e5:63:92:f6:6d:6a:b2:62:2d:f0:63:b5:59:5b:9e:72:93:
         cf:b2:fd:f7:41:a9:a9:3c:98:15:d9:3a:f2:71:e9:87:fe:ac:
         e5:33:54:df:41:0f:24:1e:db:9d:43:d7:b5:c0:66:5d:02:df:
         72:54:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----