Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/1/8861189B955EB7DA45C466383D8FBC939B669297.mft
File:                     8861189B955EB7DA45C466383D8FBC939B669297.mft (raw, json)
Hash identifier:          he7LMW0FxRmDzmSofR9iAuQPSV46QYDbEiEdzMg5exs=
Subject key identifier:   C0:F2:B2:FE:A3:69:92:F2:8B:4E:51:F3:4A:AE:CD:88:42:6D:1D:55
Authority key identifier: 88:61:18:9B:95:5E:B7:DA:45:C4:66:38:3D:8F:BC:93:9B:66:92:97
Certificate issuer:       /CN=8861189B955EB7DA45C466383D8FBC939B669297
Certificate serial:       33E1B12A44240D1CB948DE1F3103150DDF97E613
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8861189B955EB7DA45C466383D8FBC939B669297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/1/8861189B955EB7DA45C466383D8FBC939B669297.mft
Manifest number:          DF
Signing time:             Wed 18 Sep 2024 12:05:35 +0000
Manifest this update:     Wed 18 Sep 2024 12:00:35 +0000
Manifest next update:     Thu 19 Sep 2024 12:15:35 +0000
Files and hashes:         1: 8861189B955EB7DA45C466383D8FBC939B669297.crl (hash: mblJKz6uOiG4BkRfvwpODVYeiq+cfyCS+bttz92j9sk=)
                          2: 3139302e322e36342e302f32322d3332203d3e20323730333137.roa (hash: JkvPjP8N5784+Pg0lWKJnn/RHl3MmJCpRbwzY+pM7aY=)
                          3: 323830343a366132633a3a2f33322d313238203d3e20323730333137.roa (hash: +sJBQ36kqJjQibRx5T/IEaIpDma3aoGKuDwluXqI6Jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e1:b1:2a:44:24:0d:1c:b9:48:de:1f:31:03:15:0d:df:97:e6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8861189B955EB7DA45C466383D8FBC939B669297
        Validity
            Not Before: Sep 18 12:00:35 2024 GMT
            Not After : Sep 19 12:15:35 2024 GMT
        Subject: CN=C0F2B2FEA36992F28B4E51F34AAECD88426D1D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:8f:d8:ec:58:4a:9e:42:ab:e6:bd:a0:4b:
                    d6:e7:c0:fb:d7:d4:86:a6:a3:2b:41:c4:11:96:bb:
                    e7:39:6e:1f:5e:fb:73:1a:cc:24:da:10:d5:21:5c:
                    ac:19:f8:15:09:fd:1a:54:a8:fe:26:ea:71:12:a6:
                    70:05:76:c9:92:20:08:ee:d5:55:4f:a6:77:ae:e3:
                    8b:34:61:71:d7:05:15:34:70:15:5d:42:11:52:c4:
                    96:ee:12:f8:73:34:ac:1f:e8:82:a2:2b:a6:8f:23:
                    dc:fa:ca:be:50:ce:30:5d:b1:aa:01:26:31:e8:5f:
                    08:cf:54:9b:cf:17:60:48:a8:c3:e9:ae:9c:7d:b6:
                    a3:7a:c3:e2:f7:c2:15:f2:1a:52:7e:bd:00:43:49:
                    8a:f8:c0:e2:d9:0b:a7:67:75:96:14:00:ea:3a:56:
                    3f:ac:01:40:81:c6:7e:bd:5b:a3:f3:c6:70:ff:b4:
                    9b:b0:c7:56:cf:79:4e:ce:25:35:c4:54:f4:1a:42:
                    f4:6d:07:21:bc:80:30:04:e3:d9:5b:2a:82:58:46:
                    bc:73:6d:e9:3f:ad:b9:7f:c6:45:b9:22:eb:b8:38:
                    75:66:20:cc:75:77:64:4c:41:78:43:65:d7:38:be:
                    fd:fa:40:35:e0:58:03:13:db:04:e7:de:97:41:b1:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F2:B2:FE:A3:69:92:F2:8B:4E:51:F3:4A:AE:CD:88:42:6D:1D:55
            X509v3 Authority Key Identifier:
                keyid:88:61:18:9B:95:5E:B7:DA:45:C4:66:38:3D:8F:BC:93:9B:66:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/1/8861189B955EB7DA45C466383D8FBC939B669297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8861189B955EB7DA45C466383D8FBC939B669297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/1/8861189B955EB7DA45C466383D8FBC939B669297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1a:f0:31:fc:e6:f8:71:7d:b4:9b:57:31:84:76:f3:dd:48:
         51:3f:b3:63:eb:85:73:0e:be:6b:79:a6:06:a3:41:32:25:9e:
         23:25:46:96:96:bf:6f:24:ed:3c:5a:49:57:d0:86:c2:03:08:
         ee:28:6a:35:aa:2d:cc:fc:99:11:fb:3b:20:c4:79:26:ad:41:
         75:df:f6:1b:b6:42:37:2b:6c:5a:d2:84:13:de:0a:35:a2:09:
         88:82:90:fd:5f:3a:bc:36:27:c1:63:07:c9:11:b0:91:ff:ed:
         07:a7:8c:c0:2e:3a:d6:9b:07:c4:99:2b:ed:e3:74:7a:7e:78:
         e4:31:c1:6b:01:bd:9a:c5:95:a4:9f:07:7c:50:ca:8a:ef:3e:
         67:28:8e:13:de:e7:05:81:e7:8b:87:fe:f6:39:83:fc:7c:d0:
         c3:f5:d9:39:57:24:19:bb:fc:24:b6:34:3c:01:99:61:55:1c:
         1a:45:20:a3:78:20:0f:9e:16:5e:72:f2:29:a1:2a:36:c8:76:
         cf:6c:83:02:23:73:80:1e:a7:10:b7:a1:7c:9f:3e:15:d8:7a:
         f6:7f:9f:49:62:28:48:3c:72:01:02:43:00:bb:d1:0d:b3:20:
         5b:e0:92:79:10:75:d6:52:d5:41:b1:18:90:5d:72:e0:8e:28:
         b9:a7:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----