Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.mft
File:                     B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.mft (raw, json)
Hash identifier:          O/iEB6FedzCOV55toW/+i3/wtLsPedgMKj1+9CUOJ+c=
Subject key identifier:   58:C1:DC:91:4E:D2:23:5C:66:C7:34:D9:1A:C2:D6:19:E3:8C:30:B2
Authority key identifier: B7:B1:CA:D9:85:E4:4B:57:BA:78:E5:A3:F7:0F:A3:A8:C7:B2:8A:D3
Certificate issuer:       /CN=B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3
Certificate serial:       13FED8C0544436AD9A08A1BB3AADD6BC98387DE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.mft
Manifest number:          1A
Signing time:             Sat 21 Sep 2024 07:33:56 +0000
Manifest this update:     Sat 21 Sep 2024 07:28:56 +0000
Manifest next update:     Sun 22 Sep 2024 08:51:56 +0000
Files and hashes:         1: B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.crl (hash: d6BXjb3gHPCc9Hy/HNdZmH/+Yaoaq7P+yIaCCDFHgck=)
                          2: 323830343a393039343a3a2f33322d3438203d3e20323733353631.roa (hash: cS1p+6GUZgooP65Z4Hgfj9Th+Y6Ql4WUJjkvxHXUIMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fe:d8:c0:54:44:36:ad:9a:08:a1:bb:3a:ad:d6:bc:98:38:7d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3
        Validity
            Not Before: Sep 21 07:28:56 2024 GMT
            Not After : Sep 22 08:51:56 2024 GMT
        Subject: CN=58C1DC914ED2235C66C734D91AC2D619E38C30B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:3d:9b:b0:98:c5:ed:3a:22:15:d5:07:64:
                    21:35:0f:8b:ba:fe:93:ce:b4:6a:d8:81:80:9d:f5:
                    e1:6d:97:71:e5:36:80:46:c2:aa:13:45:d3:23:9e:
                    d4:7f:52:46:25:51:2f:fe:6c:2e:be:56:3c:e2:b8:
                    cf:c4:4d:ba:de:57:5d:1e:c9:f4:c3:39:d9:99:7c:
                    f6:42:b2:81:b8:80:9f:37:3b:69:84:9f:65:07:bf:
                    64:57:1b:18:d4:05:9d:f5:13:59:d2:12:6e:56:2b:
                    b2:70:03:19:ae:b9:8b:a6:20:ae:e1:59:e2:18:23:
                    5a:f6:d7:21:7e:3d:5a:18:91:b1:95:1c:cf:62:ac:
                    32:ac:dd:5d:89:46:03:4b:08:08:93:d2:fa:45:67:
                    ea:e5:77:c6:c9:97:35:6c:47:fa:71:28:a2:bf:45:
                    91:82:39:2e:21:c2:f5:f7:7c:4a:54:91:45:62:ee:
                    c4:2f:53:1e:da:8a:28:84:7a:14:83:55:14:49:5f:
                    0c:fc:50:4c:ca:66:eb:25:13:c7:49:b1:4b:e7:d3:
                    2e:7f:17:80:60:28:5f:7e:01:01:9e:1e:00:18:e1:
                    1e:fa:7c:a6:5a:10:ef:04:8a:fc:b5:52:41:91:26:
                    e8:e9:a6:f1:5b:eb:e3:3e:0b:3d:ad:6d:60:e3:57:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:DC:91:4E:D2:23:5C:66:C7:34:D9:1A:C2:D6:19:E3:8C:30:B2
            X509v3 Authority Key Identifier:
                keyid:B7:B1:CA:D9:85:E4:4B:57:BA:78:E5:A3:F7:0F:A3:A8:C7:B2:8A:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/B7B1CAD985E44B57BA78E5A3F70FA3A8C7B28AD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:08:32:7d:46:43:0f:78:37:2c:0f:30:ed:96:1f:be:28:1c:
         d8:da:e5:2a:75:78:70:0b:37:97:81:7f:b1:ce:3f:59:e4:fb:
         16:f2:7d:af:e7:22:fd:d8:7c:5a:ca:aa:54:96:aa:ed:f4:e7:
         e7:9b:05:f0:bf:42:53:8a:05:36:fd:72:c6:86:5e:84:ca:b0:
         3e:cb:9a:a9:da:68:92:69:97:f6:3f:9c:44:c8:d1:48:34:36:
         68:95:e4:05:d0:f4:10:1b:55:69:d0:9f:21:e2:f2:bc:21:bb:
         65:d0:67:13:ee:ae:ca:4b:ca:b4:1a:94:5a:de:99:e0:99:a4:
         dc:e3:48:36:36:28:a4:21:cc:a4:2c:8c:05:90:10:4a:09:d7:
         7a:19:1a:e7:28:ae:da:75:47:75:7c:d4:63:86:c8:1b:ff:f4:
         0c:7f:91:17:c7:7c:3c:c4:9b:d1:5c:51:49:30:2f:f2:9a:74:
         15:93:f5:be:16:47:78:ba:f1:33:db:0b:c2:00:67:e9:1e:fb:
         10:69:be:21:f9:32:af:60:cf:8a:ea:ec:4a:20:0d:2d:03:e6:
         68:9d:9f:c9:e2:d1:8c:cd:05:1e:28:0e:84:c1:ca:55:2c:d8:
         1b:8f:c3:1a:41:3e:c7:33:19:93:41:83:e1:0f:64:9c:34:56:
         19:66:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----