Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.mft
File:                     6AA653327DB763726AB6E1EA9F8796C258231F94.mft (raw, json)
Hash identifier:          4KauvslQSfBQlFJn3g884RdZ5FY/fLEWqZ3QPMZhC18=
Subject key identifier:   DD:FB:D0:2F:BF:F4:8A:3B:20:0E:CF:F2:87:5C:1D:85:2D:50:8A:12
Authority key identifier: 6A:A6:53:32:7D:B7:63:72:6A:B6:E1:EA:9F:87:96:C2:58:23:1F:94
Certificate issuer:       /CN=6AA653327DB763726AB6E1EA9F8796C258231F94
Certificate serial:       219718DF5EB52EE6B049E8BDF42E8A64C45A89C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AA653327DB763726AB6E1EA9F8796C258231F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.mft
Manifest number:          0311
Signing time:             Mon 15 Apr 2024 05:54:36 +0000
Manifest this update:     Mon 15 Apr 2024 05:49:36 +0000
Manifest next update:     Tue 16 Apr 2024 07:47:36 +0000
Files and hashes:         1: 6AA653327DB763726AB6E1EA9F8796C258231F94.crl (hash: YBo8WNfeHvY8tRjuvM/glreRyNR3KFiU2Xtl+znIxKY=)
                          2: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: W57An6zRRvy5aV4NnrOQwQSBnXSLKgwVW+SEk+3uNdU=)
                          3: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: puXBj5NSkUGH1tjRLs+l7eGmybxXQiC1plqeAE7KTiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:97:18:df:5e:b5:2e:e6:b0:49:e8:bd:f4:2e:8a:64:c4:5a:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AA653327DB763726AB6E1EA9F8796C258231F94
        Validity
            Not Before: Apr 15 05:49:36 2024 GMT
            Not After : Apr 16 07:47:36 2024 GMT
        Subject: CN=DDFBD02FBFF48A3B200ECFF2875C1D852D508A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:5d:93:f9:94:13:a9:34:18:a8:b5:18:25:
                    37:0d:c4:a5:c3:e0:28:af:f6:5d:ab:03:85:ab:2c:
                    30:1c:65:92:38:09:1f:b1:ba:89:79:34:32:8d:74:
                    f1:f4:07:a3:18:24:2b:99:3d:89:22:5b:f6:f5:23:
                    ac:f5:b4:60:cf:3d:52:8b:e2:c9:9b:fb:a1:cf:b6:
                    3d:f5:7c:90:cc:b2:a8:0d:15:04:ec:cd:bf:2f:f0:
                    04:9a:ba:3a:7c:bc:cd:ec:4d:59:07:7a:06:c8:a1:
                    3a:e0:e1:d2:0e:29:e5:61:c4:b7:16:6a:a7:12:c6:
                    8b:27:02:f4:e4:ad:20:d3:17:aa:7c:ec:46:ce:01:
                    a8:fb:b5:59:bc:83:db:d3:6d:5b:35:f8:69:69:47:
                    71:2d:c2:44:ff:1b:88:c2:ff:e3:71:03:17:b0:cd:
                    29:d7:79:d9:c3:13:91:78:1b:bd:d3:d8:ad:47:75:
                    30:1f:69:ed:0f:6d:37:a1:62:6a:ce:6e:1c:68:94:
                    af:2f:22:59:a5:8a:10:45:2e:f6:c1:c4:f8:13:77:
                    54:dd:d2:14:1c:cf:44:95:c9:0b:ce:37:57:05:cf:
                    a5:f6:e8:73:2b:61:09:3e:24:c3:e0:dd:04:5d:d6:
                    01:94:c2:90:21:dd:6c:9b:b3:2b:91:ff:0c:63:04:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FB:D0:2F:BF:F4:8A:3B:20:0E:CF:F2:87:5C:1D:85:2D:50:8A:12
            X509v3 Authority Key Identifier:
                keyid:6A:A6:53:32:7D:B7:63:72:6A:B6:E1:EA:9F:87:96:C2:58:23:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AA653327DB763726AB6E1EA9F8796C258231F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:8f:29:2d:b7:bf:b1:17:49:4f:8d:36:e6:c8:37:0d:ae:
         23:5c:32:ce:4f:40:d2:eb:4a:53:80:45:80:6a:b0:dd:f2:e3:
         44:dd:8a:93:ea:b3:bd:a8:34:04:4b:c8:a3:cc:5b:cd:1f:b1:
         ad:70:92:88:de:38:0e:6d:82:e0:b4:13:a4:d9:20:56:a4:dd:
         20:8d:f6:a2:b8:f4:4e:1b:28:00:6d:85:4f:5b:bf:6b:d4:0a:
         e6:81:4b:53:2f:50:92:bf:f7:4d:2b:8d:84:4d:15:c3:ff:ec:
         6e:8c:20:c7:06:e2:2e:bd:19:52:65:da:29:32:dd:de:23:d5:
         c2:ff:bc:02:cf:8c:f7:06:04:4a:b7:26:50:48:52:8f:23:45:
         82:7f:39:36:4f:76:66:2e:94:b2:88:78:e7:4d:c9:9e:2e:71:
         fe:28:40:be:ec:b1:f7:a3:d2:bc:70:35:ea:5f:12:62:98:5f:
         f1:77:7a:83:a9:25:27:c2:db:b0:23:6e:e1:c4:16:dc:56:c1:
         f8:aa:86:26:88:4a:50:50:87:a5:c6:c8:f2:54:15:10:fb:10:
         a3:1b:72:1a:b8:22:10:e0:62:56:36:6e:2b:5b:68:ac:3d:a0:
         b1:7c:45:91:10:f5:43:82:ce:ea:9d:d4:1d:d0:82:8f:2d:d1:
         cb:b3:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----