Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.mft
File:                     66C08F358F281A62EAF9697A2C0D5B4C5370EF85.mft (raw, json)
Hash identifier:          WMryLjrm5BBbRRqWKL1TCzRvjdZ9zEff7YGzILfZRUQ=
Subject key identifier:   C9:E0:2F:04:73:FF:4B:B4:F1:5D:25:DB:05:38:60:D0:AE:AE:A6:F3
Authority key identifier: 66:C0:8F:35:8F:28:1A:62:EA:F9:69:7A:2C:0D:5B:4C:53:70:EF:85
Certificate issuer:       /CN=66C08F358F281A62EAF9697A2C0D5B4C5370EF85
Certificate serial:       20D07D4BF0340EFB17D1F98FF1E8CA56930420CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.mft
Manifest number:          99
Signing time:             Sat 10 Feb 2024 13:58:31 +0000
Manifest this update:     Sat 10 Feb 2024 13:53:31 +0000
Manifest next update:     Sun 11 Feb 2024 14:23:31 +0000
Files and hashes:         1: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: C61PC4Lrf0HKo4DWMuuaOGxWnUqFYOCzgPTwoWm15f8=)
                          2: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: 1z1R9zIEEgjrK3yzCAXJN7+sHj+oOoBACtVdye+NkCA=)
                          3: 66C08F358F281A62EAF9697A2C0D5B4C5370EF85.crl (hash: tlc+wS/l34ISUnsZk8hOMT/05/ajT5bOmz6ihcpVAFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d0:7d:4b:f0:34:0e:fb:17:d1:f9:8f:f1:e8:ca:56:93:04:20:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66C08F358F281A62EAF9697A2C0D5B4C5370EF85
        Validity
            Not Before: Feb 10 13:53:31 2024 GMT
            Not After : Feb 11 14:23:31 2024 GMT
        Subject: CN=C9E02F0473FF4BB4F15D25DB053860D0AEAEA6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:f4:ec:56:0d:86:8f:0f:27:29:4b:87:61:
                    02:4a:31:9b:17:76:6d:96:c5:55:46:43:ac:ce:52:
                    d3:fb:c6:47:bc:9f:ba:7b:68:28:58:07:6f:88:27:
                    45:dd:b0:4c:3f:6d:27:7f:fe:c0:89:1e:e8:46:5d:
                    b9:8e:84:94:3d:4c:cd:48:71:f5:4d:12:73:04:a9:
                    6b:13:13:df:0a:23:04:48:55:d6:79:65:5e:01:4c:
                    bd:be:6c:e4:66:ff:71:08:8b:8a:12:10:a7:c1:32:
                    94:91:cb:41:f9:37:c4:ba:30:c2:75:f1:10:bd:5f:
                    27:2f:2b:fd:2d:ee:8d:b3:0a:b8:89:aa:b5:e5:af:
                    b6:b6:2d:69:b5:7b:52:c4:2b:4e:5d:20:d0:61:8a:
                    e1:d4:db:2a:98:e7:6f:75:77:6d:d2:87:bf:79:19:
                    fa:ea:b4:51:db:f7:ff:a8:05:f2:6a:b0:f8:d3:97:
                    66:a7:47:88:44:a9:c8:e8:de:8a:d1:e1:fe:f6:b8:
                    59:97:3b:9c:7f:ef:7c:99:95:82:be:a2:87:ca:37:
                    6c:81:aa:9b:8f:f1:15:b8:2f:c8:aa:3f:d2:7d:40:
                    5c:1d:02:af:70:82:23:ba:5f:eb:fa:e5:c9:df:f0:
                    75:10:97:a4:56:ed:54:38:98:85:77:8c:48:96:6e:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:2F:04:73:FF:4B:B4:F1:5D:25:DB:05:38:60:D0:AE:AE:A6:F3
            X509v3 Authority Key Identifier:
                keyid:66:C0:8F:35:8F:28:1A:62:EA:F9:69:7A:2C:0D:5B:4C:53:70:EF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/66C08F358F281A62EAF9697A2C0D5B4C5370EF85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:04:c7:92:8e:97:00:f3:1d:73:4f:09:41:75:26:d3:2f:74:
         90:78:d6:93:f1:8c:51:c8:b1:39:8b:aa:68:94:76:42:84:20:
         07:42:dc:e6:86:50:fa:82:f9:80:c7:13:6e:00:d3:9a:0f:16:
         e7:64:03:14:ed:cc:a3:f2:3d:3a:c3:03:c6:a5:00:34:3f:8d:
         94:13:00:ba:14:22:54:2d:35:09:f4:79:68:da:1e:ea:43:ff:
         54:da:f7:08:5e:93:cf:32:69:d2:05:84:52:2c:96:b5:fe:12:
         93:90:2b:63:1b:d5:52:64:a7:e5:25:37:a5:a7:a6:db:68:5c:
         26:f0:95:33:2d:6a:01:cb:be:cc:4b:b8:95:f4:f5:62:ba:e9:
         0b:de:f4:af:af:35:33:9d:53:c1:4a:ba:a5:22:6f:c2:27:96:
         15:b5:e9:bb:15:94:f5:eb:dc:7e:99:d6:48:b0:67:22:5e:bf:
         f8:21:e5:88:51:3a:13:e9:33:bb:a8:98:9e:65:e0:76:1d:71:
         b0:31:16:49:cb:1d:c4:fc:05:a5:51:e9:f9:d7:4c:75:22:4e:
         df:24:71:b7:9e:7d:d0:95:3d:b8:4c:bf:f1:5b:9c:a0:53:89:
         f7:d3:6b:d1:3e:4b:0c:f9:c8:30:45:71:eb:ce:84:e7:b5:b4:
         cd:f1:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----