Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/1/8D2C2364E90621721943FD8BA040EAF78196C6DE.mft
File:                     8D2C2364E90621721943FD8BA040EAF78196C6DE.mft (raw, json)
Hash identifier:          wVHoxzCD8YjFRP3/X1sCtBosylD4Uj7tNixhNFHNlg8=
Subject key identifier:   EC:49:11:98:E4:14:5F:44:80:C5:24:77:25:46:0A:F9:9E:63:1D:C7
Authority key identifier: 8D:2C:23:64:E9:06:21:72:19:43:FD:8B:A0:40:EA:F7:81:96:C6:DE
Certificate issuer:       /CN=8D2C2364E90621721943FD8BA040EAF78196C6DE
Certificate serial:       7A27B8C00BEA560C8731C1F116E54838D909A324
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2C2364E90621721943FD8BA040EAF78196C6DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/1/8D2C2364E90621721943FD8BA040EAF78196C6DE.mft
Manifest number:          016E
Signing time:             Tue 03 Dec 2024 03:10:00 +0000
Manifest this update:     Tue 03 Dec 2024 03:05:00 +0000
Manifest next update:     Wed 04 Dec 2024 03:10:00 +0000
Files and hashes:         1: 8D2C2364E90621721943FD8BA040EAF78196C6DE.crl (hash: RZmlvVWE1WM/E3PeTBB09Vh7xTm2zMGVFz3cUvyQfoA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:27:b8:c0:0b:ea:56:0c:87:31:c1:f1:16:e5:48:38:d9:09:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2C2364E90621721943FD8BA040EAF78196C6DE
        Validity
            Not Before: Dec  3 03:05:00 2024 GMT
            Not After : Dec 10 03:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:34:31:ff:35:71:82:85:73:73:25:07:0c:
                    6e:2b:92:55:b6:bb:9a:49:ad:d9:1f:ac:89:23:fe:
                    dd:d1:e5:00:87:94:16:34:d5:a9:30:ed:96:08:c8:
                    d7:f1:8f:b8:f1:d3:be:72:2e:86:dc:de:f6:63:f9:
                    78:9c:59:5a:54:90:43:14:d7:9b:84:05:c4:ba:73:
                    c4:1b:f4:f2:d4:df:8e:75:71:8b:ca:db:c8:3b:7f:
                    b2:2b:36:7d:9c:fc:d1:8f:2f:97:20:1d:c5:ad:3f:
                    2a:0d:8b:6f:7d:a5:11:6c:09:21:ca:2d:46:1e:75:
                    1c:12:e2:33:b6:63:af:bd:e6:58:57:0d:76:63:ea:
                    ca:75:92:01:ef:d1:7f:51:48:d8:19:9a:e6:dd:99:
                    85:0f:25:f5:d4:8a:29:ed:15:06:5c:b5:76:f7:c6:
                    46:82:91:c7:b1:e8:7d:64:1b:26:d3:91:c3:47:85:
                    f6:8e:e6:ca:e5:56:c5:26:c2:80:9a:83:c1:1c:15:
                    c2:6a:e6:63:f2:ce:91:2c:06:76:b2:91:6e:53:7f:
                    cb:0a:aa:17:c5:44:d6:eb:69:90:90:7e:90:d3:af:
                    29:31:6e:db:13:b4:e2:09:52:b3:6d:a3:50:82:e9:
                    8f:12:22:92:1f:29:7b:64:a0:3e:a9:1b:45:f3:38:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:11:98:E4:14:5F:44:80:C5:24:77:25:46:0A:F9:9E:63:1D:C7
            X509v3 Authority Key Identifier:
                keyid:8D:2C:23:64:E9:06:21:72:19:43:FD:8B:A0:40:EA:F7:81:96:C6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/1/8D2C2364E90621721943FD8BA040EAF78196C6DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D2C2364E90621721943FD8BA040EAF78196C6DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/1/8D2C2364E90621721943FD8BA040EAF78196C6DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:67:d0:9b:58:28:21:00:f5:c0:3f:05:a8:c1:0e:ed:d6:9f:
         64:b2:87:aa:27:2b:1b:b7:85:58:f5:69:be:12:07:5c:ed:df:
         b5:fe:a3:ca:1d:9a:7b:43:34:81:01:94:4e:2f:6a:fa:28:24:
         c0:2b:d0:7e:53:99:47:b5:16:1c:b5:4a:ae:2c:26:0d:8e:11:
         78:77:ec:24:28:b2:47:cd:7e:33:ab:fc:e5:c1:c2:3b:dc:37:
         0f:1e:60:9c:7e:a4:8b:11:27:7f:ee:8d:cb:67:5a:47:71:9c:
         0a:17:08:f2:a8:dd:d2:98:01:87:e7:13:d9:25:f3:51:4b:bb:
         f4:f2:c7:3a:ed:7f:df:dd:69:b7:0f:5b:29:41:c2:94:af:f5:
         b2:3e:66:6e:b0:0c:79:06:1d:70:b6:bd:0c:77:34:08:66:11:
         4d:f3:57:c4:db:a9:ea:d8:8c:69:97:13:35:56:96:f1:84:06:
         d0:27:48:19:dc:85:5f:a0:5f:09:2b:5f:95:b6:c8:6f:37:4f:
         2b:f6:b2:6a:ab:04:09:3f:b9:a0:56:b1:82:88:e2:d3:27:ba:
         3f:13:d8:40:04:44:fe:ce:48:01:eb:9c:df:6a:3f:42:06:67:
         5f:d4:71:32:de:ca:0d:24:07:ae:ca:5f:74:c9:40:d7:47:f6:
         4b:20:ce:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----