Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft
File:                     ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft (raw, json)
Hash identifier:          nVsdixWu6yyP/4iVgbBERtSJDm9X+XEhf/VE0WXoU8I=
Subject key identifier:   DB:1C:8D:8A:C3:8D:DF:BF:12:54:27:D0:91:BE:50:68:B0:46:53:A2
Authority key identifier: AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2
Certificate issuer:       /CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
Certificate serial:       2E956529A8A83045C5A5B95BD7B9E39F77BBC9C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft
Manifest number:          7C
Signing time:             Thu 04 Jul 2024 20:40:01 +0000
Manifest this update:     Thu 04 Jul 2024 20:35:01 +0000
Manifest next update:     Fri 05 Jul 2024 23:19:01 +0000
Files and hashes:         1: 3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa (hash: qhaZBoseBpr0qNGbNSJ/HFYfsItAOlJR7Us5jOrzfJA=)
                          2: ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.crl (hash: tvejP3lcqZCjKvSZ4yRbagwvJHqTSKqr5X4N9KiU4Pg=)
                          3: 3133382e3230342e35342e302f32342d3234203d3e20323633393032.roa (hash: 7K4qHgGV5Wo0NNoZce4mkyhUwlsBS9GRbEJKFQz/Sx8=)
                          4: 3133382e3230342e35322e302f32342d3234203d3e20323633393032.roa (hash: YVO9Vo5k+jGp3NcIhW7VqryHCgvfNYDteeJub5lspg0=)
                          5: 3133382e3230342e35332e302f32342d3234203d3e20323633393032.roa (hash: kfgFZSDd6FEMktWY/DIUTeoU54RAezJFHnn+xfdlriE=)
                          6: 3133382e3230342e35322e302f32322d3232203d3e20323633393032.roa (hash: Q9C9v7+QDzUwb/9Gl3MOJ6EaENHapDUau+ipF6zOQ3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:95:65:29:a8:a8:30:45:c5:a5:b9:5b:d7:b9:e3:9f:77:bb:c9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
        Validity
            Not Before: Jul  4 20:35:01 2024 GMT
            Not After : Jul  5 23:19:01 2024 GMT
        Subject: CN=DB1C8D8AC38DDFBF125427D091BE5068B04653A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:67:e2:17:dd:83:52:83:ce:ea:9c:88:b3:
                    50:c2:8c:36:fe:dd:e7:51:b4:24:55:90:5d:58:a9:
                    c8:7b:c3:8f:f8:42:73:7b:a9:0f:ad:80:ac:08:c7:
                    d1:02:7b:6c:9c:72:fb:3c:e9:25:20:f8:a6:98:ad:
                    d8:4c:44:6e:c4:3d:d3:aa:2f:87:54:cf:2e:57:61:
                    a6:35:46:c6:c1:fc:bb:1b:12:27:85:e6:d2:fe:b8:
                    30:2b:7e:d1:ad:f3:a4:4b:53:04:2b:de:46:0e:9d:
                    3e:83:7b:ba:1f:6a:9e:2d:2d:34:3e:63:0b:70:6f:
                    1b:af:ac:fc:66:74:30:55:2f:ed:58:8f:48:01:44:
                    39:89:69:53:24:83:96:06:ef:9a:39:01:45:f2:6d:
                    d4:72:79:12:30:1f:4b:8a:ba:cf:12:1d:00:e8:4e:
                    0b:78:fa:69:cf:f2:06:32:68:96:5a:db:1f:19:a3:
                    45:68:0c:de:8b:c1:f1:ee:f9:9f:a8:e0:a9:c2:01:
                    18:f4:4a:06:6a:6d:ad:47:87:f1:a1:e6:ed:59:e1:
                    ea:a3:6d:f7:20:ea:7a:e6:25:5e:e4:02:80:58:c5:
                    ad:9a:ae:93:e8:32:bb:d2:e7:6d:e6:57:96:d6:bb:
                    3c:d6:b8:dc:a6:18:8c:17:2d:b6:7a:b2:93:48:7a:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:8D:8A:C3:8D:DF:BF:12:54:27:D0:91:BE:50:68:B0:46:53:A2
            X509v3 Authority Key Identifier:
                keyid:AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:45:68:77:d9:ca:62:47:e7:78:49:15:4e:45:67:6c:9f:71:
         bc:ef:49:a0:1a:33:36:98:89:e4:5b:e6:8d:f9:4f:48:c1:1d:
         19:6e:36:47:10:11:99:2d:1e:7e:38:66:f5:8c:04:01:d2:35:
         1a:6d:a9:10:7a:fd:37:19:52:74:4f:e6:c8:aa:67:7c:93:51:
         90:63:d7:74:71:57:d8:4a:80:3e:65:b4:5f:e3:fe:57:a3:be:
         e7:93:98:1d:90:54:df:0b:79:35:e6:74:0c:57:a3:3f:80:14:
         88:5b:d8:33:3b:45:c9:73:f7:72:ca:0d:ba:a0:32:9b:42:a0:
         ea:44:bf:11:b8:ce:4d:60:6e:93:f1:d7:54:0c:62:b5:c1:9d:
         78:eb:a7:11:31:08:6c:c8:d9:4f:cb:de:40:29:e6:76:80:e5:
         50:f2:f5:6c:f4:ae:a7:44:34:c5:6d:f5:f2:30:b8:a7:4f:39:
         bf:37:1c:97:1f:e4:d6:4e:e2:b6:c9:ee:e5:bb:77:41:18:1f:
         cb:9f:a6:05:26:79:ff:b0:74:e3:13:1a:9a:f2:71:0d:6f:2f:
         19:7e:40:46:3a:76:8a:06:09:77:ed:77:7f:44:bc:89:24:72:
         57:87:0e:fa:6c:6b:3b:d1:84:73:a2:72:7b:ff:49:aa:fa:a4:
         ba:86:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----