Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.mft
File:                     6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.mft (raw, json)
Hash identifier:          VPWX90FYNxaBE5ffMn0dK6mEM0DHylAjR8qSTqUviNE=
Subject key identifier:   E7:EA:7F:59:75:11:87:3A:1B:0A:7E:D9:63:5F:3C:BF:C4:76:BE:6E
Authority key identifier: 6E:DF:C7:E7:F4:62:21:97:B7:94:DC:18:05:44:F4:9F:D3:A1:B8:CB
Certificate issuer:       /CN=6EDFC7E7F4622197B794DC180544F49FD3A1B8CB
Certificate serial:       39D94223AA7610E64E78C1971BF14B56E82EC0D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.mft
Manifest number:          88
Signing time:             Tue 09 Jul 2024 09:01:25 +0000
Manifest this update:     Tue 09 Jul 2024 08:56:25 +0000
Manifest next update:     Wed 10 Jul 2024 09:36:25 +0000
Files and hashes:         1: 323830343a353964343a3a2f33322d3438203d3e20323638373238.roa (hash: F1+NbsuavwBaWqCGEPQJyBeP1oS7zn8hwamMHzuBH/c=)
                          2: 34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa (hash: OaFqC5wdSlmgHlUIjVRFMICR+LoKtydVbA0ZU2MWskg=)
                          3: 6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.crl (hash: Ilr6sCGtP5hdSH21AYu03uBvp+Sb2RN6IxZ1+xKEgBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d9:42:23:aa:76:10:e6:4e:78:c1:97:1b:f1:4b:56:e8:2e:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EDFC7E7F4622197B794DC180544F49FD3A1B8CB
        Validity
            Not Before: Jul  9 08:56:25 2024 GMT
            Not After : Jul 10 09:36:25 2024 GMT
        Subject: CN=E7EA7F597511873A1B0A7ED9635F3CBFC476BE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:cc:ac:98:04:8b:98:bb:c7:8e:82:73:a9:
                    ff:80:91:23:1e:28:68:7f:c3:a6:21:de:04:00:b1:
                    bd:64:db:43:99:05:91:a9:c4:32:52:c8:f0:73:9f:
                    7b:6a:d4:26:ef:43:e1:bc:e6:60:41:46:8a:4a:b3:
                    a7:a7:7a:37:0b:5f:ad:2a:4f:a3:11:6e:90:ce:ae:
                    6b:e4:a6:ed:07:56:ea:92:d6:ca:83:67:55:b2:12:
                    28:22:9f:1f:92:f9:44:21:d3:29:21:75:42:ed:05:
                    44:72:64:4d:e0:ab:1a:99:cc:4a:fe:41:54:5b:3b:
                    83:9c:7c:28:f4:29:d2:59:56:a8:e3:42:9c:6f:f9:
                    ee:95:24:c3:08:a4:67:b2:53:0e:4d:9f:50:6b:dc:
                    13:5a:e3:30:85:18:c4:f3:fe:fc:93:b8:03:f3:ac:
                    4f:0f:7f:29:34:89:4c:49:83:37:32:55:b0:69:68:
                    2e:75:c3:be:05:40:84:b0:79:94:ef:ac:6d:42:d9:
                    1c:91:c8:84:40:33:d8:20:18:0a:58:38:69:b4:6c:
                    d2:82:0e:1d:68:c3:1b:61:ed:45:ed:e9:1f:f3:58:
                    ba:49:c1:0b:73:0d:06:34:e3:e6:8d:e7:5d:b1:29:
                    63:11:5f:48:96:70:40:5a:37:35:ad:38:e5:db:85:
                    31:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EA:7F:59:75:11:87:3A:1B:0A:7E:D9:63:5F:3C:BF:C4:76:BE:6E
            X509v3 Authority Key Identifier:
                keyid:6E:DF:C7:E7:F4:62:21:97:B7:94:DC:18:05:44:F4:9F:D3:A1:B8:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:81:d2:fe:ad:f3:22:f4:37:ae:b8:ae:ae:b7:82:cc:9b:
         fe:bc:a2:53:28:c3:62:38:0c:c4:34:aa:49:45:6f:b1:1c:68:
         3f:43:ae:34:b0:4f:d9:25:27:01:26:88:e7:a7:a6:a8:75:00:
         8e:56:26:0f:41:c8:ac:5a:a0:5c:bc:9c:69:e4:18:4f:46:ad:
         c9:30:7e:4e:0e:e6:ba:ed:f7:02:c5:e9:45:29:85:ab:7f:0e:
         29:9d:e9:04:b1:d1:3d:d6:96:16:75:09:a4:12:b3:b8:5c:9f:
         5d:61:4e:79:36:9d:35:0b:7f:cd:83:91:b0:d9:41:cd:83:8a:
         c1:74:2f:81:05:3e:d1:dd:89:2f:73:f3:5e:48:b6:ec:26:0e:
         9c:cf:0b:b2:aa:12:46:0c:2f:20:9a:94:45:84:1b:c9:33:e8:
         90:ee:62:fe:eb:ee:7e:76:72:3a:a8:cd:09:df:86:7b:74:7b:
         0b:0c:f4:4a:c5:a3:19:80:f8:3d:07:20:0e:e9:ba:ec:55:1b:
         4b:c4:92:bd:9b:bd:45:0f:74:86:47:de:88:cb:64:f6:d4:cf:
         8d:d7:6f:a5:ed:a9:df:b4:36:60:b8:74:a8:a6:e4:cd:9c:e9:
         2b:f3:62:60:29:6b:63:98:31:6d:b7:ef:3b:c0:7a:11:ce:ae:
         4a:46:e8:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOdlCI6p2EOZOeMGXG/FLVuguwNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVERkM3RTdGNDYyMjE5N0I3OTREQzE4MDU0NEY0OUZE
M0ExQjhDQjAeFw0yNDA3MDkwODU2MjVaFw0yNDA3MTAwOTM2MjVaMDMxMTAvBgNV
BAMTKEU3RUE3RjU5NzUxMTg3M0ExQjBBN0VEOTYzNUYzQ0JGQzQ3NkJFNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9cysmASLmLvHjoJzqf+AkSMe
KGh/w6Yh3gQAsb1k20OZBZGpxDJSyPBzn3tq1CbvQ+G85mBBRopKs6enejcLX60q
T6MRbpDOrmvkpu0HVuqS1sqDZ1WyEiginx+S+UQh0ykhdULtBURyZE3gqxqZzEr+
QVRbO4OcfCj0KdJZVqjjQpxv+e6VJMMIpGeyUw5Nn1Br3BNa4zCFGMTz/vyTuAPz
rE8Pfyk0iUxJgzcyVbBpaC51w74FQISweZTvrG1C2RyRyIRAM9ggGApYOGm0bNKC
Dh1owxth7UXt6R/zWLpJwQtzDQY04+aN512xKWMRX0iWcEBaNzWtOOXbhTFjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5+p/WXURhzobCn7ZY188v8R2vm4wHwYDVR0j
BBgwFoAUbt/H5/RiIZe3lNwYBUT0n9OhuMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3lYckczS2lWc3VMQnd2SmoyRkhvWnlYNVdURlZoclNHU2hBa25IdGZD
MkIvMS82RURGQzdFN0Y0NjIyMTk3Qjc5NERDMTgwNTQ0RjQ5RkQzQTFCOENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFREZDN0U3RjQ2MjIxOTdC
Nzk0REMxODA1NDRGNDlGRDNBMUI4Q0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3lYckczS2lWc3VMQnd2SmoyRkhvWnlYNVdURlZoclNHU2hBa25IdGZDMkIvMS82
RURGQzdFN0Y0NjIyMTk3Qjc5NERDMTgwNTQ0RjQ5RkQzQTFCOENCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUliB0v6t8yL0N664rq63gsyb/ryiUyjDYjgMxDSqSUVvsRxoP0OuNLBP2SUn
ASaI56emqHUAjlYmD0HIrFqgXLycaeQYT0atyTB+Tg7muu33AsXpRSmFq38OKZ3p
BLHRPdaWFnUJpBKzuFyfXWFOeTadNQt/zYORsNlBzYOKwXQvgQU+0d2JL3PzXki2
7CYOnM8LsqoSRgwvIJqURYQbyTPokO5i/uvufnZyOqjNCd+Ge3R7Cwz0SsWjGYD4
PQcgDum67FUbS8SSvZu9RQ90hkfeiMtk9tTPjddvpe2p37Q2YLh0qKbkzZzpK/Ni
YClrY5gxbbfvO8B6Ec6uSkboWg==
-----END CERTIFICATE-----