Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/BB31F175410F355458BCA52FD0C920629720C520.mft
File:                     BB31F175410F355458BCA52FD0C920629720C520.mft (raw, json)
Hash identifier:          HJ9zcI+kAWbuyFARaFxVJwb4bof73kPRgxHty3vUM7Y=
Subject key identifier:   4E:6A:A9:2A:31:97:9E:4E:8A:3E:95:E6:92:A4:75:3D:85:52:B7:0C
Authority key identifier: BB:31:F1:75:41:0F:35:54:58:BC:A5:2F:D0:C9:20:62:97:20:C5:20
Certificate issuer:       /CN=BB31F175410F355458BCA52FD0C920629720C520
Certificate serial:       259C03BD432147A4A1BFF00A26F91B303AED8FD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB31F175410F355458BCA52FD0C920629720C520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/BB31F175410F355458BCA52FD0C920629720C520.mft
Manifest number:          6D
Signing time:             Tue 17 Sep 2024 15:28:08 +0000
Manifest this update:     Tue 17 Sep 2024 15:23:08 +0000
Manifest next update:     Wed 18 Sep 2024 18:08:08 +0000
Files and hashes:         1: BB31F175410F355458BCA52FD0C920629720C520.crl (hash: uIiK8GBLOCTYs8B3C2lgWshM7kkYNN73tOZAwqd8WB8=)
                          2: 3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa (hash: mmIj65E0kyjnP7bUFrpAZE7zIdmCNx4JSShjnc+c9yI=)
                          3: 3137302e3235342e37322e302f32322d3234203d3e20323633383838.roa (hash: PIYsMM+GTtuZmgTgoek2BcM8UMRdyKDyZpblKYwHW9Q=)
                          4: 323830343a323734343a3a2f33322d3338203d3e20323633383838.roa (hash: 5sPESZjWr7XnZ52Ozql+Y6Ep5s60P+CQEVS7xd7T7wM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9c:03:bd:43:21:47:a4:a1:bf:f0:0a:26:f9:1b:30:3a:ed:8f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB31F175410F355458BCA52FD0C920629720C520
        Validity
            Not Before: Sep 17 15:23:08 2024 GMT
            Not After : Sep 18 18:08:08 2024 GMT
        Subject: CN=4E6AA92A31979E4E8A3E95E692A4753D8552B70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:34:05:35:6b:d3:11:44:52:71:93:d2:c2:
                    f2:8d:6e:de:6f:7f:59:f1:db:66:42:c0:b6:0a:39:
                    3d:59:e5:d7:12:eb:3e:98:16:76:f8:28:b1:7f:0c:
                    02:50:f8:91:b6:29:27:5c:0d:80:88:47:8f:40:a8:
                    20:53:e9:a9:b3:1e:26:e6:49:99:09:12:92:1e:9f:
                    d7:a4:38:54:28:a8:bd:0f:d9:cd:83:4d:7c:68:4f:
                    a3:06:d7:ef:95:c2:17:e4:de:cf:ca:5f:3c:6c:5f:
                    00:03:22:25:71:d4:74:54:e1:20:49:e5:e0:76:f7:
                    b8:5d:6c:1d:05:1e:bc:e6:fe:ce:e2:43:f0:f1:9a:
                    ea:e4:de:89:88:a0:80:6d:33:88:05:92:56:ed:61:
                    2f:e3:46:2a:f8:26:fc:d1:84:8f:71:08:91:4a:e7:
                    6b:80:51:58:dc:1e:b6:c0:ba:e7:9a:dd:53:cc:ea:
                    b3:83:db:a9:53:31:5a:4d:39:2a:d4:6e:ab:e2:6c:
                    53:8b:e0:53:9a:02:ed:91:09:cf:bd:ef:f5:14:89:
                    9d:83:96:1b:32:1c:1d:34:e8:38:9d:bc:d6:db:60:
                    ac:ca:e9:58:e5:ef:44:af:8c:b9:64:80:03:88:88:
                    b4:d1:e8:de:57:af:94:e0:0b:c7:71:cf:8f:cd:d2:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6A:A9:2A:31:97:9E:4E:8A:3E:95:E6:92:A4:75:3D:85:52:B7:0C
            X509v3 Authority Key Identifier:
                keyid:BB:31:F1:75:41:0F:35:54:58:BC:A5:2F:D0:C9:20:62:97:20:C5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/BB31F175410F355458BCA52FD0C920629720C520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB31F175410F355458BCA52FD0C920629720C520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/BB31F175410F355458BCA52FD0C920629720C520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:82:d9:65:b5:0e:12:74:35:de:f4:c7:a4:65:31:0b:cc:
         92:e3:19:28:c7:e4:9e:91:b0:95:bf:1c:cf:89:d5:fd:07:0b:
         8a:08:d7:c3:83:d0:08:96:fe:71:53:67:e1:f0:1e:8e:ac:3b:
         12:03:75:eb:e3:48:cb:53:9a:7e:da:81:51:42:22:de:4d:64:
         34:11:9b:60:1d:21:27:ed:84:fc:aa:d7:d7:95:43:4a:93:3c:
         e2:e8:cc:cf:6a:37:f5:35:af:63:a2:a2:a4:cb:2d:7d:42:9a:
         64:a3:79:ec:5f:25:a4:9c:10:2c:c3:bb:73:7a:e1:8c:0a:12:
         dc:92:59:ef:37:ef:ee:10:25:23:21:9e:95:c5:6b:ac:b1:fa:
         87:69:6e:ec:0c:a3:52:fd:ca:e3:04:d5:9f:14:b9:dd:96:f1:
         6f:07:ae:7d:cd:f6:73:6e:b4:46:cb:40:f9:aa:9e:8b:59:18:
         43:99:8f:1e:23:d3:85:90:54:74:20:05:32:5d:43:41:7c:3f:
         e6:b3:ed:d7:46:64:06:83:d6:ae:1d:ab:95:f1:f0:52:d7:6c:
         e8:a6:3e:b4:95:20:6d:3f:a9:51:ae:24:4e:83:54:a5:6b:ee:
         1a:26:7e:f0:08:72:36:f4:4b:26:b4:ff:f4:39:74:81:83:db:
         94:25:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----