Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.mft
File:                     BBFE20962257408769607F1ABD1CADD22ED820AB.mft (raw, json)
Hash identifier:          /ZhNDsfGQsL1Ke+pukQKCYKYHGN5BSqlveToizeCc8k=
Subject key identifier:   16:16:6D:E5:05:38:1A:FA:F6:54:E8:9F:20:35:EF:0F:1F:44:A1:ED
Authority key identifier: BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB
Certificate issuer:       /CN=BBFE20962257408769607F1ABD1CADD22ED820AB
Certificate serial:       6C456BD110CEE51FEB685942F317E16DBDE06CD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.mft
Manifest number:          B1
Signing time:             Sun 14 Apr 2024 19:17:07 +0000
Manifest this update:     Sun 14 Apr 2024 19:12:07 +0000
Manifest next update:     Mon 15 Apr 2024 20:06:07 +0000
Files and hashes:         1: 34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa (hash: H1+RoDmhmb3L2H5NmcikoYYTo0abXoMc/GnD+93h5vw=)
                          2: 34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa (hash: +0YZleYrijIfbgNEYxDkgTBiMLLaNJi7dc0Vhp0hLhk=)
                          3: BBFE20962257408769607F1ABD1CADD22ED820AB.crl (hash: TF5aD67tHg1lXBgkcbcn4JifzvornFXsat6eP5tVXJE=)
                          4: 34352e3138332e3133342e302f32332d3233203d3e20323639323832.roa (hash: NZqn8HwMcPpG2HklkNce2iX8yx6rtMtKWSSnTKnizwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:45:6b:d1:10:ce:e5:1f:eb:68:59:42:f3:17:e1:6d:bd:e0:6c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFE20962257408769607F1ABD1CADD22ED820AB
        Validity
            Not Before: Apr 14 19:12:07 2024 GMT
            Not After : Apr 15 20:06:07 2024 GMT
        Subject: CN=16166DE505381AFAF654E89F2035EF0F1F44A1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:55:12:b1:54:c5:49:e3:4b:85:af:dc:5c:
                    60:47:ab:25:c0:6e:fe:3b:b5:ac:13:a4:d6:2f:58:
                    f5:2a:0b:6b:46:24:36:ef:2f:93:f7:be:39:d9:86:
                    56:0a:87:ee:32:cb:fb:01:d9:4a:b7:63:56:b8:d0:
                    95:26:fd:33:df:99:27:f0:53:bb:97:bb:d3:48:62:
                    aa:a2:39:88:a0:2e:72:b4:d1:b6:f4:4a:92:7f:a8:
                    05:55:d3:bc:d6:51:b5:e9:e9:93:a8:ae:72:ac:b9:
                    e9:c5:86:e8:f9:ff:db:90:12:6c:59:cf:c3:64:fa:
                    e2:46:11:be:a8:45:87:e1:34:5e:22:87:5b:9a:84:
                    24:7e:73:6f:dc:cf:5e:f1:81:e6:6b:24:4c:f9:4b:
                    9f:66:89:9e:54:3a:ba:57:ef:d9:cf:e8:89:cb:e4:
                    07:1a:9c:22:e5:f0:ef:c6:6e:77:b1:6b:4f:47:b7:
                    75:e3:d7:73:38:93:78:53:36:2b:47:f6:a1:38:05:
                    e5:86:12:94:68:fb:89:0d:df:fa:fa:12:5c:d6:6c:
                    ff:a6:46:42:96:ef:11:3c:11:61:5d:79:51:08:ce:
                    80:f6:a8:dd:86:b7:98:a0:3c:ac:5f:c7:df:56:f1:
                    2c:1b:8a:c6:36:8c:e3:47:2e:77:bc:54:18:a2:b2:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:16:6D:E5:05:38:1A:FA:F6:54:E8:9F:20:35:EF:0F:1F:44:A1:ED
            X509v3 Authority Key Identifier:
                keyid:BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:d7:cc:7a:d2:3a:85:b8:02:82:6f:22:9d:7b:09:66:65:
         a8:1e:2b:65:5d:fc:0b:fa:58:63:c1:1d:0f:e7:87:79:93:a6:
         0f:6d:e4:ad:a4:9c:e5:fe:b5:09:53:cc:09:da:0e:82:ee:b1:
         bb:e6:57:da:16:d2:b9:c4:7e:ee:57:3b:9e:d2:37:37:2d:8d:
         82:ea:10:15:2f:19:87:d0:87:8a:55:4b:0c:a7:a4:ef:3f:3a:
         c6:ce:a3:1e:82:2f:5a:05:b2:ba:81:61:15:b2:a0:76:d3:56:
         1a:63:bb:17:96:a2:9a:41:56:1a:3a:0f:63:15:e1:24:be:de:
         81:d7:64:18:32:51:d8:5c:cf:de:d0:da:05:51:60:82:cb:24:
         8f:9d:19:27:11:18:31:3b:cb:10:d2:09:79:59:38:34:c6:60:
         12:c4:15:a7:ac:12:4c:61:5f:38:e5:9d:17:bf:5c:82:df:bf:
         97:df:78:f2:c0:44:2d:5e:7c:c2:95:e8:eb:d7:a6:cd:20:b4:
         02:96:e5:62:b5:17:d3:6f:0c:86:e1:e7:60:e1:39:a2:22:b6:
         47:b0:98:3d:6b:64:f5:4e:0b:d9:e7:cc:1a:33:56:90:e5:fd:
         1c:b4:64:fa:87:1d:85:23:63:72:95:cd:78:47:1d:10:e2:5f:
         e3:3f:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----