Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.mft
File:                     460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.mft (raw, json)
Hash identifier:          m8iZadYHJwQuwhq24Vxe4LXGO+45jJ4HAvvF1ASWl5k=
Subject key identifier:   86:32:4E:98:35:48:BA:7A:73:D4:E3:BF:DA:D1:7F:71:69:6C:F6:66
Authority key identifier: 46:0A:6F:1B:B2:5E:D0:3C:FA:54:14:E7:BC:C1:8E:A2:7A:67:88:6F
Certificate issuer:       /CN=460A6F1BB25ED03CFA5414E7BCC18EA27A67886F
Certificate serial:       41C6C662F1913E082CBDE261F61441733D0DDBAF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.mft
Manifest number:          5F
Signing time:             Mon 15 Apr 2024 09:47:46 +0000
Manifest this update:     Mon 15 Apr 2024 09:42:46 +0000
Manifest next update:     Tue 16 Apr 2024 12:43:46 +0000
Files and hashes:         1: 460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.crl (hash: I42JQv8492cigNRbJj6chTqxrRYcN8mq4z6n+lDHM7A=)
                          2: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (hash: mIxiw9KKnCL+bW3wLaX/cAYKsEHBu7rxNB9iVWRPWFc=)
                          3: 3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (hash: xDipVgqkphOVJpjAgv35+J1sqpsNZ45DaPpLNWoBAh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c6:c6:62:f1:91:3e:08:2c:bd:e2:61:f6:14:41:73:3d:0d:db:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460A6F1BB25ED03CFA5414E7BCC18EA27A67886F
        Validity
            Not Before: Apr 15 09:42:46 2024 GMT
            Not After : Apr 16 12:43:46 2024 GMT
        Subject: CN=86324E983548BA7A73D4E3BFDAD17F71696CF666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:70:93:0c:32:14:48:52:fb:88:24:dc:38:
                    a1:53:0e:ea:8d:61:0f:89:ba:24:9c:0b:24:ef:bc:
                    9f:c3:a0:53:c8:7a:ed:af:09:82:63:74:64:06:05:
                    70:fe:70:41:ed:aa:16:7d:8d:18:a0:61:ab:4e:ac:
                    61:8b:ea:26:d1:78:87:ae:bc:f2:66:dc:72:e0:31:
                    34:26:d2:51:54:97:0a:c2:70:c0:57:4c:ba:92:38:
                    f8:c3:46:8f:94:73:6d:e2:14:05:08:62:83:4b:c0:
                    f0:60:63:0f:7e:66:eb:db:be:4e:e5:85:e2:81:e3:
                    a2:f3:4a:9e:2f:c3:02:0c:37:71:63:c2:61:fe:92:
                    36:d5:40:80:ef:9c:69:d9:20:1b:9e:e8:14:4a:29:
                    18:50:2f:a6:85:e9:24:dd:c6:08:51:98:82:fa:b8:
                    ee:ae:68:b3:2e:78:d9:b0:5d:5e:73:bc:5e:4e:e5:
                    28:49:40:e9:57:74:4a:24:7c:2a:cf:01:20:ec:18:
                    40:c7:d5:00:6d:42:b1:61:dd:fa:9b:a9:31:32:58:
                    0c:71:a1:cb:13:86:e5:88:fd:e2:eb:24:8d:c8:5f:
                    cf:f5:f9:ea:43:95:7b:2e:f2:44:db:db:95:0e:83:
                    23:5b:56:f0:f7:6f:26:67:2b:dd:f2:c8:13:ad:52:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:32:4E:98:35:48:BA:7A:73:D4:E3:BF:DA:D1:7F:71:69:6C:F6:66
            X509v3 Authority Key Identifier:
                keyid:46:0A:6F:1B:B2:5E:D0:3C:FA:54:14:E7:BC:C1:8E:A2:7A:67:88:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:a7:fc:f5:1e:cf:ad:44:83:64:68:76:0a:1e:87:0e:55:
         3f:26:24:74:f9:a5:df:91:c5:02:74:81:d6:a4:4c:93:3d:6a:
         3a:0a:63:8c:53:13:db:38:99:08:3a:a7:b4:b0:13:31:1a:e0:
         54:ae:fd:18:b7:bf:36:3a:4a:d3:79:89:9b:ce:60:f7:88:4e:
         b5:39:56:b9:ae:8f:3b:da:2c:44:40:3e:8c:72:02:0c:cf:a7:
         af:61:60:78:d9:e0:de:fb:f5:b3:6b:67:8b:b3:27:01:42:c9:
         24:a1:1a:b5:97:5d:49:71:7f:d1:ff:5d:41:90:d6:fe:2b:3f:
         e6:c1:86:41:36:76:fb:85:02:ff:79:aa:dd:12:83:18:d2:6a:
         9d:59:0e:a1:d4:9e:d9:b4:e5:e7:de:1c:84:65:14:df:b8:96:
         3a:fd:22:d5:5b:83:39:3a:1a:e8:f9:65:49:15:b7:e9:ee:ec:
         c2:0f:33:89:2d:95:e5:02:9b:ed:e0:13:5d:86:86:46:89:c0:
         7f:01:17:4d:47:73:5d:14:15:de:21:38:80:50:4d:0f:11:5b:
         37:af:04:e1:04:17:34:54:95:6c:25:bf:d4:45:0d:80:0d:11:
         19:ac:ea:5b:d9:21:71:62:44:87:5e:c1:e6:a6:a9:f1:28:9c:
         cc:17:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----