Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/575A77DA8C262ED1119E0D2574182D7CF30CC4F4.mft
File:                     575A77DA8C262ED1119E0D2574182D7CF30CC4F4.mft (raw, json)
Hash identifier:          KTrSE4nTfDNlkrA4Hu+uohYkMHB9RarH7s+OgW73Tp0=
Subject key identifier:   57:71:80:C9:E9:84:40:65:72:1A:C5:48:7D:48:CA:17:67:B0:C7:CE
Authority key identifier: 57:5A:77:DA:8C:26:2E:D1:11:9E:0D:25:74:18:2D:7C:F3:0C:C4:F4
Certificate issuer:       /CN=575A77DA8C262ED1119E0D2574182D7CF30CC4F4
Certificate serial:       178E821C975F00B56C6E09C6008CCCE54C0004FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/575A77DA8C262ED1119E0D2574182D7CF30CC4F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/575A77DA8C262ED1119E0D2574182D7CF30CC4F4.mft
Manifest number:          A9
Signing time:             Fri 19 Jan 2024 14:01:21 +0000
Manifest this update:     Fri 19 Jan 2024 13:56:21 +0000
Manifest next update:     Sat 20 Jan 2024 15:58:21 +0000
Files and hashes:         1: 323830343a373761633a3a2f33322d3438203d3e20323731313932.roa (hash: 7O1YPNUkhAE1ywG3JKyn+DepmpVgUiMN9hGu0wqLjas=)
                          2: 575A77DA8C262ED1119E0D2574182D7CF30CC4F4.crl (hash: DDuSZaK/n3zdjGbrWM6F2KM8uC3JjzkDCXVJ1Uj7c/M=)
                          3: 3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (hash: X4+mF2yGnH5wvruMDYA+4M+EwMdRl+FUz8XGs0FplLw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8e:82:1c:97:5f:00:b5:6c:6e:09:c6:00:8c:cc:e5:4c:00:04:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575A77DA8C262ED1119E0D2574182D7CF30CC4F4
        Validity
            Not Before: Jan 19 13:56:21 2024 GMT
            Not After : Jan 20 15:58:21 2024 GMT
        Subject: CN=577180C9E9844065721AC5487D48CA1767B0C7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:53:07:64:89:39:1f:52:4d:97:6f:1e:75:
                    37:70:6e:98:01:a3:3e:ff:59:12:26:9c:bb:dc:ee:
                    1f:ec:8d:12:e2:9e:b0:d0:a8:40:58:eb:9d:d0:c6:
                    63:71:3b:dc:e8:7c:ae:64:38:d4:fd:76:bc:ac:58:
                    92:99:af:cb:5f:b8:23:8c:4e:42:0f:bb:e6:04:da:
                    e9:45:31:ba:d4:14:98:fc:49:9c:42:e1:4a:99:bb:
                    59:cb:31:f5:29:ad:51:7d:9b:70:27:90:86:e6:c4:
                    bb:0b:f6:7f:c6:71:6f:bb:bd:34:86:67:c3:92:66:
                    62:11:e4:63:93:f0:80:39:4f:8d:43:53:a2:cd:9c:
                    1f:c5:3e:b0:70:bf:d9:a3:3f:1a:8e:64:58:2c:0c:
                    a2:17:bc:6e:40:24:08:7b:7f:52:3f:c3:d4:26:56:
                    9f:dc:f8:59:b2:85:64:be:2b:1e:60:7f:cb:93:8e:
                    40:0a:e4:ff:c8:9b:2a:de:63:c8:b8:71:31:80:e2:
                    ad:a1:2b:88:a0:fa:f0:e7:ca:64:e3:2b:ac:fc:2f:
                    a2:4f:5b:98:06:88:44:f4:35:cf:29:07:c1:8f:22:
                    cf:5a:0c:9d:d4:4f:af:6e:98:7c:70:50:07:80:22:
                    ba:df:f4:18:23:26:36:d8:15:1d:02:77:df:01:d8:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:80:C9:E9:84:40:65:72:1A:C5:48:7D:48:CA:17:67:B0:C7:CE
            X509v3 Authority Key Identifier:
                keyid:57:5A:77:DA:8C:26:2E:D1:11:9E:0D:25:74:18:2D:7C:F3:0C:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/575A77DA8C262ED1119E0D2574182D7CF30CC4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/575A77DA8C262ED1119E0D2574182D7CF30CC4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/575A77DA8C262ED1119E0D2574182D7CF30CC4F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:40:cd:8c:18:fb:13:44:e6:f3:4e:ad:ed:fe:da:c3:20:e3:
         43:fe:58:de:c3:98:6d:e2:1d:e3:39:2d:81:ae:53:8c:9c:28:
         4e:df:8f:60:6f:91:7a:5d:21:30:8a:cc:75:6f:c6:12:31:a3:
         c9:0f:2e:fa:4b:e1:16:d3:6f:44:4c:c6:5e:36:b8:02:0b:e5:
         2b:ad:e7:c9:3f:4f:cb:c6:78:f3:66:99:7a:5f:42:56:8a:ce:
         e2:88:6c:1e:69:05:bd:27:a8:f0:38:e0:68:a3:96:0a:29:da:
         e6:8a:83:20:4a:69:ad:53:0d:ae:8f:3d:37:c5:39:b5:67:c9:
         ba:82:97:01:38:95:8b:21:16:6a:d2:6a:9e:7a:b5:7a:c3:0b:
         bd:05:1e:eb:ca:b3:7f:56:d3:65:f6:3c:39:ad:2c:f9:b7:21:
         c1:fa:88:15:6e:3e:68:c7:52:ff:1f:3c:c0:3b:d9:09:84:64:
         7a:ba:6d:93:38:3e:bd:38:63:47:f7:23:78:3a:bf:90:36:56:
         16:a2:e6:a6:be:8d:3f:c1:11:5a:10:a2:d9:33:0d:88:b1:e9:
         ea:af:b6:46:75:3e:49:2d:7a:ac:fb:4f:62:e3:78:da:f9:4e:
         0c:8a:a7:f9:c7:2d:50:2c:bc:b3:f5:28:83:88:5a:7a:69:66:
         50:0b:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----