Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.mft
File:                     706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.mft (raw, json)
Hash identifier:          VET4XIFYapWriCyHSnUL974lrJ5Ede2X8S2j23GKMZ8=
Subject key identifier:   8C:53:1A:AC:5F:14:76:E1:B7:11:F9:AF:7D:3F:A7:78:B9:CB:9B:E2
Authority key identifier: 70:6C:45:0D:6F:4C:4D:BA:79:56:71:A5:8D:0A:F4:A0:6F:FB:A5:B1
Certificate issuer:       /CN=706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1
Certificate serial:       73A097630160096B826E7DFE585071C7AB1F35FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.mft
Manifest number:          0113
Signing time:             Sun 14 Apr 2024 20:38:08 +0000
Manifest this update:     Sun 14 Apr 2024 20:33:07 +0000
Manifest next update:     Mon 15 Apr 2024 21:52:07 +0000
Files and hashes:         1: 323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa (hash: IM0opkTCHCTkBZ06S19P8X+PlmhXj042CSoNNyGx/tA=)
                          2: 706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.crl (hash: 5MC0/xRS3MDTTLc/o9GLikqCeMbjsCFWSseE9/aSK2k=)
                          3: 323830343a383366383a3a2f33362d3438203d3e20323732323331.roa (hash: y2xkmitekpLxdJMevWpuJfw4bxHKiI9ab+WJ+r24XLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:97:63:01:60:09:6b:82:6e:7d:fe:58:50:71:c7:ab:1f:35:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1
        Validity
            Not Before: Apr 14 20:33:07 2024 GMT
            Not After : Apr 15 21:52:07 2024 GMT
        Subject: CN=8C531AAC5F1476E1B711F9AF7D3FA778B9CB9BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:d4:59:8b:64:6f:5d:43:1b:8a:2a:af:bc:
                    3b:c0:a6:9e:fb:d7:da:5d:64:74:74:34:86:a5:00:
                    89:d7:a8:be:d2:32:70:07:ba:e2:e7:f3:8f:f5:d4:
                    41:af:d8:99:80:63:be:29:a0:ea:7e:92:35:1c:39:
                    8f:ad:a6:80:40:2f:0f:9d:59:c1:e7:1a:a7:86:a9:
                    e6:e0:d2:a3:b4:03:3a:02:fb:b1:d4:b4:cc:db:08:
                    42:be:ce:3a:54:da:20:ba:9e:c9:b8:a5:7a:82:34:
                    2e:0b:5e:57:84:1b:42:0d:92:80:e8:48:54:fe:7f:
                    b5:98:0d:b9:0d:b7:0e:1c:93:81:c2:90:58:dc:69:
                    95:bf:bf:fb:41:c4:96:66:9f:be:a1:cd:63:54:76:
                    9c:2b:90:d3:60:f3:5e:ba:93:68:df:53:04:dd:0c:
                    0e:60:85:a1:76:28:56:54:cf:70:bb:a1:22:d7:be:
                    9e:13:9f:92:b3:28:a9:d5:46:7e:92:d1:62:c9:97:
                    9a:8f:fa:27:e0:81:f5:ea:66:6c:b9:2b:81:ed:52:
                    fa:71:7c:d7:20:32:2f:f8:b3:8b:70:1a:40:97:6e:
                    81:3c:97:9e:78:88:5b:a6:7d:97:95:eb:bc:88:10:
                    72:c4:d9:0a:5f:60:ca:25:c9:19:1f:c0:36:83:7f:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:1A:AC:5F:14:76:E1:B7:11:F9:AF:7D:3F:A7:78:B9:CB:9B:E2
            X509v3 Authority Key Identifier:
                keyid:70:6C:45:0D:6F:4C:4D:BA:79:56:71:A5:8D:0A:F4:A0:6F:FB:A5:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/706C450D6F4C4DBA795671A58D0AF4A06FFBA5B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:94:77:f7:0e:20:be:ca:cc:20:5a:84:24:c4:72:00:72:61:
         57:9d:b3:e2:5f:31:be:08:34:6f:4e:23:5a:89:65:4c:91:f4:
         9a:bc:f4:83:1c:d4:4e:f3:f2:d7:0c:21:07:20:bf:b7:1b:5c:
         81:e7:87:0b:bf:d5:82:74:72:f2:5f:f8:6c:06:3d:88:13:75:
         bc:b2:0c:40:b5:3e:c5:7a:4f:fb:38:3a:3f:82:0b:39:23:e0:
         4e:5d:9a:a7:87:44:ac:53:a6:24:de:c3:9f:8b:5c:18:46:6b:
         f8:66:56:b3:a6:7d:87:eb:0e:53:4d:23:75:74:13:e0:f0:0c:
         44:83:ca:37:e4:66:a7:07:f4:29:98:17:2f:7b:e1:43:23:03:
         c8:a7:26:95:a4:d4:f9:cf:ff:12:10:d3:ad:07:73:9b:3a:e6:
         8b:5b:7c:e1:62:eb:68:77:33:1a:b9:9a:a1:e1:30:ab:b8:e3:
         0d:35:fc:68:e4:c3:bf:40:08:b8:4c:25:5e:c7:5f:6a:1a:f8:
         7f:19:3e:2a:67:6e:47:69:62:e6:47:91:c6:0a:4e:9e:e4:71:
         75:2d:03:f7:65:13:4e:49:37:f6:ed:59:77:3f:d8:0f:fe:2a:
         db:23:77:16:d3:b5:b6:be:b8:7d:e6:2a:e2:2f:9b:c6:08:57:
         a7:20:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----