Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.mft
File:                     D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.mft (raw, json)
Hash identifier:          OnIwyqmlXKYVGGPRL/bNTnr+uLs2MyuhJyMd4N7dfgg=
Subject key identifier:   8F:04:91:5A:E0:4D:23:92:E7:A9:C2:42:6B:DD:FA:F7:4E:96:DD:01
Authority key identifier: D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9
Certificate issuer:       /CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
Certificate serial:       0649892AF7A0C4868AEC7D5A739DBC7F12D7F3F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.mft
Manifest number:          0275
Signing time:             Sun 14 Apr 2024 21:43:25 +0000
Manifest this update:     Sun 14 Apr 2024 21:38:25 +0000
Manifest next update:     Mon 15 Apr 2024 21:53:25 +0000
Files and hashes:         1: 3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa (hash: TukQFl8t75sMyV/cSfoPAHTD8vWqH/Pv42SoukswrZI=)
                          2: D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.crl (hash: FXXmvfz1+kIEa7yW4wPZIrt7ISaid26NsPiyKcK2iEE=)
                          3: 323830343a316532633a3a2f33322d3438203d3e20323634343132.roa (hash: huZJLgvOnid6ka+o6c0t1QQH23/AP/N0yxH7PHOhA10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:49:89:2a:f7:a0:c4:86:8a:ec:7d:5a:73:9d:bc:7f:12:d7:f3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
        Validity
            Not Before: Apr 14 21:38:25 2024 GMT
            Not After : Apr 15 21:53:25 2024 GMT
        Subject: CN=8F04915AE04D2392E7A9C2426BDDFAF74E96DD01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:77:52:f5:0f:dd:17:2d:35:c5:c4:e3:0f:
                    8e:3f:71:ee:f7:d1:c3:30:39:8a:8b:05:90:3d:97:
                    5d:fb:17:fd:63:39:17:cb:ee:fc:ae:da:87:f0:ab:
                    98:48:fa:0c:6a:0e:98:fa:4b:7d:fc:cb:3b:64:65:
                    d0:ef:a2:7d:8f:7e:cc:b3:c3:bf:c4:19:3e:76:56:
                    29:bb:76:ea:6d:dd:61:c2:d2:f9:ff:5a:8f:9f:17:
                    c9:93:80:35:4b:e8:2e:4b:34:d9:11:1d:b8:46:66:
                    3c:c3:84:b6:b0:ee:c6:f7:7c:8f:00:6c:bd:fd:26:
                    71:6d:6d:e3:9f:5d:b1:7d:29:84:f4:67:b6:f2:c7:
                    37:67:d2:9a:91:45:29:eb:10:47:86:8b:fc:a4:88:
                    18:db:8b:07:3c:e6:8b:c3:6c:e0:78:fd:86:84:79:
                    c2:34:34:34:ae:07:ea:f7:f9:9b:f1:3b:d7:2c:71:
                    fb:d4:36:f6:df:f7:1b:5e:73:d0:0c:81:80:71:8c:
                    0b:6f:5f:f3:1e:a2:8d:03:6f:9d:6f:4c:c4:e0:08:
                    f2:71:7b:4b:04:a4:ed:69:93:4d:8c:e5:2c:5a:69:
                    1a:f3:3a:63:47:f0:b9:25:d0:6b:55:c3:57:34:7c:
                    93:cd:c7:c0:c5:54:4e:46:a9:b1:e4:6b:56:c6:32:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:91:5A:E0:4D:23:92:E7:A9:C2:42:6B:DD:FA:F7:4E:96:DD:01
            X509v3 Authority Key Identifier:
                keyid:D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:95:88:ee:27:96:67:3d:f9:27:f9:74:4f:6c:9f:4d:dd:ee:
         c5:30:e8:79:04:8f:0b:26:de:4d:3e:14:cf:8f:01:32:e1:3a:
         fc:b5:55:08:33:9e:a8:60:e5:ce:66:8d:76:74:84:3b:93:54:
         3b:bf:fc:a8:68:00:60:10:ce:d5:9d:cd:aa:e6:e1:77:aa:53:
         75:c9:e3:f6:87:12:e7:bc:80:ef:b9:c9:9e:21:7a:f9:cd:d8:
         80:3c:74:91:3e:f8:f0:8d:89:fb:35:b4:01:59:4e:51:9f:0c:
         6c:e3:f6:3d:b4:56:42:0a:22:cb:a8:72:45:8b:38:ab:46:34:
         18:b0:24:1a:8e:16:c6:bd:3e:0c:e5:75:da:5b:13:23:f1:37:
         98:4d:e7:37:0b:b8:a7:d7:78:b6:94:3f:3f:83:0e:5f:51:2b:
         0a:c4:1d:86:51:97:fe:6a:3f:b2:0c:d2:ad:02:47:5e:ae:0f:
         43:62:03:d6:c4:70:5e:78:61:68:c9:ad:82:c5:34:4c:31:92:
         b1:23:35:a5:6a:0c:2f:f5:0f:e1:5c:96:ab:25:b2:99:95:74:
         00:fb:d4:21:c6:bc:4d:ae:14:a1:97:70:95:e7:6d:28:a1:99:
         eb:38:b3:f1:62:12:fd:90:ea:21:ca:bc:7b:ac:94:14:02:67:
         32:aa:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----