Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.mft
File:                     71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.mft (raw, json)
Hash identifier:          /OMO6cCSe0AVtSsiHe0ugrYLQsqk0R52+/vHV4vKzUQ=
Subject key identifier:   3A:23:32:64:DE:FA:E3:C3:B3:4D:0B:D5:E7:AD:66:8C:BA:29:D1:A4
Authority key identifier: 71:DB:76:DA:A4:10:C9:A9:27:80:99:C1:C4:3E:45:CB:FC:34:BB:8E
Certificate issuer:       /CN=71DB76DAA410C9A9278099C1C43E45CBFC34BB8E
Certificate serial:       26452A9A5923F690BAD5AE4281339C7A2FF8D2DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.mft
Manifest number:          0485
Signing time:             Mon 15 Apr 2024 06:33:06 +0000
Manifest this update:     Mon 15 Apr 2024 06:28:06 +0000
Manifest next update:     Tue 16 Apr 2024 10:32:06 +0000
Files and hashes:         1: 323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (hash: O4LFzc7/cY6+lMAf4mMwmY4RMs2YtI17QlKrAHhU658=)
                          2: 3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa (hash: zi2dP3UgDI3v4dWOtSopGiHhOHDVTtGh1aUt4AfAJTI=)
                          3: 71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.crl (hash: cwD4I4AAkVY+EcTi/ZVXMea7mXm45SjqLS3jtkISZRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:45:2a:9a:59:23:f6:90:ba:d5:ae:42:81:33:9c:7a:2f:f8:d2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DB76DAA410C9A9278099C1C43E45CBFC34BB8E
        Validity
            Not Before: Apr 15 06:28:06 2024 GMT
            Not After : Apr 16 10:32:06 2024 GMT
        Subject: CN=3A233264DEFAE3C3B34D0BD5E7AD668CBA29D1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:94:cc:f4:cb:1d:d4:de:d3:0d:70:47:3c:
                    d3:8f:e4:9d:25:2c:dc:7f:e9:d0:f5:25:0f:ec:89:
                    92:6b:c3:4c:99:4e:1c:11:f1:f9:af:fb:8e:8e:71:
                    4f:01:e7:ae:d0:36:2a:b1:58:0f:16:f5:5d:49:5d:
                    1f:f7:f1:22:cb:c0:9d:c4:61:99:ed:0b:a8:a5:e5:
                    80:71:d2:52:67:3c:fb:c1:0e:c7:31:5c:46:5a:cc:
                    d1:b5:68:12:dc:4c:c1:f3:81:aa:97:99:cc:9e:a5:
                    7d:05:69:12:de:a7:9f:40:a8:7a:aa:6b:dd:c5:88:
                    ee:ad:10:58:2c:c3:db:79:92:10:67:60:b3:d1:d6:
                    9a:c4:61:be:9a:33:0d:1e:21:1c:84:c4:75:f4:09:
                    c7:23:0a:e1:83:ab:b8:be:ab:59:46:a6:22:2f:08:
                    9c:20:21:4d:ec:51:ba:e4:01:32:10:80:5c:d8:19:
                    8d:c3:d3:f0:bb:b2:bf:16:48:38:3c:71:bc:2d:f3:
                    44:f2:07:db:b9:27:5b:6d:0a:d7:f2:43:0b:c8:58:
                    9b:2c:80:6c:57:81:01:6b:57:2b:f6:62:e2:51:71:
                    e8:3c:52:e1:ab:f0:63:d8:40:99:85:f9:1b:50:52:
                    7a:14:2a:0c:19:09:94:87:5c:a1:bc:fb:9f:e4:b5:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:32:64:DE:FA:E3:C3:B3:4D:0B:D5:E7:AD:66:8C:BA:29:D1:A4
            X509v3 Authority Key Identifier:
                keyid:71:DB:76:DA:A4:10:C9:A9:27:80:99:C1:C4:3E:45:CB:FC:34:BB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:12:61:b0:6a:91:47:0c:af:dc:e6:3b:27:cc:38:2b:54:f3:
         1a:9b:97:82:57:aa:9e:ba:76:ed:9e:e1:79:5c:a9:dc:c4:a7:
         5c:d3:d9:93:36:4c:6b:eb:aa:f3:89:e5:3a:58:a9:3a:b7:3a:
         61:06:13:5a:5a:a8:f7:86:f3:59:13:cd:4c:7b:46:67:99:0c:
         23:21:bd:f4:d7:5f:10:8f:1b:1d:67:60:8e:45:79:64:6a:8f:
         95:c6:34:2f:78:54:17:43:83:88:c1:df:b8:f4:ea:8b:47:9c:
         25:05:e2:ef:e3:10:e3:86:4e:59:b9:bd:fb:37:c6:81:6c:36:
         2b:a5:33:ad:3a:81:7f:32:f6:73:31:2c:60:4b:60:70:9f:c0:
         d7:34:94:5d:53:29:25:0d:ac:38:aa:a1:6f:35:43:8f:75:61:
         ea:02:1b:54:6c:a5:6c:77:1f:19:a5:e0:6c:46:bb:6f:35:7e:
         69:d4:34:75:da:46:81:62:fe:c5:77:c1:54:ea:29:29:0a:83:
         b3:3e:a3:22:bb:87:e2:5b:e1:06:b4:13:ce:1a:11:01:42:83:
         a1:0d:a6:0d:dd:ca:4d:a3:f9:93:f8:cf:27:47:98:6b:de:5d:
         e4:af:a9:e0:7b:b1:9a:c9:00:ae:c0:ca:06:00:6c:db:c2:58:
         dc:85:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----