Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft
File:                     2F71AB5CAACB982B46823A90DA691E884C937F54.mft (raw, json)
Hash identifier:          bCZB7R+vxyM6uVTDAmLKKTaPwvjPUIf2Zfv+dVdbgs8=
Subject key identifier:   4C:76:FB:9C:13:47:37:6C:E7:0B:57:05:CF:E3:03:61:30:EA:98:10
Authority key identifier: 2F:71:AB:5C:AA:CB:98:2B:46:82:3A:90:DA:69:1E:88:4C:93:7F:54
Certificate issuer:       /CN=2F71AB5CAACB982B46823A90DA691E884C937F54
Certificate serial:       4FCBF8C518DC98706B753C2DC1C0571997EE05D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F71AB5CAACB982B46823A90DA691E884C937F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft
Manifest number:          60
Signing time:             Thu 22 Jun 2023 08:53:10 +0000
Manifest this update:     Thu 22 Jun 2023 08:48:10 +0000
Manifest next update:     Fri 23 Jun 2023 09:10:10 +0000
Files and hashes:         1: 323830343a353139633a3a2f33322d313238203d3e20323638343635.roa (hash: nTu9P9vSeHBD72p3YfmwOSTDZi1ZP7PqXzO6CP84JX4=)
                          2: 34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (hash: GRLBIhLolTNoztQoXDErN85cNijcEvH8WJGv06miv6g=)
                          3: 2F71AB5CAACB982B46823A90DA691E884C937F54.crl (hash: LKiEwaxg+thzYrcZIWUJ7umiGdzDXh9LgHxwdlxTkhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cb:f8:c5:18:dc:98:70:6b:75:3c:2d:c1:c0:57:19:97:ee:05:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F71AB5CAACB982B46823A90DA691E884C937F54
        Validity
            Not Before: Jun 22 08:48:10 2023 GMT
            Not After : Jun 23 09:10:10 2023 GMT
        Subject: CN=4C76FB9C1347376CE70B5705CFE3036130EA9810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b9:fa:f4:89:ae:04:da:f1:f6:d4:48:03:81:
                    c6:21:b5:be:7b:43:6f:b0:47:04:c9:1c:50:7a:6c:
                    8f:6a:5a:21:97:e9:1f:60:ce:c4:86:f2:95:b4:05:
                    26:ef:b7:25:50:63:ca:cd:00:0f:a9:55:8d:46:f0:
                    b7:6e:73:a4:42:c9:35:d6:72:7a:30:f7:25:e4:a1:
                    7b:5f:ec:5d:83:73:99:8b:3a:72:63:a4:39:4a:74:
                    39:a1:50:5e:b6:8a:d1:37:8f:3f:85:b9:a4:b3:46:
                    97:92:15:4a:c6:0c:8d:fb:e1:74:a8:3a:ab:e1:03:
                    7e:9f:0f:00:ed:06:fd:0f:c8:b7:7c:af:79:2d:ce:
                    a8:2f:c8:7f:54:7b:e6:5a:c1:38:8d:6c:30:26:8a:
                    06:a5:67:2f:bf:3b:11:30:d7:e6:56:cb:3a:48:b1:
                    c8:36:f9:61:15:00:5a:4b:29:6b:a8:79:bc:0f:8b:
                    6f:a8:89:1a:de:ff:49:76:39:96:8c:d3:62:64:d5:
                    cf:0e:4e:4f:27:60:c7:86:f2:5a:34:75:6e:f6:f7:
                    46:19:90:ec:6a:73:d2:e3:42:0c:0a:8f:3b:5c:3d:
                    4f:5f:c1:c1:b4:9c:21:2b:4f:c0:9a:a5:d8:2c:f9:
                    ab:1a:e0:67:a9:ce:a3:ef:6d:91:bb:59:5d:0e:d0:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:76:FB:9C:13:47:37:6C:E7:0B:57:05:CF:E3:03:61:30:EA:98:10
            X509v3 Authority Key Identifier:
                keyid:2F:71:AB:5C:AA:CB:98:2B:46:82:3A:90:DA:69:1E:88:4C:93:7F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F71AB5CAACB982B46823A90DA691E884C937F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:4a:06:d2:51:ff:ce:ca:83:d2:b9:63:3b:c1:5c:8e:b1:
         96:9a:53:fa:56:aa:f5:e2:27:7a:11:ce:15:46:b1:f3:b0:66:
         4e:d9:36:79:40:50:03:12:0b:25:57:92:7d:8b:24:de:fc:c3:
         df:b7:98:ec:20:93:6f:68:99:e7:7b:cd:a4:1d:11:41:76:af:
         dc:08:28:5c:22:d5:b7:c2:3b:89:65:a5:fc:fb:14:09:a9:fe:
         4a:fa:c2:91:71:68:4b:aa:80:07:68:69:04:7c:c0:25:76:bc:
         f1:4a:e6:ee:51:69:cf:2e:e7:e8:dd:ae:1f:0f:d7:7d:72:49:
         79:b3:fb:28:cd:ff:51:d1:01:e6:34:76:62:d8:2f:46:0d:0d:
         16:68:8c:73:10:c5:0c:f8:57:fb:02:ea:7d:79:2a:cd:c5:85:
         46:ba:8c:64:e1:b2:d5:5a:50:b6:b8:1f:47:1b:5f:6f:a3:4d:
         1c:f0:5d:f7:38:50:2c:0b:a7:4e:4c:23:cc:06:e5:a0:ed:27:
         ef:f9:92:40:4b:a8:74:10:e5:5a:db:6e:ee:6f:0b:0a:75:58:
         bd:74:30:2f:0b:43:86:5a:91:b9:f5:ee:36:63:5b:7d:dd:fd:
         41:c2:9b:e3:00:df:de:85:48:c8:be:39:34:89:45:05:98:56:
         c5:62:da:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----