Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/172F28376814AFE0EA240D36669993BD215583B2.mft
File:                     172F28376814AFE0EA240D36669993BD215583B2.mft (raw, json)
Hash identifier:          kCJ41bFHVnNuPIbWpgbFaBfrkknRXMbNwA3AlcJZ00I=
Subject key identifier:   91:90:F9:11:2D:71:E2:BE:AE:5C:76:B7:59:44:D3:55:8C:48:10:EC
Authority key identifier: 17:2F:28:37:68:14:AF:E0:EA:24:0D:36:66:99:93:BD:21:55:83:B2
Certificate issuer:       /CN=172F28376814AFE0EA240D36669993BD215583B2
Certificate serial:       091706C60B3131924F17D21AF316D929978B11D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/172F28376814AFE0EA240D36669993BD215583B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/172F28376814AFE0EA240D36669993BD215583B2.mft
Manifest number:          1D
Signing time:             Mon 11 Mar 2024 20:11:31 +0000
Manifest this update:     Mon 11 Mar 2024 20:06:31 +0000
Manifest next update:     Tue 12 Mar 2024 21:33:31 +0000
Files and hashes:         1: 172F28376814AFE0EA240D36669993BD215583B2.crl (hash: t267Ma8wETiopqBSBajlczSnne1i7c9Co+Oct0OylGQ=)
                          2: 3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (hash: UuCJ0ry0gw9HYEEvQOYFSHqA2TlxLhtfZO3taUo6f4I=)
                          3: 323830343a383637383a3a2f33322d313238203d3e20323732363435.roa (hash: dhYWxDXo93LJ7SmCeoWHb9Qcpp+DwK7TKuzeXR9iLRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:17:06:c6:0b:31:31:92:4f:17:d2:1a:f3:16:d9:29:97:8b:11:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172F28376814AFE0EA240D36669993BD215583B2
        Validity
            Not Before: Mar 11 20:06:31 2024 GMT
            Not After : Mar 12 21:33:31 2024 GMT
        Subject: CN=9190F9112D71E2BEAE5C76B75944D3558C4810EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:07:5b:0b:ee:f9:96:fe:37:5f:11:6c:ca:
                    b0:c9:ba:4a:85:6a:11:08:1a:c9:35:e9:88:eb:2e:
                    90:87:46:f4:23:c2:fd:89:56:5b:af:c5:23:c1:d2:
                    82:77:19:fa:98:de:11:77:90:c2:73:24:36:5d:eb:
                    d4:17:27:6b:0d:5e:51:bd:04:16:b2:d6:72:a2:a1:
                    aa:28:99:53:bd:a1:30:04:c1:9b:d6:5d:12:9f:39:
                    45:bd:59:31:7e:9b:8b:c7:fc:f5:7d:6e:b3:f1:4f:
                    e1:bb:ab:61:66:6d:9e:ab:64:ad:fe:52:1f:3a:9f:
                    27:58:32:64:d6:48:7c:ee:42:36:30:ec:fa:aa:d9:
                    46:98:2b:ad:a1:ae:8b:8a:82:33:d4:9f:8c:1b:28:
                    65:29:d9:8c:54:ac:cd:f3:18:66:a9:69:3e:b1:6c:
                    11:29:70:6a:09:4f:32:48:25:c7:96:8c:cf:53:e9:
                    9c:88:de:9d:75:af:64:15:43:01:54:d6:ed:d9:37:
                    a4:e1:8d:f5:74:6c:11:fc:17:17:f2:b1:14:5d:71:
                    c1:25:2e:1f:f5:df:52:a8:33:b6:27:a6:8a:cb:08:
                    df:5a:57:5e:aa:f8:11:a5:d7:c3:c1:32:a2:bc:46:
                    3a:e2:d3:57:35:96:11:1c:d1:72:b0:98:89:ab:b4:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:90:F9:11:2D:71:E2:BE:AE:5C:76:B7:59:44:D3:55:8C:48:10:EC
            X509v3 Authority Key Identifier:
                keyid:17:2F:28:37:68:14:AF:E0:EA:24:0D:36:66:99:93:BD:21:55:83:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/172F28376814AFE0EA240D36669993BD215583B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/172F28376814AFE0EA240D36669993BD215583B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/172F28376814AFE0EA240D36669993BD215583B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:ae:c9:9a:2b:5d:84:17:64:1a:d9:7e:fd:d3:34:33:fd:
         8b:fb:e2:0b:50:b2:83:27:8f:bb:22:83:cc:02:0d:6f:40:ee:
         6c:3c:01:73:4e:74:69:ea:38:e9:33:fd:41:36:90:08:66:f3:
         3c:40:04:45:55:cd:f1:06:ba:5b:8f:95:d1:2f:27:30:a6:a1:
         dc:ad:23:c5:e4:14:7e:8d:45:36:44:67:ba:5e:fa:50:80:af:
         a7:2e:e5:4e:c1:e7:bc:f7:0f:68:0e:08:59:3b:12:37:a4:b3:
         b8:b2:32:e0:3d:79:c3:6d:c3:77:ee:37:76:d6:f4:97:b8:ca:
         a8:8d:65:f1:98:b2:29:6b:6c:7d:2b:fc:23:f2:68:6d:c7:d5:
         66:4f:15:9d:92:5c:78:f1:1e:09:3c:10:a0:1f:d0:25:ea:62:
         bd:00:80:1e:36:22:42:43:84:94:39:1a:55:86:a5:86:85:3c:
         38:14:cf:a3:a1:cf:b3:b7:78:bf:6e:11:a1:dc:eb:d3:a0:37:
         a3:12:9c:cb:9b:12:3c:92:34:6e:2e:79:57:40:d5:99:d8:ba:
         e1:d1:e0:8c:55:03:0b:c5:30:0f:97:39:d9:f5:95:09:f4:8f:
         bb:e4:95:47:82:46:40:7e:00:25:73:bc:84:a2:4f:79:b7:f7:
         45:37:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----