Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.mft
File:                     790C00F8A05FA0D218883534C018ADD7838D0242.mft (raw, json)
Hash identifier:          kGY4hi8/sAzcCdEBPNeQtMZm1EidU2h62i8UBhp3s8U=
Subject key identifier:   88:BC:69:4F:25:71:56:36:B5:6D:B9:94:7F:CC:48:DF:F7:D9:3E:A4
Authority key identifier: 79:0C:00:F8:A0:5F:A0:D2:18:88:35:34:C0:18:AD:D7:83:8D:02:42
Certificate issuer:       /CN=790C00F8A05FA0D218883534C018ADD7838D0242
Certificate serial:       74752F813EA99B92B6BA62962A901B83A7C4DFA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/790C00F8A05FA0D218883534C018ADD7838D0242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.mft
Manifest number:          BA
Signing time:             Mon 15 Apr 2024 01:24:42 +0000
Manifest this update:     Mon 15 Apr 2024 01:19:42 +0000
Manifest next update:     Tue 16 Apr 2024 03:25:42 +0000
Files and hashes:         1: 323830343a323136303a3a2f33322d313238203d3e20323634353531.roa (hash: F5PoLNG9Ip0kbaEvrb8VmhncbqMxIE9QDoACHhJaJlg=)
                          2: 3133382e302e3134302e302f32322d3234203d3e20323634353531.roa (hash: E4ckyjioywmgg/9UcG8qXnY514t79ssam6H0qGoPpy4=)
                          3: 790C00F8A05FA0D218883534C018ADD7838D0242.crl (hash: nO3D7Dq39no5HYf5dpZ/FDc5jPLhw+S0Nidf78patXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:75:2f:81:3e:a9:9b:92:b6:ba:62:96:2a:90:1b:83:a7:c4:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790C00F8A05FA0D218883534C018ADD7838D0242
        Validity
            Not Before: Apr 15 01:19:42 2024 GMT
            Not After : Apr 16 03:25:42 2024 GMT
        Subject: CN=88BC694F25715636B56DB9947FCC48DFF7D93EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:f9:f3:92:9b:ce:fb:c1:b5:06:b8:f5:f2:
                    64:69:ac:f5:ce:16:60:0b:e7:18:63:fa:53:6e:8e:
                    df:3d:d7:ce:f0:38:a1:14:b7:fe:8e:48:1c:17:ca:
                    d4:84:f0:77:b9:1e:b4:3d:dc:89:56:01:18:85:38:
                    36:b9:e3:c9:a4:c2:16:6d:58:d7:35:8b:90:b0:56:
                    6d:68:57:85:d6:0e:b1:49:f3:a6:dd:b0:14:0a:d0:
                    9c:b3:bd:46:35:48:91:b1:09:92:3d:67:04:57:db:
                    91:3d:d2:a4:91:17:4f:3c:f9:08:a8:3e:19:99:0c:
                    cf:a0:f6:fc:be:bc:8a:7e:dc:d5:ff:49:fc:1c:85:
                    a4:e4:3a:41:6b:b4:24:c3:9a:83:60:e7:79:bd:d9:
                    d3:04:ca:94:85:60:a9:07:a3:4c:f9:4c:18:6d:71:
                    fd:20:c5:21:a6:25:20:47:1a:df:4e:61:98:db:a0:
                    a2:1a:b7:f4:22:29:75:54:79:39:0e:44:e4:78:85:
                    5c:d1:94:07:23:9c:91:96:33:ff:67:6d:58:ac:b3:
                    8d:a3:ce:03:88:7b:ad:ab:47:08:b3:db:98:e1:21:
                    9b:7b:d4:8a:45:87:17:06:c0:e6:8b:c1:fc:a8:38:
                    3c:e4:19:02:28:04:c2:a1:84:2a:c9:de:7a:e8:f4:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:69:4F:25:71:56:36:B5:6D:B9:94:7F:CC:48:DF:F7:D9:3E:A4
            X509v3 Authority Key Identifier:
                keyid:79:0C:00:F8:A0:5F:A0:D2:18:88:35:34:C0:18:AD:D7:83:8D:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/790C00F8A05FA0D218883534C018ADD7838D0242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/790C00F8A05FA0D218883534C018ADD7838D0242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:17:13:9e:a7:ac:51:02:57:fd:e2:3f:18:f3:4e:fe:0c:ee:
         4e:a9:0b:b4:5b:fe:f4:79:2d:ae:4b:9a:ec:5f:c2:c9:05:3d:
         3b:aa:39:16:50:e0:e7:40:a4:30:7d:07:32:2b:d8:40:f8:f6:
         22:17:70:d8:18:13:af:15:50:53:bb:bf:03:97:b2:89:ab:af:
         bc:89:04:84:2d:e3:7e:c5:ac:0e:82:76:a3:d8:12:b2:e6:98:
         1e:bf:d6:a9:5f:38:6b:4a:38:9e:c1:9a:38:f0:2c:98:5b:32:
         b8:7e:54:2b:27:a9:2a:62:6a:58:63:b4:8a:40:01:f7:30:f1:
         de:46:5e:0c:ee:b0:23:b5:f3:ed:b7:09:92:85:d3:ad:26:fd:
         0d:40:bf:e2:14:1c:de:98:51:08:c7:e8:0c:c0:ec:71:5f:24:
         c9:ce:c4:59:c7:11:52:c3:67:c2:39:7e:0a:3a:4b:9e:58:02:
         dd:d7:2b:fc:7c:87:10:57:70:e2:b4:f0:f6:8f:7a:02:f0:3a:
         97:f8:2f:b1:69:ab:4f:c1:5f:55:9b:c8:31:56:86:24:c9:6a:
         79:20:34:e7:c3:a5:46:a4:c7:48:5b:ef:5a:bc:79:c9:51:84:
         ee:5e:e7:72:78:70:01:90:15:0b:47:10:2e:27:25:bd:70:5b:
         03:97:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----