Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/626981E9FEDC2900347DBAD74639C61FA4957F20.mft
File:                     626981E9FEDC2900347DBAD74639C61FA4957F20.mft (raw, json)
Hash identifier:          CdPIPqJ7YnGxPHVi886qTM4abXbbIgwI44AKvFeOt+4=
Subject key identifier:   DD:BF:6C:41:66:1E:CA:EF:A3:A3:6C:58:63:82:4A:F2:FB:B5:3F:D6
Authority key identifier: 62:69:81:E9:FE:DC:29:00:34:7D:BA:D7:46:39:C6:1F:A4:95:7F:20
Certificate issuer:       /CN=626981E9FEDC2900347DBAD74639C61FA4957F20
Certificate serial:       6C2C6B5C401E541BB665BC048734888E25085735
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/626981E9FEDC2900347DBAD74639C61FA4957F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/626981E9FEDC2900347DBAD74639C61FA4957F20.mft
Manifest number:          16
Signing time:             Sat 20 Apr 2024 23:03:45 +0000
Manifest this update:     Sat 20 Apr 2024 22:58:45 +0000
Manifest next update:     Sun 21 Apr 2024 23:38:45 +0000
Files and hashes:         1: 34352e3233382e37322e302f32322d3332203d3e20323638333238.roa (hash: BtI6Cx50bMyFxh3nd/rMgnnRfLiiPuIXwYWgzBz64gE=)
                          2: 626981E9FEDC2900347DBAD74639C61FA4957F20.crl (hash: vT4HDjHVBGNwzsePmegM33RvOQlO8zmWVAUTc8YDYcw=)
                          3: 323830343a346637343a3a2f33322d3438203d3e20323638333238.roa (hash: BNxMDxim0yQw65OLQ6KGFOWWcbFHoHN6CCNopPPgqus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2c:6b:5c:40:1e:54:1b:b6:65:bc:04:87:34:88:8e:25:08:57:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626981E9FEDC2900347DBAD74639C61FA4957F20
        Validity
            Not Before: Apr 20 22:58:45 2024 GMT
            Not After : Apr 21 23:38:45 2024 GMT
        Subject: CN=DDBF6C41661ECAEFA3A36C5863824AF2FBB53FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:0c:dc:84:7c:94:5c:e2:34:04:d0:c6:f5:
                    d1:7c:16:0c:e7:28:89:b5:da:00:36:0d:c1:2c:ab:
                    d4:fd:e8:f1:c3:21:e2:5f:05:84:9f:cd:77:1f:cd:
                    86:91:5e:f4:98:ad:53:f3:57:04:76:16:34:7f:42:
                    8d:dd:41:77:ee:cb:42:86:37:15:19:c0:41:3f:81:
                    2b:f3:df:be:3d:e2:71:7f:67:00:83:65:8f:3e:53:
                    9b:f2:16:47:54:af:70:99:0e:2d:37:0d:b5:f6:79:
                    f1:d3:53:98:0f:c9:d2:67:38:4a:42:45:9a:7a:61:
                    53:a0:32:2d:bf:28:f2:e5:19:38:5b:a3:8e:73:fc:
                    72:34:a6:3d:9e:9f:e4:08:6e:53:66:be:11:88:7b:
                    2f:81:52:de:a0:00:5a:f3:68:16:b0:35:b9:c3:56:
                    af:fc:f6:e1:ed:41:ea:b0:a3:0c:fa:b5:44:5b:c6:
                    66:55:cc:97:5c:bc:18:fb:3c:22:00:1a:c2:41:05:
                    80:04:16:14:d7:fa:f5:3c:3a:c5:a9:6f:61:3e:12:
                    66:32:a1:33:38:10:99:a1:82:dd:ef:b9:62:8e:85:
                    63:3f:f2:03:95:53:29:4e:40:32:72:34:d0:60:94:
                    0a:d6:d7:09:3a:10:15:6d:0c:75:ef:c7:fe:e0:5e:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BF:6C:41:66:1E:CA:EF:A3:A3:6C:58:63:82:4A:F2:FB:B5:3F:D6
            X509v3 Authority Key Identifier:
                keyid:62:69:81:E9:FE:DC:29:00:34:7D:BA:D7:46:39:C6:1F:A4:95:7F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/626981E9FEDC2900347DBAD74639C61FA4957F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/626981E9FEDC2900347DBAD74639C61FA4957F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/0/626981E9FEDC2900347DBAD74639C61FA4957F20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:c4:d5:23:11:de:92:76:01:f4:1f:bf:07:17:7a:48:ca:
         97:72:14:27:a1:02:1a:93:be:dc:f9:a0:0c:34:14:ab:c4:ab:
         f3:b1:58:6a:34:0f:8a:6e:8d:e3:cf:0f:5d:42:2b:c8:30:fc:
         15:c8:34:fa:e4:6f:58:dd:eb:d6:3f:ff:b4:7b:33:92:fa:7a:
         0f:10:8a:59:45:b5:83:ee:03:e4:cc:e9:bc:5a:93:42:4f:4a:
         1e:ca:4e:b2:ee:62:63:45:fa:bd:3f:5c:a0:b1:b8:75:37:fd:
         6f:19:cd:90:43:4e:b1:58:48:1f:a9:2c:c7:63:cc:1b:b7:04:
         b5:79:5c:e4:25:98:1f:41:71:47:5c:28:d5:52:61:cd:1c:ff:
         aa:bb:af:46:65:84:90:1b:18:62:fe:3c:14:aa:9e:24:07:f4:
         75:29:b3:95:6a:cb:db:b8:a7:04:c2:72:1c:0f:65:5e:10:6e:
         ac:13:b0:bb:6d:a9:ce:df:c3:b4:25:5f:a5:00:ca:2b:d0:68:
         0f:a2:e9:57:9a:fd:c5:36:9d:60:37:bb:91:61:e9:1f:f2:b1:
         e1:a0:ff:57:de:e6:39:4d:16:61:7e:1f:e2:fd:e2:61:ea:78:
         60:72:65:e9:eb:9e:3d:d2:69:95:24:cc:b5:99:81:80:46:14:
         60:63:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----