Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.mft
File:                     02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.mft (raw, json)
Hash identifier:          V98fhy18rLvOmoLQaHLg1vvk9EAZqZH03Av+wfM49Vk=
Subject key identifier:   7D:11:FF:4C:9F:05:52:90:8B:BE:88:1F:E3:D7:3E:3F:6A:CB:FD:C1
Authority key identifier: 02:A7:BD:15:22:92:37:3B:B2:FD:78:CD:F1:E4:72:A9:AD:B4:4F:6E
Certificate issuer:       /CN=02A7BD152292373BB2FD78CDF1E472A9ADB44F6E
Certificate serial:       36DB03DD375A7DFC046A5B1D8F85F01A40BF17F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.mft
Manifest number:          01BF
Signing time:             Mon 15 Apr 2024 05:02:44 +0000
Manifest this update:     Mon 15 Apr 2024 04:57:44 +0000
Manifest next update:     Tue 16 Apr 2024 06:51:44 +0000
Files and hashes:         1: 323830343a353037383a3a2f33322d313238203d3e20323638333931.roa (hash: EY14sBAMRK2OmOMWmyH+IMT3eOidf3r0gul+XhmZ+1U=)
                          2: 34352e3136302e33362e302f32322d3332203d3e20323638333931.roa (hash: QvS1qLW8wvbbkd24Movmu0tKEYXQG419KGYoWgVGkXs=)
                          3: 02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.crl (hash: Ja/+CpNMNel9B8O9kdiDfuJb/9BmYQbBZCrKwc12y5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:db:03:dd:37:5a:7d:fc:04:6a:5b:1d:8f:85:f0:1a:40:bf:17:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A7BD152292373BB2FD78CDF1E472A9ADB44F6E
        Validity
            Not Before: Apr 15 04:57:44 2024 GMT
            Not After : Apr 16 06:51:44 2024 GMT
        Subject: CN=7D11FF4C9F0552908BBE881FE3D73E3F6ACBFDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:ce:f1:b6:60:aa:c7:2d:cf:83:fe:34:3c:
                    e7:86:5a:1c:68:25:01:ba:b2:51:4b:33:f3:1c:fa:
                    0e:cb:ea:6f:9a:39:9c:9e:4f:c2:80:71:f9:70:0b:
                    af:80:6f:ee:6b:2e:5d:1e:33:d8:fe:9c:2e:c0:3f:
                    f2:17:ac:6f:b2:ec:d0:38:ff:0e:e2:c1:2c:1e:72:
                    d8:a1:83:11:6e:c5:94:28:d5:28:79:5c:5d:1e:a1:
                    2a:2c:0a:e8:d1:3f:34:4a:aa:22:9a:2b:c0:bd:51:
                    90:aa:7b:ad:2b:8a:e0:86:d1:f7:a0:d2:dd:4f:7f:
                    59:9d:4e:bc:45:82:6d:1f:58:20:03:02:50:ee:53:
                    bf:b8:1d:5e:bf:d4:51:dc:27:34:c7:38:fc:07:08:
                    77:0c:e4:54:0e:79:ae:60:13:eb:94:b9:4c:d3:b1:
                    be:70:42:93:e9:75:f3:3b:4e:40:65:81:fe:de:be:
                    40:0f:9f:1a:4f:0c:fa:89:ef:c6:79:ba:7b:c0:f1:
                    c2:58:44:32:05:24:ea:af:90:61:a2:e4:52:d9:92:
                    1b:26:6e:80:bf:11:f1:1e:2d:2e:47:80:8b:91:9a:
                    4e:3d:29:ba:01:25:c4:dd:26:96:98:2f:80:1d:22:
                    17:70:52:03:a3:92:80:4b:2d:87:71:26:55:e9:d4:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:11:FF:4C:9F:05:52:90:8B:BE:88:1F:E3:D7:3E:3F:6A:CB:FD:C1
            X509v3 Authority Key Identifier:
                keyid:02:A7:BD:15:22:92:37:3B:B2:FD:78:CD:F1:E4:72:A9:AD:B4:4F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/0/02A7BD152292373BB2FD78CDF1E472A9ADB44F6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:fb:76:38:4e:9c:1e:5d:c5:e8:d8:04:98:42:27:9d:c8:
         d0:b0:f0:94:8e:ca:50:be:ec:04:ac:03:e2:b1:3a:4e:12:1d:
         06:23:a3:08:59:fa:ab:3f:7b:11:f2:f4:c8:69:76:b6:05:ef:
         0c:51:63:61:18:be:d2:67:8e:b2:8c:76:19:16:f6:94:e9:85:
         bb:7c:cd:39:f1:15:3e:d0:b1:76:41:e4:db:1d:50:46:00:2e:
         a5:95:dd:d2:54:ff:40:bf:27:03:e3:6c:37:0b:44:4c:e1:73:
         ff:fb:25:68:ea:a1:48:8f:93:cd:e1:dd:bb:7b:ce:61:b0:fe:
         1e:71:a8:bf:b3:b0:34:93:c2:c5:7b:1e:e8:1c:d4:93:80:41:
         71:7b:5d:18:65:93:0e:6b:7d:63:58:aa:a5:ae:2c:c6:55:d3:
         25:9e:b4:2e:5f:40:41:69:10:c6:2f:8e:2f:dc:ae:cb:e1:73:
         75:b5:12:19:0f:7a:a3:2e:17:90:cc:10:b6:92:d2:e2:d8:18:
         43:82:0e:c3:56:be:13:a7:c8:e0:07:85:b9:0f:65:bf:11:bc:
         d2:f9:0d:1c:ce:a5:c9:0e:78:41:43:a9:12:a1:cb:dd:88:d6:
         d5:14:37:93:4e:43:32:75:7d:22:5b:e6:0a:33:ee:79:63:9d:
         29:44:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----