Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.mft
File:                     ACF906D660552AF607C868FA54B1B6ED9ECEC67F.mft (raw, json)
Hash identifier:          FW3DVwdbiSoMztsyvNzHcLmkp1D7UNmgFH7Pz4rXwwY=
Subject key identifier:   57:DF:A8:D1:AB:49:57:6F:D7:14:0E:E1:CC:DC:7C:A0:9D:57:BD:57
Authority key identifier: AC:F9:06:D6:60:55:2A:F6:07:C8:68:FA:54:B1:B6:ED:9E:CE:C6:7F
Certificate issuer:       /CN=ACF906D660552AF607C868FA54B1B6ED9ECEC67F
Certificate serial:       4F9EB6F8159E520DFD0166B30A226F7905882618
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.mft
Manifest number:          07
Signing time:             Sat 21 Sep 2024 12:30:47 +0000
Manifest this update:     Sat 21 Sep 2024 12:25:47 +0000
Manifest next update:     Sun 22 Sep 2024 13:52:47 +0000
Files and hashes:         1: ACF906D660552AF607C868FA54B1B6ED9ECEC67F.crl (hash: pEONUH4BZ09CWT6m1wn582Yg9u3rbuKp2xZmqRiSs1w=)
                          2: 323830343a366331343a383030303a3a2f33332d313238203d3e20323730343434.roa (hash: 3JEjQMn26GWDh5Z124E61ItZc2lpGmn18kZjf49BK/U=)
                          3: 3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa (hash: U58ugKTG5pvsn0ZmfouK2RaIdH2hfeUETcNnmVza8ig=)
                          4: 323830343a366331343a3a2f33332d313238203d3e20323730343434.roa (hash: uj3EprrN9ZgtOJarYBk83OFkSGrHH2O7ZOyPYp6/Y1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9e:b6:f8:15:9e:52:0d:fd:01:66:b3:0a:22:6f:79:05:88:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF906D660552AF607C868FA54B1B6ED9ECEC67F
        Validity
            Not Before: Sep 21 12:25:47 2024 GMT
            Not After : Sep 22 13:52:47 2024 GMT
        Subject: CN=57DFA8D1AB49576FD7140EE1CCDC7CA09D57BD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:34:54:3b:c5:73:1c:29:fe:3c:f2:57:cd:4b:
                    74:b1:f3:86:c9:56:5d:cc:62:48:31:06:f9:2c:8c:
                    e9:fc:32:91:84:dd:aa:ac:14:ab:c6:f5:3c:47:52:
                    a6:dc:e5:e1:65:07:dd:41:de:c6:de:a2:71:a7:a5:
                    89:63:25:56:b7:f8:0d:52:ec:b6:df:9c:91:77:fb:
                    ce:b6:c8:30:26:ac:14:07:82:a9:3a:92:8c:00:2e:
                    95:83:14:c3:42:ee:2a:56:3d:fd:62:78:81:fd:02:
                    a2:4d:a2:e5:d8:d9:8d:3f:da:db:3d:52:29:3d:61:
                    e9:2e:4d:4a:7d:17:96:08:f4:65:21:24:b4:13:8f:
                    4d:87:86:ae:cf:b9:4f:14:d2:5a:bf:f3:85:b3:9b:
                    21:d3:20:05:44:ec:ee:aa:26:d4:de:89:3e:71:73:
                    36:49:7f:f0:62:00:5d:30:06:49:e9:1d:51:84:52:
                    07:e1:a4:b6:47:b6:8e:cc:b1:ed:3c:6d:d0:0c:24:
                    e5:bf:13:2c:d5:f4:d2:c3:e3:6a:2e:79:b2:45:37:
                    fa:ba:cf:09:39:1c:69:0b:fe:a1:1c:46:86:87:f8:
                    9f:7a:a5:27:df:af:24:43:f0:90:dd:63:38:63:2e:
                    d4:0c:f2:5e:39:35:61:ae:9e:ec:26:29:fe:d2:81:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DF:A8:D1:AB:49:57:6F:D7:14:0E:E1:CC:DC:7C:A0:9D:57:BD:57
            X509v3 Authority Key Identifier:
                keyid:AC:F9:06:D6:60:55:2A:F6:07:C8:68:FA:54:B1:B6:ED:9E:CE:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:02:19:d4:02:5f:eb:43:4b:25:3e:4d:98:6a:91:8d:b0:4d:
         52:d7:b1:16:a5:63:ce:0a:97:08:46:7d:d7:db:35:1e:e6:e8:
         4d:33:9f:e7:bb:76:af:d5:66:d8:cb:ef:9e:3d:ba:ce:78:85:
         24:54:1e:08:89:ce:29:32:8e:64:b8:8e:d3:a8:d8:32:b2:72:
         08:8d:de:d3:4d:f8:ef:0a:ee:69:bb:1b:b0:40:cc:87:b7:c5:
         3d:23:98:23:28:eb:00:ea:1f:58:e4:7b:5a:e7:85:79:f5:5e:
         04:71:f1:dc:0f:59:58:b1:c3:78:2d:b8:65:4d:bf:13:4d:33:
         73:dd:ef:ba:c1:8e:0b:9c:9c:b0:b5:8c:64:03:b5:13:fb:91:
         26:f8:ea:ba:8b:d7:6b:0b:5d:2e:a4:eb:cb:55:e6:09:db:8a:
         99:87:90:c8:64:7c:77:ac:e8:ff:da:1b:11:d6:70:bd:b4:59:
         a3:54:57:a9:c7:df:5d:5c:c8:83:14:3e:3a:41:63:3e:63:8b:
         18:01:0c:52:30:d8:89:e6:72:e3:24:c9:88:ac:ec:f6:c3:e9:
         71:0f:6a:a3:e2:11:43:d9:25:22:de:97:a5:df:1a:23:cc:94:
         70:50:d1:4e:6d:2d:03:83:d9:a5:94:58:b3:2f:87:37:21:2e:
         06:93:03:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----