Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/1029030DE1C966D8C8F63A122B446774ADE861DC.mft
File:                     1029030DE1C966D8C8F63A122B446774ADE861DC.mft (raw, json)
Hash identifier:          ZVv8Jl1Bzr70Sv7d4r/61p5/WIqVkuYOvBnBVjGN5tw=
Subject key identifier:   66:C0:C4:EC:B4:A2:A9:25:84:CE:AC:D6:0C:97:9B:77:8F:F9:D1:E0
Authority key identifier: 10:29:03:0D:E1:C9:66:D8:C8:F6:3A:12:2B:44:67:74:AD:E8:61:DC
Certificate issuer:       /CN=1029030DE1C966D8C8F63A122B446774ADE861DC
Certificate serial:       4B42BACF812BD228B2D1A85575AEF3F93597CA65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1029030DE1C966D8C8F63A122B446774ADE861DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/1029030DE1C966D8C8F63A122B446774ADE861DC.mft
Manifest number:          0220
Signing time:             Wed 17 Jan 2024 18:25:01 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:01 +0000
Manifest next update:     Thu 18 Jan 2024 18:59:01 +0000
Files and hashes:         1: 3136382e3233322e3139382e302f32342d3234203d3e20323636303932.roa (hash: i9iLEtwQy/icoPrpVuIgEMhR87dQLx1ZkZHI/LA+WSg=)
                          2: 1029030DE1C966D8C8F63A122B446774ADE861DC.crl (hash: 2QZ9Prkzlqe9noUWLsVSF79IK/BZ9XuxPFPFxLKp/Mg=)
                          3: 323830343a333036343a3a2f33322d3438203d3e20323634393438.roa (hash: 7eJuI72HzpKxo6uP0ElEVPUzFv3BXzerCy+7uZZ5SQA=)
                          4: 3136382e3233322e3139362e302f32322d3234203d3e20323634393438.roa (hash: RAdkIV54AT+wkHzY0qNEkGQq0FLZuKACGbor8cO28Xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:42:ba:cf:81:2b:d2:28:b2:d1:a8:55:75:ae:f3:f9:35:97:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1029030DE1C966D8C8F63A122B446774ADE861DC
        Validity
            Not Before: Jan 17 18:20:01 2024 GMT
            Not After : Jan 18 18:59:01 2024 GMT
        Subject: CN=66C0C4ECB4A2A92584CEACD60C979B778FF9D1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:b1:a1:bf:da:90:20:f4:11:73:6e:ee:10:
                    51:c3:43:7f:67:6a:0c:53:f7:9f:3a:a3:cc:c7:37:
                    11:ee:78:14:d9:9c:e4:b9:2a:d1:a3:dd:d2:69:b2:
                    04:af:d0:37:69:90:9f:06:d2:fc:83:41:ae:8b:03:
                    3e:f7:2e:3f:e0:39:a8:e2:0d:59:44:49:87:cc:26:
                    a4:d2:fe:5a:ef:34:30:8c:4c:9f:e7:da:97:74:20:
                    8f:c8:12:da:80:d2:18:30:5c:78:e1:eb:49:fc:ac:
                    28:03:9d:9e:a9:ec:d3:b3:8d:0b:fd:cb:ac:0d:81:
                    63:a3:b4:38:4c:53:1f:fb:cd:68:53:ca:f2:6a:da:
                    e8:c3:a4:f9:9f:f6:6a:52:7d:0b:1d:14:0b:d6:9d:
                    77:24:b6:e9:4f:d4:f3:65:43:81:85:5a:67:90:ed:
                    1a:d5:7b:9c:6b:f7:5b:36:ac:db:2e:c5:2a:4f:e5:
                    f3:01:53:4e:c2:47:27:c0:53:6f:3b:bb:0e:71:e4:
                    19:5c:d3:11:1d:90:39:cd:e1:f9:94:66:b3:61:c2:
                    ae:18:98:23:cb:87:32:98:93:65:43:ac:c8:38:db:
                    87:e4:8f:3d:44:32:97:eb:e9:a2:e8:69:4b:3e:44:
                    65:0e:a2:e2:64:ac:99:6b:d0:f5:a1:51:e4:c2:c6:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C0:C4:EC:B4:A2:A9:25:84:CE:AC:D6:0C:97:9B:77:8F:F9:D1:E0
            X509v3 Authority Key Identifier:
                keyid:10:29:03:0D:E1:C9:66:D8:C8:F6:3A:12:2B:44:67:74:AD:E8:61:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/1029030DE1C966D8C8F63A122B446774ADE861DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1029030DE1C966D8C8F63A122B446774ADE861DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/1029030DE1C966D8C8F63A122B446774ADE861DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:96:e5:28:f2:4a:d8:48:0a:63:98:82:b5:26:e1:44:59:9f:
         40:3f:cc:dc:20:a3:0a:29:2f:54:36:06:df:8b:f1:33:ad:75:
         2a:e2:66:3b:e4:5b:67:d9:56:5b:fc:a2:66:c9:f3:f6:b8:4c:
         b9:e5:71:3d:bb:3e:2f:9f:fe:bf:3a:bf:2d:5f:8d:7c:f1:f4:
         fe:41:ef:ae:59:c6:44:1a:5e:2e:7e:7f:7b:81:84:a2:12:b8:
         c7:20:0e:3c:68:03:30:94:ed:c8:2e:58:02:61:f1:ff:e0:d4:
         47:1c:48:f5:1d:8b:9e:76:20:93:07:96:0a:42:ea:68:e2:91:
         7c:d5:d6:61:f5:aa:a1:f0:9f:53:fa:e5:05:79:12:9f:0e:d9:
         64:04:43:f2:ea:82:df:c0:21:61:e4:ee:11:d3:f8:cd:1b:2f:
         f6:a5:eb:ac:57:dc:6d:10:0f:07:e1:0b:7d:19:cd:3b:41:07:
         9c:8b:8c:cd:12:d8:13:cc:d1:b5:b5:59:f0:7e:2d:c8:ca:07:
         47:4f:a9:f7:ae:d2:b3:0e:03:09:2a:75:27:7e:7f:ee:fd:77:
         95:3d:81:5a:f9:04:ef:3c:35:73:57:d4:85:d5:06:d5:7f:7e:
         3f:a5:c8:01:06:0a:36:27:d3:e3:76:6d:64:07:37:5b:1b:b0:
         58:91:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----