Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.mft
File:                     70F259FD82674905836BEB84C0D16834B21998C0.mft (raw, json)
Hash identifier:          Sa2/y0Td1SllQrKft0C0DREm2cibsLHBWevrwAfc/5g=
Subject key identifier:   E6:B2:86:C5:BF:79:5D:EF:B3:F6:1C:0F:0D:1F:E0:DF:81:B5:AF:ED
Authority key identifier: 70:F2:59:FD:82:67:49:05:83:6B:EB:84:C0:D1:68:34:B2:19:98:C0
Certificate issuer:       /CN=70F259FD82674905836BEB84C0D16834B21998C0
Certificate serial:       71FEB52C08AE9DDDB15FF5D8A58BFF248E8201C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F259FD82674905836BEB84C0D16834B21998C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.mft
Manifest number:          012A
Signing time:             Wed 13 Nov 2024 20:42:35 +0000
Manifest this update:     Wed 13 Nov 2024 20:37:35 +0000
Manifest next update:     Thu 14 Nov 2024 22:56:35 +0000
Files and hashes:         1: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: 5tckRF5svHFQGBjiyWxxXHzzsd/Oyst7zukwQ9bvDrY=)
                          2: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: cEzn0x1PneiPYYtoqm7ch6+KFL2bYfzauUN+6i0mlxk=)
                          3: 70F259FD82674905836BEB84C0D16834B21998C0.crl (hash: TsjWaEDMJfmg1kXg+ac6E5GKD/l3S/T4J/ox6Wyil08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:b5:2c:08:ae:9d:dd:b1:5f:f5:d8:a5:8b:ff:24:8e:82:01:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70F259FD82674905836BEB84C0D16834B21998C0
        Validity
            Not Before: Nov 13 20:37:35 2024 GMT
            Not After : Nov 14 22:56:35 2024 GMT
        Subject: CN=E6B286C5BF795DEFB3F61C0F0D1FE0DF81B5AFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:bd:cb:ce:53:41:1c:a1:bf:b0:c3:c0:f9:
                    a1:b4:c4:d6:7a:33:bf:92:a9:e8:03:d0:85:7a:51:
                    9b:10:74:95:7e:b0:71:23:c0:9c:38:ea:5a:f1:66:
                    f7:d5:26:67:2f:c5:d1:af:c8:68:fd:35:40:df:95:
                    38:91:c1:00:03:09:7e:ad:73:c1:82:e6:1a:ed:40:
                    64:d1:26:06:56:cf:02:97:df:5c:d0:18:93:3d:2e:
                    2b:fd:5f:7b:ce:d4:e8:6f:86:cf:49:76:de:18:e0:
                    c7:c6:ca:d9:18:be:ab:10:9f:cd:f5:94:98:3c:0b:
                    62:b4:30:6c:e9:ad:6d:83:79:89:d0:a8:da:16:e1:
                    e1:93:0c:5a:2d:d0:cd:6b:59:63:28:18:1d:a7:d6:
                    27:04:9b:4f:7f:de:eb:7d:fd:e8:fc:f2:cd:24:cc:
                    c1:0b:16:66:5b:12:a8:7e:a2:e6:7a:71:d9:65:6b:
                    b1:e9:7e:cd:1b:6d:a4:4e:fd:b0:7d:3c:36:2d:14:
                    a6:70:d2:d2:d1:2b:2e:99:02:0a:5c:d4:8e:09:1b:
                    bc:13:59:79:a3:f1:98:b8:9f:0e:46:51:80:2b:cf:
                    c2:aa:2a:4d:36:aa:21:ed:69:52:90:94:02:43:c7:
                    96:43:07:2c:12:91:20:25:c3:25:3c:83:33:1c:03:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B2:86:C5:BF:79:5D:EF:B3:F6:1C:0F:0D:1F:E0:DF:81:B5:AF:ED
            X509v3 Authority Key Identifier:
                keyid:70:F2:59:FD:82:67:49:05:83:6B:EB:84:C0:D1:68:34:B2:19:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70F259FD82674905836BEB84C0D16834B21998C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/2/70F259FD82674905836BEB84C0D16834B21998C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:36:9e:80:68:be:90:61:c6:4b:e1:ee:63:23:ad:83:9a:07:
         db:2a:86:7d:7a:bb:74:d0:24:b0:29:d0:76:7a:7a:aa:a7:05:
         ca:f4:71:9e:51:12:fb:44:ab:49:ab:f6:c7:25:5a:4f:db:51:
         43:b2:79:39:b7:e4:93:7f:4c:5f:1f:80:3b:d2:56:f5:32:ad:
         2f:d0:47:b7:f6:d0:be:8c:ff:0e:5e:2c:a7:6f:fb:3d:a1:ce:
         10:8e:71:32:f6:b6:9b:41:ec:cf:08:34:05:95:c9:cf:32:0f:
         4d:74:02:71:55:88:67:6a:30:18:46:91:68:fa:c2:d3:04:08:
         a3:0a:c5:69:14:40:b2:21:fe:1d:0d:28:29:0f:b7:85:7a:e9:
         bc:ff:99:ae:a3:02:1f:53:ac:f8:4d:a4:7a:0f:a9:85:af:05:
         dd:e5:ba:e2:57:ad:13:fe:79:c9:0b:22:8d:21:f5:65:52:7f:
         bd:93:f8:fe:3c:84:d2:61:4b:1d:d9:49:b6:0f:6f:ac:c8:c3:
         05:2b:7a:af:15:88:18:af:bb:26:01:a0:9d:78:c5:b3:d1:38:
         af:ce:da:32:8e:ab:e4:36:d7:54:ad:06:fc:0f:09:d1:7b:ba:
         17:f5:52:7c:8a:ea:40:c4:b8:29:ee:98:1c:2d:13:11:a2:b7:
         2d:8d:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----