Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft
File:                     9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft (raw, json)
Hash identifier:          kWM7Mx8QGUgc5FdEPUhER9aIJqxpmDNAJBkg6TaliSo=
Subject key identifier:   BE:FF:AA:81:C4:95:52:E5:90:54:2F:43:54:35:C3:77:DB:82:82:46
Authority key identifier: 9E:E0:AC:7E:38:B4:1D:5C:04:DC:A9:BF:B3:63:39:C2:72:9C:65:0C
Certificate issuer:       /CN=9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C
Certificate serial:       494ACD597ABDBCC1B55C35819BF87C07A45C536F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft
Manifest number:          EA
Signing time:             Sat 24 Feb 2024 02:40:21 +0000
Manifest this update:     Sat 24 Feb 2024 02:35:21 +0000
Manifest next update:     Sun 25 Feb 2024 04:47:21 +0000
Files and hashes:         1: 323830343a383537383a3a2f33322d313238203d3e20323732353831.roa (hash: N+sMj+uQT1yEiibV2vlPkJY3dnp49tL5Hf3N0D4LGrI=)
                          2: 9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.crl (hash: YDGDexVD6CczZc1PzQKuTwliwdeBN9N9oiqof/JaYXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4a:cd:59:7a:bd:bc:c1:b5:5c:35:81:9b:f8:7c:07:a4:5c:53:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C
        Validity
            Not Before: Feb 24 02:35:21 2024 GMT
            Not After : Feb 25 04:47:21 2024 GMT
        Subject: CN=BEFFAA81C49552E590542F435435C377DB828246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:c3:41:5f:13:a4:1e:a5:b9:45:2f:77:41:
                    0e:18:0b:42:45:d8:96:09:a2:17:9b:1a:64:14:ed:
                    26:67:79:7d:ad:76:18:75:0e:f8:c6:60:62:c9:13:
                    23:e5:e4:78:00:09:5a:8b:22:53:26:49:73:06:6f:
                    36:04:b4:90:db:07:8c:c1:10:2a:4f:19:39:f6:93:
                    0d:f7:a7:d3:d3:71:88:3b:7e:26:fa:51:42:a9:af:
                    f4:b7:e3:e7:55:c5:25:8f:ee:fd:53:43:5a:a9:dc:
                    70:6b:82:9f:eb:a8:10:46:d1:f0:bc:56:10:7e:34:
                    39:bc:d9:16:03:71:20:91:aa:bf:67:73:25:38:42:
                    eb:3f:6f:34:35:ff:10:d3:c6:af:63:fc:08:e8:2f:
                    3a:5b:29:0d:2a:d8:d2:8c:38:fc:69:79:34:bf:54:
                    15:99:7c:43:0c:82:ad:f3:9c:38:1c:37:92:9b:28:
                    95:a5:66:4f:44:1a:03:68:ea:b2:19:82:ef:15:cb:
                    41:c0:5f:14:91:0c:1f:ee:ca:de:db:25:c0:81:c3:
                    af:76:1a:60:94:46:91:69:ce:88:2c:de:9c:85:52:
                    7b:0d:50:5d:db:c2:0a:06:ae:5b:02:17:19:e7:cf:
                    95:23:f1:9f:36:5d:c5:ad:9b:02:74:aa:70:90:11:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FF:AA:81:C4:95:52:E5:90:54:2F:43:54:35:C3:77:DB:82:82:46
            X509v3 Authority Key Identifier:
                keyid:9E:E0:AC:7E:38:B4:1D:5C:04:DC:A9:BF:B3:63:39:C2:72:9C:65:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/9EE0AC7E38B41D5C04DCA9BFB36339C2729C650C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:fd:40:f4:b8:22:34:d3:cf:43:06:70:c0:f6:0d:ee:f0:af:
         86:0b:33:9d:bd:21:1c:02:99:bd:e8:aa:e0:29:88:38:4c:e3:
         a4:4b:2f:79:61:5e:a1:35:c3:d0:3e:a3:0c:b5:85:7e:ca:1f:
         1c:e3:fb:73:bc:0f:24:52:c4:63:01:a2:1d:10:b2:b3:db:bc:
         02:78:ee:f0:3a:6e:d3:71:88:33:e9:b9:10:9f:43:a7:97:23:
         e8:37:14:a8:40:42:f9:f6:e4:19:cf:e5:5d:01:b5:06:39:70:
         df:80:0c:e9:c5:17:3a:44:8d:06:22:83:26:e2:0e:91:81:f3:
         57:e9:a2:eb:8f:86:ac:6e:10:67:15:ef:a6:c6:f9:16:ea:97:
         d3:07:e2:5f:74:f7:a9:bd:bd:c4:9b:e4:2d:b3:64:ea:18:6d:
         6a:91:71:19:7a:0d:9d:7c:35:3e:ed:93:4a:1b:be:90:ba:05:
         79:ff:c8:ef:44:51:3d:39:a0:f3:56:f1:bf:0f:55:20:9d:a2:
         1a:2f:c8:0f:e2:4d:53:60:fd:58:77:1d:42:ff:ff:62:ac:2d:
         f7:f2:83:d2:09:b3:a3:b6:f3:bf:d7:e7:74:e2:60:e5:ad:08:
         89:62:ff:40:bb:87:8d:14:35:49:86:95:0e:c2:f5:c3:af:df:
         fb:6b:4d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----