Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.mft
File:                     C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.mft (raw, json)
Hash identifier:          kzEOMHAcmnSFCdLQT2RhXbZ0YFsIjRrCgkw7ThQm7tk=
Subject key identifier:   99:5B:DC:FF:15:91:E3:B3:0C:77:A6:97:1B:20:D5:9D:9F:8A:7E:CD
Authority key identifier: C6:E6:AB:C8:95:82:9B:EE:4E:B5:D8:71:1C:C0:43:8E:4B:1A:58:9B
Certificate issuer:       /CN=C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B
Certificate serial:       0FBE15737CB35DA21C190186E0858F65CD953D40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.mft
Manifest number:          72
Signing time:             Mon 15 Apr 2024 01:35:52 +0000
Manifest this update:     Mon 15 Apr 2024 01:30:52 +0000
Manifest next update:     Tue 16 Apr 2024 03:20:52 +0000
Files and hashes:         1: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: ZdZBfYVoO+vyyGPDCu1KQsYmLraEcs6021HVaYRL5mY=)
                          2: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: jrz7UNPbuS4XlvjsM9slTN6lpxYns4Ay57KVPswM91E=)
                          3: C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.crl (hash: St5WZRDcH/LfvN8BpCDjc6sEbqhSOrOWiVAEWUEv548=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:be:15:73:7c:b3:5d:a2:1c:19:01:86:e0:85:8f:65:cd:95:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B
        Validity
            Not Before: Apr 15 01:30:52 2024 GMT
            Not After : Apr 16 03:20:52 2024 GMT
        Subject: CN=995BDCFF1591E3B30C77A6971B20D59D9F8A7ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0d:7e:e5:78:53:df:cf:71:94:43:c9:11:ed:
                    52:8a:74:cf:82:b9:99:4a:4f:fb:cc:a9:ab:49:b8:
                    26:a0:95:bd:7f:7f:6c:1d:d8:81:d3:4e:6d:23:74:
                    cb:b9:59:ab:c4:f1:60:5c:5c:4e:b5:9a:21:55:ff:
                    39:a4:e6:5c:34:f4:72:7e:4e:3b:0c:9f:71:f8:2d:
                    3d:bb:d6:ed:09:a9:ca:14:ba:dd:bc:d4:2a:53:31:
                    77:cb:50:eb:2c:b8:50:37:15:9b:31:45:55:27:a6:
                    c5:ce:e5:c1:18:a7:ec:34:fd:52:84:50:0b:db:7e:
                    b0:c8:cd:35:1f:83:9b:14:de:e6:d0:10:93:34:1e:
                    2e:3b:5b:53:54:2b:48:47:d2:1b:d5:6b:56:1c:fb:
                    8a:98:3b:42:2d:f5:67:5e:40:d0:4c:6a:e3:00:a7:
                    68:17:2a:ab:b7:ba:33:08:d9:51:4e:06:f3:f8:a9:
                    04:46:09:27:47:ea:65:10:64:0c:67:b9:0f:04:45:
                    1f:dd:21:13:77:c0:31:c0:f5:e4:2c:02:fa:b6:83:
                    a6:c5:b2:f1:ad:de:8c:de:99:dd:30:5a:c0:33:cf:
                    0b:16:cf:d3:08:84:cc:12:72:cb:a2:31:5a:b1:c1:
                    8d:a9:66:26:78:6e:83:c4:ec:96:0f:79:e7:ee:60:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:DC:FF:15:91:E3:B3:0C:77:A6:97:1B:20:D5:9D:9F:8A:7E:CD
            X509v3 Authority Key Identifier:
                keyid:C6:E6:AB:C8:95:82:9B:EE:4E:B5:D8:71:1C:C0:43:8E:4B:1A:58:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/C6E6ABC895829BEE4EB5D8711CC0438E4B1A589B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c9:44:18:93:33:ed:04:6b:ca:b1:6f:75:c5:25:e7:70:d6:
         4d:fa:23:3e:4f:0f:bc:4d:ba:e8:27:26:b5:2c:71:86:8e:e9:
         c1:da:87:c4:e9:21:e2:2f:b6:c8:da:40:70:13:d3:67:cd:85:
         ae:e4:3d:1b:73:e0:62:8f:9b:69:58:d0:64:a4:74:01:81:72:
         a8:eb:20:82:a1:c8:9d:04:f7:d3:31:f3:82:0c:50:57:45:c2:
         b6:8d:32:45:0c:c7:a4:2a:97:cf:fe:4a:c0:fd:17:43:99:0c:
         96:1a:7c:0d:f6:f4:bf:c0:f6:bb:4a:4d:68:8c:b5:d7:9f:ae:
         d5:77:14:82:e4:09:bf:9e:b0:f2:c9:05:8b:03:4d:ef:99:fb:
         a1:13:2d:68:12:f4:0c:9c:07:72:3b:29:91:4c:cc:3b:05:cc:
         17:19:bf:55:51:93:b9:b4:c7:fb:65:a5:41:9c:8f:95:f6:af:
         39:cc:45:a3:b7:24:38:33:39:cd:ac:67:57:33:a1:1a:de:71:
         5b:f0:45:48:69:15:3d:ef:f5:d1:6e:12:01:89:56:c0:3e:28:
         f0:42:a8:e8:5f:c1:07:aa:86:d3:e6:94:ea:97:e2:9b:a1:db:
         6e:76:59:a4:6a:8e:a5:c2:98:d2:0c:bf:07:92:09:0d:f6:29:
         09:cd:1e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----