Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.mft
File:                     66E18DB07F3005DF457EA73CEE84BE082FC266E1.mft (raw, json)
Hash identifier:          fptMermHu28MX6yLDJAObXROl3O32rGqB3fi2XqMXxY=
Subject key identifier:   CA:ED:12:66:4C:8B:E4:D3:F2:E0:79:A5:07:87:CA:1E:52:59:1F:D1
Authority key identifier: 66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1
Certificate issuer:       /CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
Certificate serial:       481FF3C6E2619CE5427128F948CAB45CE6EB44A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.mft
Manifest number:          01C1
Signing time:             Sun 14 Apr 2024 21:53:55 +0000
Manifest this update:     Sun 14 Apr 2024 21:48:55 +0000
Manifest next update:     Mon 15 Apr 2024 22:53:55 +0000
Files and hashes:         1: 3137302e38332e32342e302f32322d3234203d3e20323636343531.roa (hash: QIq+6bome6szNv9GM6j9FZPjQZOGJ5i4GAj3siR3kks=)
                          2: 66E18DB07F3005DF457EA73CEE84BE082FC266E1.crl (hash: 8b3LKtUk+eMLJscCfWjody/08nkycDKtvJalDUepZ9o=)
                          3: 323830343a333830383a3a2f33322d3430203d3e20323636343531.roa (hash: a525p+5mzAC120jZ8fYUhWGLy2fcw+rLq+JCUn6cPP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1f:f3:c6:e2:61:9c:e5:42:71:28:f9:48:ca:b4:5c:e6:eb:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E18DB07F3005DF457EA73CEE84BE082FC266E1
        Validity
            Not Before: Apr 14 21:48:55 2024 GMT
            Not After : Apr 15 22:53:55 2024 GMT
        Subject: CN=CAED12664C8BE4D3F2E079A50787CA1E52591FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:24:6f:85:78:63:4a:0f:39:e4:89:84:13:43:
                    5b:d6:c4:91:31:46:3f:5d:dd:60:cd:de:79:4c:28:
                    55:f3:7e:57:b7:84:f0:d7:aa:fb:db:34:fd:4f:35:
                    ca:b3:7c:04:97:69:5f:c1:d7:e8:4f:dd:84:c1:81:
                    da:d6:2b:60:d1:20:fc:e5:e1:0a:9e:ed:95:41:6c:
                    01:d1:85:79:9b:5b:d1:57:f2:44:dc:2e:ae:a7:9e:
                    f3:83:5d:16:50:ff:2d:ff:77:95:bf:67:e4:c9:c2:
                    97:c0:14:d1:0f:30:22:58:47:5d:55:ea:79:5a:81:
                    34:38:dd:16:cd:66:5a:76:4c:2b:df:25:80:55:bd:
                    06:b7:1a:11:31:d7:69:36:73:11:9e:c8:d9:98:b0:
                    31:4f:52:b6:ec:2b:14:ea:e8:7f:c3:36:5f:cc:b1:
                    57:d7:a8:46:78:1b:3c:a8:c9:0f:b4:90:ba:28:09:
                    e5:e4:53:33:1b:13:5f:96:54:0c:71:25:46:c5:63:
                    a4:d3:94:64:1f:d5:39:5d:fa:63:60:3f:23:43:65:
                    26:fa:fa:14:fe:cb:de:22:58:af:b9:e1:c5:5d:9b:
                    b2:55:d2:50:17:27:ee:f9:62:36:8d:18:85:a6:0a:
                    a9:9b:5e:f7:09:4e:6b:14:74:00:fc:d1:4b:30:0d:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:ED:12:66:4C:8B:E4:D3:F2:E0:79:A5:07:87:CA:1E:52:59:1F:D1
            X509v3 Authority Key Identifier:
                keyid:66:E1:8D:B0:7F:30:05:DF:45:7E:A7:3C:EE:84:BE:08:2F:C2:66:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/0/66E18DB07F3005DF457EA73CEE84BE082FC266E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:85:5b:ba:a8:b4:14:3d:8e:6f:72:bc:46:a7:71:fe:be:f7:
         69:1c:d7:fc:92:05:13:c6:3f:8e:ed:be:45:aa:32:2e:eb:8e:
         a8:3c:37:45:32:4a:f8:c2:de:0c:33:bb:f4:6b:e0:f1:62:cd:
         62:5d:e5:3f:2d:5d:e3:25:37:a7:50:44:4e:43:17:21:fd:a6:
         e4:84:95:f0:be:e4:b1:cb:69:94:44:7a:15:bf:81:72:4d:6a:
         64:d5:20:d3:10:9f:9e:0c:ed:04:f5:2b:59:7c:21:3f:d0:74:
         dd:e1:4b:df:aa:76:7b:4d:21:24:27:fd:e5:f2:68:f5:2b:f8:
         35:bf:4f:be:df:8f:2c:48:5a:9c:a5:77:42:6c:0f:f8:d4:be:
         01:93:ee:65:70:53:fe:c7:93:12:e0:ee:cf:66:59:e8:d6:43:
         ff:b2:03:cd:cb:9b:a2:69:b7:30:3d:0e:c9:98:f3:a2:45:f2:
         29:d3:00:63:88:f7:e1:b7:b5:f8:fc:81:83:b4:af:d2:c3:6f:
         a7:57:55:63:da:0a:b0:51:94:f5:81:ea:1c:40:c8:2f:46:d3:
         7a:02:c5:20:ea:36:08:6c:c0:f8:de:a0:15:a0:97:51:37:ae:
         1a:4e:55:99:48:35:e5:6a:3f:9d:e6:83:31:6a:15:b1:a9:36:
         be:65:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----