Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/9D791F907273BED543508E5D9D56A36372EEB006.mft
File:                     9D791F907273BED543508E5D9D56A36372EEB006.mft (raw, json)
Hash identifier:          cUTcYFsVwIPLn423aYUbAaXWRHiwPoGGTS3AMPhvgsw=
Subject key identifier:   7E:8B:3B:51:B0:A4:49:34:6F:AA:00:ED:24:E1:0A:32:A4:4D:FA:6B
Authority key identifier: 9D:79:1F:90:72:73:BE:D5:43:50:8E:5D:9D:56:A3:63:72:EE:B0:06
Certificate issuer:       /CN=9D791F907273BED543508E5D9D56A36372EEB006
Certificate serial:       60CF062BDE512E4D0646E95D27BCE914292DD760
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D791F907273BED543508E5D9D56A36372EEB006.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/9D791F907273BED543508E5D9D56A36372EEB006.mft
Manifest number:          40
Signing time:             Mon 15 Apr 2024 10:26:42 +0000
Manifest this update:     Mon 15 Apr 2024 10:21:42 +0000
Manifest next update:     Tue 16 Apr 2024 10:44:42 +0000
Files and hashes:         1: 34352e362e33362e302f32322d3234203d3e20323636313532.roa (hash: GHQsf7njooR47Mk9b3Mz1903MOcolGtt/EOBe/0sDz4=)
                          2: 9D791F907273BED543508E5D9D56A36372EEB006.crl (hash: SqCWO3g+qISj7ieJq0aJ4GdOtM9WhcSX16k77dgW6xw=)
                          3: 323830343a336237633a3a2f33322d3634203d3e20323636313532.roa (hash: bGiqegcRJO/uA8KwpbQSn5vzfKhOWiZJ2hJcJ5hSn1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cf:06:2b:de:51:2e:4d:06:46:e9:5d:27:bc:e9:14:29:2d:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D791F907273BED543508E5D9D56A36372EEB006
        Validity
            Not Before: Apr 15 10:21:42 2024 GMT
            Not After : Apr 16 10:44:42 2024 GMT
        Subject: CN=7E8B3B51B0A449346FAA00ED24E10A32A44DFA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:05:68:91:17:e4:90:dc:4b:90:29:37:68:
                    20:d7:db:a0:e3:ec:71:3e:bf:44:8c:18:18:3f:05:
                    a9:16:c0:1f:0c:35:3f:39:a7:bc:77:2f:ca:ad:92:
                    7b:41:90:14:b1:1b:d2:06:2c:4c:ed:bc:45:d1:cd:
                    09:c7:5d:be:23:d6:6c:54:9e:3c:03:04:cc:3e:3d:
                    b0:10:d5:8b:a5:fc:ef:e6:d2:96:0c:04:04:fb:c0:
                    6d:c5:58:6e:87:16:00:10:9f:87:36:99:55:e9:20:
                    70:fb:13:37:db:ff:b9:0f:1f:d7:9b:f9:5f:62:c5:
                    cc:c0:3c:7e:80:20:cb:62:fd:a4:16:a3:08:23:52:
                    a5:08:b5:41:84:19:81:65:b7:48:a2:ff:3a:55:83:
                    69:00:d9:48:b6:0d:b4:50:e4:63:1d:9f:20:7d:de:
                    83:12:13:f5:d2:ec:e8:00:aa:23:7b:b6:e7:65:f7:
                    ec:f8:36:60:56:c2:44:c1:54:04:f9:fb:ce:2c:2b:
                    da:f8:7e:64:6f:c6:08:c6:54:9e:f3:36:21:e5:dc:
                    23:6a:b9:f9:9f:6b:44:a6:e3:0b:f9:6c:f7:21:f5:
                    32:93:9e:8f:95:c5:4a:01:eb:f3:78:de:86:32:75:
                    19:fa:80:eb:fe:be:bf:76:de:a6:30:62:ad:63:5d:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8B:3B:51:B0:A4:49:34:6F:AA:00:ED:24:E1:0A:32:A4:4D:FA:6B
            X509v3 Authority Key Identifier:
                keyid:9D:79:1F:90:72:73:BE:D5:43:50:8E:5D:9D:56:A3:63:72:EE:B0:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/9D791F907273BED543508E5D9D56A36372EEB006.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D791F907273BED543508E5D9D56A36372EEB006.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/9D791F907273BED543508E5D9D56A36372EEB006.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:73:7f:8d:04:71:36:3b:67:d4:92:03:c4:67:b7:29:6d:
         b5:f9:bb:67:c5:b3:30:e4:8c:18:c4:46:51:10:b5:0e:79:42:
         69:b8:7c:42:f8:f4:d9:da:8d:62:cd:28:c9:b9:d9:61:b6:aa:
         62:13:3e:f3:47:da:07:2b:19:b4:44:02:b4:0c:37:32:63:2f:
         d9:39:cd:ab:27:fe:8e:46:a5:0c:98:d3:00:6d:d2:91:14:0b:
         6a:b5:ff:c5:62:f2:56:c1:dc:f1:3a:4c:c9:8b:f4:f7:4c:c2:
         2a:73:42:68:39:bc:c8:ee:a2:d9:c6:56:26:ec:72:9f:d3:72:
         c7:b1:1e:c0:3a:0a:d9:5d:9b:be:f8:9d:f8:0e:be:dd:3d:67:
         eb:23:6d:d6:c4:a2:bd:18:f1:ea:1d:9e:35:1d:ef:e2:37:6f:
         ce:21:c0:7a:dc:68:f3:7b:00:d8:fc:f2:f9:a8:b8:f6:ef:a9:
         e1:7d:66:b1:59:a7:87:b9:88:ac:df:81:b4:07:61:5a:91:72:
         e2:27:9f:1f:09:b2:76:bb:39:2c:5b:6c:67:fc:73:22:f8:b8:
         8c:db:8e:85:16:49:b5:5d:f5:c1:c6:0a:1b:11:57:de:c1:dd:
         87:35:23:91:e8:dd:5b:15:9f:ea:88:fc:f6:b6:c0:8b:27:40:
         5c:b3:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----