Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.mft
File:                     024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.mft (raw, json)
Hash identifier:          TicGHRPtg/aIBVBvK+skl1iorjEGkMbJ45J/eesxYaY=
Subject key identifier:   89:E0:3F:81:BF:4B:EB:69:0E:EB:27:63:6F:95:D9:BE:90:03:65:89
Authority key identifier: 02:4C:FB:4F:D2:0B:26:CD:8D:5F:B9:0C:F1:54:F6:1B:C5:6A:DD:C2
Certificate issuer:       /CN=024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2
Certificate serial:       214F07D8512CE3AB6C741500F6D2419D413D5B60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.mft
Manifest number:          07
Signing time:             Sun 27 Aug 2023 15:33:37 +0000
Manifest this update:     Sun 27 Aug 2023 15:28:37 +0000
Manifest next update:     Mon 28 Aug 2023 15:52:37 +0000
Files and hashes:         1: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: C95EVpK/SFkI8zfUIVdhJmnVLaqCuNrIEeplutDRgqo=)
                          2: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: P0uFCNYNOrnU/xK9eg/ZyT00PLdacKDjK+PuGsk4thQ=)
                          3: 024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.crl (hash: C2BdF8ZhNP3yfIcXM89CliIuffCM6tjkYFIX1qOFTk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4f:07:d8:51:2c:e3:ab:6c:74:15:00:f6:d2:41:9d:41:3d:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2
        Validity
            Not Before: Aug 27 15:28:37 2023 GMT
            Not After : Aug 28 15:52:37 2023 GMT
        Subject: CN=89E03F81BF4BEB690EEB27636F95D9BE90036589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:3e:f7:fd:72:77:3a:cd:d2:6f:81:5f:c7:
                    3c:39:c6:9e:c2:4f:fc:d9:e4:b6:96:29:5d:95:30:
                    b9:35:66:93:a2:ce:d1:ca:88:10:d1:c5:ad:22:16:
                    55:37:9e:79:a4:74:f5:fa:e7:e0:16:f9:11:5e:02:
                    8b:67:9d:d0:f9:98:b3:54:23:e1:e5:19:9b:a2:0e:
                    45:be:a0:66:4a:14:a3:ba:a3:fe:28:2f:81:53:dd:
                    33:28:a0:d7:cd:ef:16:af:90:d6:59:6a:0f:9f:de:
                    74:87:f2:4b:b0:88:75:f8:23:d8:59:ab:37:13:0c:
                    83:65:a1:bc:76:69:50:a6:20:2d:e8:f2:90:c3:87:
                    80:38:bb:ef:74:a9:e0:02:d5:82:dc:31:b9:a2:03:
                    5a:8e:9b:7d:2d:83:4b:c7:13:8e:f6:85:da:4c:7f:
                    1a:ec:8f:55:36:0e:f8:ca:49:ca:27:cb:0c:82:08:
                    14:54:8f:34:ff:a4:64:4c:d2:95:b9:a5:82:b3:99:
                    1c:d6:4d:cc:bf:44:32:fd:b2:e5:4f:50:9b:65:1c:
                    8d:7b:16:d6:2b:e0:d6:ee:2e:bb:e1:24:7a:f1:62:
                    21:f7:02:99:7a:42:fb:7f:be:be:e0:c5:a5:05:40:
                    69:17:87:35:1d:44:db:ad:50:33:76:a0:bd:26:10:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:3F:81:BF:4B:EB:69:0E:EB:27:63:6F:95:D9:BE:90:03:65:89
            X509v3 Authority Key Identifier:
                keyid:02:4C:FB:4F:D2:0B:26:CD:8D:5F:B9:0C:F1:54:F6:1B:C5:6A:DD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/024CFB4FD20B26CD8D5FB90CF154F61BC56ADDC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:17:79:31:a6:fd:20:6a:f1:ef:54:9b:d6:05:16:07:87:b1:
         dc:19:dd:a5:12:cf:da:a2:10:57:3a:5e:f7:33:8e:47:14:f4:
         11:a6:0a:18:60:46:9f:8f:06:d7:a6:13:ab:7c:c7:3a:67:e6:
         fb:40:b2:29:78:47:9e:b6:ae:e6:0f:56:52:cf:9e:8b:d9:a6:
         3a:71:53:ba:ff:2f:51:ed:74:22:ac:37:4c:bd:19:ba:e3:85:
         a9:5d:f8:03:60:80:70:3b:d8:32:18:9e:b2:ce:47:24:2c:f0:
         32:70:6b:eb:1f:b1:d6:6c:21:26:b1:41:9a:d0:d6:94:78:6a:
         4d:04:56:67:d9:ab:f0:18:95:bf:0e:aa:a2:8c:92:bb:b2:f4:
         52:72:08:c6:bc:17:ed:e6:a8:1f:f6:4b:95:68:e6:6b:2f:80:
         fd:79:b4:ac:4d:32:42:34:99:2b:d8:f9:11:6f:4e:e2:d9:1f:
         c4:58:fd:07:f3:94:f1:cb:7c:a2:1c:b2:b4:91:6e:45:61:d5:
         f1:e7:a8:4a:cf:22:df:b6:8b:38:36:9e:ef:6c:6d:5f:31:29:
         a2:f6:21:ce:84:df:cb:85:f5:c2:f2:6a:78:8a:cc:e5:be:eb:
         e3:1c:03:91:fe:4d:41:bb:fc:b4:6f:2f:31:5e:5c:d9:38:62:
         d3:cd:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----