Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.mft
File:                     7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.mft (raw, json)
Hash identifier:          ikslI77DwjEQQCCnnUGR2OdxsPQIoTKmZgBV4EAWr5c=
Subject key identifier:   D7:FA:8B:10:21:72:E0:BA:AF:28:1A:D6:C1:71:BC:CF:66:8C:A0:92
Authority key identifier: 7E:5A:F5:6B:98:CF:67:E4:F5:D5:3F:AB:D5:EE:AE:C9:D1:CD:00:E0
Certificate issuer:       /CN=7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0
Certificate serial:       24BAEAEBBE2AEBDB27E8312595EC835989872979
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.mft
Manifest number:          12
Signing time:             Fri 23 Feb 2024 22:11:21 +0000
Manifest this update:     Fri 23 Feb 2024 22:06:21 +0000
Manifest next update:     Sun 25 Feb 2024 01:56:21 +0000
Files and hashes:         1: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: uOoC7zylDqoGozIvULgUWC8I5kd+SD67erHFCNEEQoo=)
                          2: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: CUKQrLutzgpIfCRKX5isGFbs1bLIu2GcqC+HCenBxiI=)
                          3: 7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.crl (hash: 6G6G2UOI6PzewpBYpHabtK6H8b+g2fZwo18DhkaYwpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:ea:eb:be:2a:eb:db:27:e8:31:25:95:ec:83:59:89:87:29:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0
        Validity
            Not Before: Feb 23 22:06:21 2024 GMT
            Not After : Feb 25 01:56:21 2024 GMT
        Subject: CN=D7FA8B102172E0BAAF281AD6C171BCCF668CA092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:de:0f:65:bc:3e:ab:da:7a:1c:b0:5c:5c:
                    e5:23:ca:22:63:d0:6f:65:4d:21:67:7a:a2:80:5b:
                    6f:e4:77:fa:5c:25:6b:68:4e:18:dd:a4:b7:38:a6:
                    27:35:ca:a7:01:48:f7:b8:a7:86:d0:ed:69:fe:3a:
                    f8:f3:f1:bc:a8:99:7b:26:99:a4:43:ce:2a:cc:83:
                    68:b7:39:0c:44:da:61:63:55:1b:90:3a:db:f7:cf:
                    10:81:41:37:d7:c2:09:e6:65:1c:11:fb:dd:42:82:
                    37:69:bc:ad:fe:4b:73:54:fb:74:0e:38:75:a0:65:
                    8e:2c:00:95:74:67:6c:34:3b:4f:32:d5:8d:e8:75:
                    11:0a:f9:57:24:0f:73:6f:63:d9:c2:5b:e2:9b:51:
                    f8:b8:80:28:f0:17:5f:87:02:33:d4:a3:fd:87:27:
                    61:85:bf:1b:b0:d4:c9:fb:9b:d8:b5:23:27:ed:cc:
                    cf:b7:b4:77:a4:c0:6f:6e:e5:04:5d:1a:38:15:d7:
                    98:3e:19:df:ea:88:03:2d:8f:dc:cd:f3:32:f0:7b:
                    2f:8a:2e:b1:e1:01:e2:a5:8d:70:66:80:59:81:fe:
                    13:76:30:09:03:9c:35:66:be:80:b5:a3:fe:ca:07:
                    71:b9:5e:47:b0:7d:58:d2:85:1e:6e:cc:fe:98:d8:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:8B:10:21:72:E0:BA:AF:28:1A:D6:C1:71:BC:CF:66:8C:A0:92
            X509v3 Authority Key Identifier:
                keyid:7E:5A:F5:6B:98:CF:67:E4:F5:D5:3F:AB:D5:EE:AE:C9:D1:CD:00:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/7E5AF56B98CF67E4F5D53FABD5EEAEC9D1CD00E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:2a:b4:18:7c:a1:fa:f7:0a:68:1a:d7:44:c8:62:25:ef:
         b9:28:d5:af:e0:21:8f:bd:58:47:63:25:e6:d0:87:81:f1:f1:
         12:63:a7:f0:ea:70:61:73:47:3f:11:25:5b:89:5e:5a:5b:fb:
         e1:f4:0f:eb:3f:2e:e1:73:25:7f:39:e8:1c:5d:d5:14:9a:ff:
         e8:65:7a:65:c0:a9:c4:a2:53:eb:f6:1c:a6:6f:24:71:b8:12:
         00:21:30:6b:db:08:a5:ff:e9:79:d5:5e:bd:2a:f6:f6:c4:38:
         c1:fa:96:58:99:68:92:12:d0:d5:50:85:fc:6f:b9:c1:29:7c:
         82:44:a7:61:d7:13:16:47:87:f8:4e:80:b2:1b:96:a2:22:70:
         7a:d1:24:3c:1d:bc:89:cc:f2:9f:6a:d8:83:50:0d:d4:de:60:
         aa:d1:d8:d6:40:50:c0:c2:f5:e2:3f:1b:8f:0d:78:be:3b:97:
         79:4d:73:f8:1d:70:ce:5a:33:12:50:f9:a7:51:f4:38:b5:e6:
         3f:79:33:7b:40:77:f3:d8:6e:84:1f:7b:be:45:5c:93:ea:d3:
         45:97:fe:1d:8c:17:b6:58:e9:e2:62:e7:7f:8d:29:a3:7b:36:
         63:fd:80:ac:8e:dd:3f:51:31:66:e1:3e:e0:dd:78:9f:c2:5d:
         64:6b:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----