Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.mft
File:                     83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.mft (raw, json)
Hash identifier:          TJ9axzLL0mlGmW27lNLr3S905hglHRD8l78OjdCOMzQ=
Subject key identifier:   49:99:2B:2A:6F:2A:0E:03:00:EC:B1:75:80:44:3A:F0:12:EE:2F:1D
Authority key identifier: 83:E4:FF:F9:0D:B5:0B:16:C0:76:DA:7A:21:CE:03:C9:FC:A2:6E:D9
Certificate issuer:       /CN=83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9
Certificate serial:       6CD719934AD19A4C7DEEA7AFBCECF54F970CDB8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.mft
Manifest number:          92
Signing time:             Mon 22 Jul 2024 06:57:35 +0000
Manifest this update:     Mon 22 Jul 2024 06:52:35 +0000
Manifest next update:     Tue 23 Jul 2024 10:01:35 +0000
Files and hashes:         1: 34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa (hash: ma8ZlTInnx96T3JGvdUyz9YkBj6h7HfbwMeBX1hG42Y=)
                          2: 323830343a353237303a3a2f33322d313238203d3e20323638353138.roa (hash: 8Q0sht0wWTqiRsbx9N5bN3P5MUv8WDiK3FZJKGlID14=)
                          3: 83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.crl (hash: A+XQsQOelPC088RY3H7mpTzTlTU989rWmDpzQCC8cyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d7:19:93:4a:d1:9a:4c:7d:ee:a7:af:bc:ec:f5:4f:97:0c:db:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9
        Validity
            Not Before: Jul 22 06:52:35 2024 GMT
            Not After : Jul 23 10:01:35 2024 GMT
        Subject: CN=49992B2A6F2A0E0300ECB17580443AF012EE2F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:58:16:3c:fe:e7:4e:ac:28:e7:8e:f7:16:
                    66:f3:b4:85:f7:c8:84:d9:28:4b:ed:4e:40:12:69:
                    74:74:4b:b7:53:6a:9d:77:fa:df:b9:cf:d9:e4:af:
                    31:d4:d2:4a:d9:9b:76:fe:1b:3e:d7:3d:4f:bf:35:
                    ef:5b:01:75:2c:45:a0:c5:d0:f0:a2:eb:28:94:69:
                    c3:99:6c:fa:a0:e0:08:ad:ab:48:6b:e1:5c:0c:ff:
                    ae:73:3d:5f:a3:1b:91:2f:75:af:20:85:fc:17:ea:
                    f5:56:60:b6:75:d7:30:58:86:19:79:5a:f3:c7:c8:
                    f5:88:b8:91:fc:51:82:c9:e5:20:91:3d:b7:9f:47:
                    09:75:6b:d1:ec:80:3a:9a:40:f9:ff:81:3e:ac:fe:
                    51:88:f5:11:67:68:98:04:69:23:c1:a7:35:10:cc:
                    2b:3b:a4:bf:af:2e:e5:95:c9:3e:86:5e:9d:22:fd:
                    5e:6f:3f:7b:d4:04:0f:32:a5:d3:2c:8a:c2:13:3b:
                    d1:ce:07:51:3e:74:a2:dc:7a:26:91:6f:bf:0f:21:
                    42:3b:23:84:3b:2a:1b:68:3d:2d:a5:29:32:99:bb:
                    d6:f6:b9:97:6f:65:89:63:e3:2f:94:6d:2f:9e:8d:
                    ca:ee:27:ad:08:31:89:d0:8d:2b:2f:ba:9b:3a:b6:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:2B:2A:6F:2A:0E:03:00:EC:B1:75:80:44:3A:F0:12:EE:2F:1D
            X509v3 Authority Key Identifier:
                keyid:83:E4:FF:F9:0D:B5:0B:16:C0:76:DA:7A:21:CE:03:C9:FC:A2:6E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/83E4FFF90DB50B16C076DA7A21CE03C9FCA26ED9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:94:72:99:ce:82:af:8d:be:4c:46:04:63:b1:44:9f:00:12:
         f1:3c:b6:52:b0:71:78:8b:8d:cc:e7:d5:99:18:17:ce:97:41:
         9f:f7:76:e3:ec:d7:6d:f8:75:94:21:e9:07:fb:0f:5d:fb:1d:
         40:81:c6:56:1b:0d:20:d7:a8:28:ae:34:dc:20:1a:82:85:e3:
         b5:f0:5d:31:d3:36:a8:c0:f9:a3:f1:db:58:7a:81:31:bf:36:
         c6:63:e0:a1:b7:65:ca:29:7b:fd:4f:e2:3b:00:6b:e2:1f:df:
         8d:66:7a:3a:7d:b2:cc:ba:33:8c:73:fa:1c:ac:91:bb:9b:e8:
         8b:4b:7c:c8:ee:51:15:0e:46:e6:94:93:8c:12:bc:ef:05:8a:
         e2:39:0c:e4:fc:d3:1d:c6:d6:f5:79:8a:57:51:70:68:cd:d7:
         1a:d5:2d:4c:aa:27:16:08:0c:7f:28:59:58:46:e8:70:ea:71:
         6d:64:f9:1a:7f:8f:86:53:fa:00:cf:a8:1d:cd:5a:b0:01:c9:
         9a:cf:07:19:8d:7d:54:14:07:cd:f2:bb:69:4d:0a:9f:92:ee:
         35:fe:ea:41:a1:dd:ff:1d:99:04:11:51:bd:5a:35:b8:3c:af:
         9e:27:08:56:93:12:b5:10:7d:0e:eb:d8:57:e6:34:7a:94:68:
         35:b3:2d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----