Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/7709F75654873E63970569AB6B345ACAA5F3367F.mft
File:                     7709F75654873E63970569AB6B345ACAA5F3367F.mft (raw, json)
Hash identifier:          qN4ERAV/BC8JtcomkqZRAxnfaxkvSDtQgnI+xZojJ0w=
Subject key identifier:   6C:12:A5:05:86:28:41:72:F8:1C:F1:18:68:6C:F1:CD:6E:07:22:D9
Authority key identifier: 77:09:F7:56:54:87:3E:63:97:05:69:AB:6B:34:5A:CA:A5:F3:36:7F
Certificate issuer:       /CN=7709F75654873E63970569AB6B345ACAA5F3367F
Certificate serial:       33E48C20CD8BD734A0F3C741EF09A97D3CFB9800
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7709F75654873E63970569AB6B345ACAA5F3367F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/7709F75654873E63970569AB6B345ACAA5F3367F.mft
Manifest number:          0F
Signing time:             Mon 15 Apr 2024 05:52:06 +0000
Manifest this update:     Mon 15 Apr 2024 05:47:06 +0000
Manifest next update:     Tue 16 Apr 2024 08:25:06 +0000
Files and hashes:         1: 323830343a353237303a3a2f33322d313238203d3e20323638353138.roa (hash: FvM9FIE2vQW/v3OCZ/gcJMGvFAfj6PLjQgxziX+jzi4=)
                          2: 7709F75654873E63970569AB6B345ACAA5F3367F.crl (hash: i0+YkJoBB1S5ADPmydQH78OnAmE4/67ozv2DQQJRPzs=)
                          3: 34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa (hash: DQw/EOOVXvs6MDho6BSDvX66TgWWkecD+VR3cWr+hY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e4:8c:20:cd:8b:d7:34:a0:f3:c7:41:ef:09:a9:7d:3c:fb:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7709F75654873E63970569AB6B345ACAA5F3367F
        Validity
            Not Before: Apr 15 05:47:06 2024 GMT
            Not After : Apr 16 08:25:06 2024 GMT
        Subject: CN=6C12A50586284172F81CF118686CF1CD6E0722D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:d9:43:52:8b:be:15:17:e6:70:56:55:98:
                    9d:b7:cf:80:a1:04:c7:d3:90:33:b1:2f:d1:3e:f3:
                    a3:8f:83:5f:5e:94:8e:d8:2f:c3:9e:f8:d9:1e:a6:
                    97:30:6b:92:02:ad:2e:56:ba:a9:20:10:3a:ef:89:
                    49:54:5d:d3:62:ba:93:6b:49:63:fa:3a:5b:ee:7d:
                    fb:d4:3c:53:1d:ba:aa:dc:cc:57:50:8c:0a:63:1b:
                    2c:4d:6b:07:b6:c6:05:2d:49:35:3f:ed:5f:22:10:
                    72:32:53:4a:7f:23:e4:e6:b7:88:e2:7d:05:09:00:
                    58:e5:f9:57:75:d3:21:6d:9c:1c:ee:1c:4c:01:9d:
                    38:97:7d:42:fa:d2:2f:19:7b:91:bc:05:16:ee:c3:
                    c0:5c:13:d6:a7:d6:36:42:d8:e1:f4:74:3c:bf:80:
                    dc:4d:13:0a:52:0a:8c:78:57:f6:6c:dc:14:e9:4d:
                    74:63:da:17:77:0f:53:3e:c7:da:33:6e:fe:af:57:
                    16:dc:c2:49:59:f2:b3:ad:13:c8:45:87:fb:a9:3a:
                    f1:ea:f1:34:ca:93:c0:6c:2f:ae:53:81:a6:2d:79:
                    35:55:4f:02:92:71:86:a4:f9:c5:4d:2f:b2:64:c0:
                    f0:ad:e3:b3:07:2e:b1:93:5b:4e:cd:dd:60:5a:97:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:12:A5:05:86:28:41:72:F8:1C:F1:18:68:6C:F1:CD:6E:07:22:D9
            X509v3 Authority Key Identifier:
                keyid:77:09:F7:56:54:87:3E:63:97:05:69:AB:6B:34:5A:CA:A5:F3:36:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/7709F75654873E63970569AB6B345ACAA5F3367F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7709F75654873E63970569AB6B345ACAA5F3367F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/7709F75654873E63970569AB6B345ACAA5F3367F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:25:0a:f4:af:e8:cd:b8:0d:f2:7f:26:51:5f:b3:98:b7:89:
         cf:d7:e5:c2:a1:d6:c5:21:87:11:e3:c2:a2:94:ff:0b:15:9c:
         e5:16:a1:73:8c:8b:94:36:5f:04:2a:de:91:68:2d:a5:24:f8:
         1d:44:89:7a:cd:65:74:7d:aa:bb:f6:cd:8c:a5:8d:c7:45:bc:
         86:e2:ae:db:c2:31:f0:87:9d:05:2d:dc:df:7a:53:33:a6:9b:
         ff:9f:d5:7d:82:47:91:bf:d7:19:6a:f3:ba:e0:21:66:45:7a:
         df:12:44:97:de:57:9c:94:f6:c3:62:97:01:d6:c2:27:53:57:
         33:4e:01:e3:d0:4c:13:3e:06:7e:97:e5:64:10:73:f9:40:99:
         b1:b6:9f:ec:f0:91:b0:51:d1:9a:4a:c6:82:35:0b:4e:f8:74:
         77:1f:87:c7:1d:60:d6:a6:d7:f4:2c:46:fa:b6:12:5d:d5:a6:
         82:e7:ba:da:e2:3a:21:a2:02:ca:23:3d:8b:9c:9e:7d:74:aa:
         db:cb:69:05:e7:23:b9:a5:20:51:01:2c:1f:89:fc:6a:54:7b:
         44:56:72:a6:92:ea:af:d3:e7:17:30:3c:b9:92:0b:23:92:9a:
         d1:32:d9:88:88:6d:99:f8:f2:12:26:37:4b:27:10:d9:38:67:
         ef:f5:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----