Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.mft
File:                     65BACEDBEA80E642364A002C1A1E5158217E7B5D.mft (raw, json)
Hash identifier:          HaaTYpKA6QvA9qwFuUamXKij6OzAt6mrOSktzpo+7ho=
Subject key identifier:   59:C0:B0:F0:F7:8E:03:65:B8:4F:0E:FD:81:53:D1:C1:DB:12:6E:F0
Authority key identifier: 65:BA:CE:DB:EA:80:E6:42:36:4A:00:2C:1A:1E:51:58:21:7E:7B:5D
Certificate issuer:       /CN=65BACEDBEA80E642364A002C1A1E5158217E7B5D
Certificate serial:       6C08F061D31821E21B342934B3D98A31222AF545
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.mft
Manifest number:          01AB
Signing time:             Thu 08 Feb 2024 22:02:09 +0000
Manifest this update:     Thu 08 Feb 2024 21:57:09 +0000
Manifest next update:     Sat 10 Feb 2024 00:21:09 +0000
Files and hashes:         1: 65BACEDBEA80E642364A002C1A1E5158217E7B5D.crl (hash: wPQStzchpZCvvdgL1vcG72t9vlUp8fA8NCe8SFlnnJw=)
                          2: 323830343a333139303a3a2f33322d3438203d3e203533303937.roa (hash: Z+eo4NYWwxH2HNJ2jlYyx/ZFoFrBMw3rj4Htz5o1dlM=)
                          3: 3138372e36332e3230382e302f32302d3234203d3e203533303937.roa (hash: 3yKxn2bJ+MhjDSScXwBRLtiwRb0S00zQSChq94lsgsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:08:f0:61:d3:18:21:e2:1b:34:29:34:b3:d9:8a:31:22:2a:f5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65BACEDBEA80E642364A002C1A1E5158217E7B5D
        Validity
            Not Before: Feb  8 21:57:09 2024 GMT
            Not After : Feb 10 00:21:09 2024 GMT
        Subject: CN=59C0B0F0F78E0365B84F0EFD8153D1C1DB126EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:02:c4:b5:52:0c:c5:91:9e:c8:d7:dd:d7:
                    04:5c:a9:be:e2:08:a9:fa:16:fd:16:72:5d:55:0b:
                    c3:17:5d:4e:b0:5f:63:c2:45:86:81:a9:fc:fd:c1:
                    c8:9b:d2:85:56:a7:b8:c5:5e:8f:b1:8b:37:19:c8:
                    db:28:09:58:a5:a4:fd:43:1b:08:02:d0:d4:3b:e1:
                    a6:51:3f:a2:f0:a4:13:61:6a:b3:05:87:2d:8e:56:
                    12:71:2c:9d:c1:33:d4:8b:e7:6c:8b:72:93:65:c1:
                    12:0d:f5:d7:cf:f0:aa:c8:40:75:a1:0a:0c:f3:8f:
                    b9:bb:bc:ef:9a:77:14:13:7e:ea:b8:3c:aa:15:78:
                    d8:2c:65:9a:33:b1:aa:59:36:07:90:8b:15:3e:75:
                    fd:94:e6:93:cc:50:14:32:f9:2c:ec:9e:e8:83:ed:
                    d4:ab:62:25:64:e5:0d:b8:c9:5d:9d:3e:cc:96:01:
                    25:b2:bf:07:df:72:f2:3a:65:0a:98:df:73:b7:b8:
                    18:08:7b:6f:83:3b:2e:ff:86:19:a7:de:a6:76:66:
                    88:98:c7:1f:f9:12:57:74:83:fa:b2:5c:8f:44:90:
                    e0:c2:19:e5:8b:43:89:79:d1:79:a7:77:8d:a6:d5:
                    47:9d:43:6a:2a:fd:3e:b1:cc:e2:00:09:d2:60:86:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:B0:F0:F7:8E:03:65:B8:4F:0E:FD:81:53:D1:C1:DB:12:6E:F0
            X509v3 Authority Key Identifier:
                keyid:65:BA:CE:DB:EA:80:E6:42:36:4A:00:2C:1A:1E:51:58:21:7E:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:6a:90:ba:59:9d:32:6b:42:2b:1d:e5:66:4d:0b:66:b2:
         0b:43:50:6c:1d:55:9c:c6:19:a4:22:8d:33:19:f9:eb:c8:04:
         44:74:bf:b9:fa:a1:05:de:38:3b:ec:a3:1d:cd:f9:cc:9b:19:
         3d:4c:50:80:33:b8:72:0b:7b:42:26:b4:2c:3c:4a:28:2d:b8:
         a5:84:ba:e7:cd:b1:3e:3f:d2:72:61:3b:94:ea:15:9a:01:33:
         ba:c1:d7:52:c3:78:2d:22:e9:c0:27:7b:64:33:cf:a0:c9:ac:
         4b:cb:71:50:d2:21:0f:36:a7:a1:0a:84:05:72:bd:f8:7e:09:
         3f:d1:20:b3:64:2f:ae:3d:8a:99:65:cf:aa:2f:3e:82:cb:49:
         d0:5a:4f:e6:47:2c:99:35:cc:1d:d7:f8:e5:fb:41:e9:22:ca:
         0b:18:e4:f7:f0:aa:86:73:bf:dc:d0:26:4e:28:a0:b2:00:88:
         3f:c0:9a:40:dd:3d:e5:a5:60:f5:28:e2:bd:88:fe:6d:fa:3f:
         73:ec:9a:f7:89:a1:e3:d0:bf:9d:4a:3f:fb:24:ce:3c:3b:5d:
         98:84:da:9d:6c:f0:46:4b:87:51:df:84:b6:64:df:6b:3e:2a:
         9d:3b:90:ab:23:f5:93:70:10:ed:24:46:fd:8e:17:90:58:1c:
         8e:6e:6e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----