Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.mft
File:                     F3698D7241A7709C231EAE882D9687C76C4BD16A.mft (raw, json)
Hash identifier:          DoowNsdtUq/2AAwEAYkpjIq7h3DIUXqVevgihrgkPeI=
Subject key identifier:   D6:41:C3:3A:4E:52:30:7F:A9:C5:38:3B:42:34:E7:E2:4F:8C:6E:BF
Authority key identifier: F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A
Certificate issuer:       /CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
Certificate serial:       2E0C42CD571DCA67BA10571D1A49EABF98BB7DFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.mft
Manifest number:          69
Signing time:             Thu 20 Jun 2024 13:24:15 +0000
Manifest this update:     Thu 20 Jun 2024 13:19:15 +0000
Manifest next update:     Fri 21 Jun 2024 14:34:15 +0000
Files and hashes:         1: 34352e342e3132342e302f32322d3332203d3e20323636303636.roa (hash: Pj03wzyP6q5PvDc2dIwdCEwFNYZk9uq4UA+0Ayb93+4=)
                          2: F3698D7241A7709C231EAE882D9687C76C4BD16A.crl (hash: 9FkJ43kjnzvrs+988Oct4SwUf1XKpBXplVNEjZLSzhA=)
                          3: 323830343a336130383a3a2f33322d313238203d3e20323636303636.roa (hash: NOoFPEsDzlq6vC7lf1QhAPo4eL4n511a60+fjiLw/5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0c:42:cd:57:1d:ca:67:ba:10:57:1d:1a:49:ea:bf:98:bb:7d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
        Validity
            Not Before: Jun 20 13:19:15 2024 GMT
            Not After : Jun 21 14:34:15 2024 GMT
        Subject: CN=D641C33A4E52307FA9C5383B4234E7E24F8C6EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:57:f2:41:e8:d4:fc:25:fa:e2:c4:38:33:3e:
                    a0:e8:ab:5a:2d:83:25:b3:4a:b0:66:1f:4d:db:01:
                    26:35:96:e6:6a:f6:c9:1c:5c:8e:b6:3f:9f:87:2b:
                    2d:d9:c5:12:77:43:0a:5b:f2:ae:c1:b3:9b:1c:ee:
                    1d:06:0e:1a:5d:17:2d:43:ac:b3:69:13:5e:91:a0:
                    b1:b7:af:eb:de:68:47:08:5d:e9:dc:44:52:47:e7:
                    f4:de:b5:61:20:84:30:79:f7:11:2f:ca:80:ab:50:
                    3b:a7:5e:55:77:7d:17:2d:e2:38:a3:f7:ab:31:8b:
                    9c:be:9c:6c:a9:2c:89:70:50:a1:14:83:9c:1f:46:
                    6f:ff:44:82:eb:9d:c2:f2:2c:b6:0c:c9:f8:d8:35:
                    3f:39:6f:17:bc:81:77:3c:cb:2c:79:2f:cb:77:ec:
                    38:9b:4d:a8:66:a7:84:10:a2:c0:34:15:18:86:fe:
                    72:57:97:6b:78:20:ca:19:a0:10:31:32:97:58:9c:
                    ca:22:d1:7c:51:64:7a:c1:21:be:7e:5d:e3:95:77:
                    c3:e2:8c:3f:1d:e1:dd:71:32:66:82:18:f1:c8:2f:
                    49:90:dc:f3:c8:ed:95:45:bf:81:ca:34:ef:2f:f7:
                    6b:31:fe:e0:a6:15:8f:5e:8f:d3:4c:b8:45:8d:48:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:C3:3A:4E:52:30:7F:A9:C5:38:3B:42:34:E7:E2:4F:8C:6E:BF
            X509v3 Authority Key Identifier:
                keyid:F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d8:d7:ff:75:e1:c7:43:85:8a:cf:d3:64:99:56:a8:99:2e:
         3d:8b:cb:aa:74:15:ac:7b:dc:22:36:b2:a1:78:a8:71:31:c8:
         c9:3c:f4:62:e2:62:8b:44:16:3d:ac:24:5a:de:8b:89:e8:d9:
         82:2b:47:aa:3b:f0:d3:00:86:cf:23:37:c0:8c:74:14:84:04:
         7e:e3:a8:74:91:24:96:69:63:ed:f7:cd:e8:50:56:fb:cb:3b:
         3f:e5:e9:f3:79:0e:f2:83:84:c6:63:a4:8e:f8:79:a2:0f:57:
         95:35:f6:25:54:4c:5a:97:9e:1f:aa:20:9f:78:5d:7b:27:f5:
         78:b0:cb:4b:24:d5:75:b6:b4:6c:80:95:26:f2:05:12:f7:a0:
         44:63:64:9f:45:80:2c:42:6f:89:6d:8d:b2:ff:76:b1:21:e0:
         9b:0b:b2:67:c4:a8:6f:2c:b2:62:21:38:cf:1a:80:82:9f:3e:
         18:5f:d9:71:b6:35:80:f4:d8:6a:42:53:8f:68:a4:4c:dd:9b:
         ba:6f:db:49:63:55:90:e0:84:fb:ce:18:ae:50:ae:4c:9a:ef:
         d9:a1:b3:06:a9:44:98:3e:87:c2:36:47:5b:40:d2:6c:96:bc:
         52:1b:06:08:b9:cb:98:19:11:d9:c6:4e:20:fa:d7:b7:55:a3:
         91:a3:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----