Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.mft
File:                     7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.mft (raw, json)
Hash identifier:          zbNqlwYUpTzPAgVX225HdacQkronaIqUOhZKKzVlkuE=
Subject key identifier:   EC:32:2A:C7:D3:22:60:F6:06:66:A2:2E:C4:CA:F2:F2:4C:7D:64:EC
Authority key identifier: 7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1
Certificate issuer:       /CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
Certificate serial:       247248519B543F9BF3A751E914894AB3950EAEDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.mft
Manifest number:          01B9
Signing time:             Mon 15 Apr 2024 10:28:40 +0000
Manifest this update:     Mon 15 Apr 2024 10:23:40 +0000
Manifest next update:     Tue 16 Apr 2024 12:25:40 +0000
Files and hashes:         1: 3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa (hash: 1E8ke5wku9Ni5cAMxT3eaQLyCyxotG6TXDui8bv9wxg=)
                          2: 7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.crl (hash: pMmO/RjbiashCWijS+WGcLn+0AKLB7WP+syfl7nsrzI=)
                          3: 323830343a326435383a3a2f33322d3438203d3e20323635323736.roa (hash: G11AWafotoDdWZjagDHEyzVr8V40rZ4j5OkkYq4xjrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:72:48:51:9b:54:3f:9b:f3:a7:51:e9:14:89:4a:b3:95:0e:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1
        Validity
            Not Before: Apr 15 10:23:40 2024 GMT
            Not After : Apr 16 12:25:40 2024 GMT
        Subject: CN=EC322AC7D32260F60666A22EC4CAF2F24C7D64EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:1f:f6:47:82:98:e3:96:5f:0d:63:28:cc:
                    f2:e6:05:a0:fb:a3:0c:c7:54:7f:18:a8:24:2b:c2:
                    c7:a8:57:49:af:d0:ea:b8:3f:7f:8d:ab:b0:b7:08:
                    cd:9c:11:8a:4a:04:71:7c:6e:31:d9:59:26:6a:5f:
                    2d:19:ca:29:67:a9:7e:f8:11:af:d5:fb:33:4b:18:
                    1b:c9:1e:88:c1:13:bf:9b:f3:e1:14:d7:86:04:4a:
                    93:60:74:f2:64:d5:b2:6b:93:1d:ab:d2:f5:b2:bf:
                    5c:00:5d:c9:89:ef:59:9b:d5:2b:12:04:8d:25:76:
                    f3:8f:0d:c8:b4:7a:c1:02:33:bb:af:29:ec:6c:5e:
                    c1:5e:8c:7c:cd:df:d4:fd:76:17:6c:31:45:49:3d:
                    95:8b:16:f2:a7:b3:4b:4e:69:64:ff:a2:b9:b9:1b:
                    e8:3b:e8:a3:70:8e:17:59:71:44:53:d7:01:90:b3:
                    c0:f2:77:f4:64:6c:e6:c7:2e:4f:84:df:89:1d:fb:
                    d2:1c:60:cb:be:55:96:e4:b2:d6:20:61:e7:0d:01:
                    ab:37:5b:d3:41:cf:d0:4b:9e:14:74:7b:1c:7d:40:
                    ec:66:94:53:3d:e5:ea:7b:59:50:09:30:6f:ae:dc:
                    8d:c3:bb:df:28:2b:81:fc:08:71:7f:75:14:04:e3:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:32:2A:C7:D3:22:60:F6:06:66:A2:2E:C4:CA:F2:F2:4C:7D:64:EC
            X509v3 Authority Key Identifier:
                keyid:7A:6C:A5:F8:25:4E:06:00:BF:D3:A4:5A:EE:DE:35:C2:4A:71:CC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/1/7A6CA5F8254E0600BFD3A45AEEDE35C24A71CCD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:96:be:51:c1:0c:5f:75:25:bf:00:9c:c5:59:a1:1d:77:86:
         3b:b4:09:83:d6:61:57:c5:80:a6:c6:a9:70:97:50:f5:a9:c6:
         b5:55:11:0a:58:d5:35:23:11:11:06:e2:6d:44:a3:b9:b3:c8:
         5c:26:5e:b4:f1:be:ae:3a:c2:b2:c1:d6:ae:12:c6:03:ac:27:
         1b:53:c8:9c:81:21:25:8a:9f:4d:75:f9:b2:b6:07:6e:5d:dd:
         9f:4d:53:83:31:19:c7:aa:a1:de:d8:25:6e:45:90:08:ed:a2:
         31:c9:72:55:ff:72:0b:1c:33:de:b5:26:9a:50:54:7a:ff:4a:
         45:59:64:f0:09:ce:a8:02:ad:b4:97:58:93:b9:33:51:f2:0a:
         fa:2b:b5:b7:93:12:6f:c0:98:f1:06:24:5d:52:5e:b4:2e:0e:
         0c:07:83:6c:1f:5a:ec:a6:68:5d:ea:dd:e9:12:89:80:81:b1:
         d2:08:05:00:08:80:95:e9:34:85:90:33:1b:ee:f4:87:e4:b7:
         0a:63:c0:c3:c7:72:aa:26:c3:1a:f0:76:ef:5a:3c:e8:a6:05:
         c0:de:58:f6:96:2f:e2:92:2a:b3:55:2d:b3:08:8c:0b:72:e8:
         a7:6f:6f:66:60:16:54:db:6e:b6:73:f0:3a:9f:b2:b8:3e:30:
         22:5f:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----