Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.mft
File:                     7AFE4BCD689DFF0C180988329AD8922D4AACA40B.mft (raw, json)
Hash identifier:          QTu1Ti2N5zfNhNjfJDgzlZPG8EqotFsFFUre+CQqJ8A=
Subject key identifier:   6E:B7:52:F9:31:BD:5A:6E:F4:55:4A:B6:8D:A8:27:82:73:CB:0A:61
Authority key identifier: 7A:FE:4B:CD:68:9D:FF:0C:18:09:88:32:9A:D8:92:2D:4A:AC:A4:0B
Certificate issuer:       /CN=7AFE4BCD689DFF0C180988329AD8922D4AACA40B
Certificate serial:       5B9AB9F2F2A56C60DE29CE26022F5877BD3356B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.mft
Manifest number:          4D
Signing time:             Sun 14 Apr 2024 20:46:24 +0000
Manifest this update:     Sun 14 Apr 2024 20:41:24 +0000
Manifest next update:     Mon 15 Apr 2024 21:53:24 +0000
Files and hashes:         1: 323830343a313134303a3a2f33322d3336203d3e20323633363636.roa (hash: dneYtHXibbPRDfK+d/TArU4MIo2JZ9T/XJg0tXkejbM=)
                          2: 7AFE4BCD689DFF0C180988329AD8922D4AACA40B.crl (hash: AYxlMVuGEXo8SSp0wAhL2zXzcQMPa5hhaZ1Gwejtqn4=)
                          3: 3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa (hash: HKKqon5XiYnLLZbDEm0shgrEw/5gdwcesKixI3YndDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9a:b9:f2:f2:a5:6c:60:de:29:ce:26:02:2f:58:77:bd:33:56:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFE4BCD689DFF0C180988329AD8922D4AACA40B
        Validity
            Not Before: Apr 14 20:41:24 2024 GMT
            Not After : Apr 15 21:53:24 2024 GMT
        Subject: CN=6EB752F931BD5A6EF4554AB68DA8278273CB0A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:f5:4d:d0:6b:f7:8b:10:cf:18:ef:b9:48:
                    cd:26:72:86:20:9a:82:ce:1d:3f:22:04:51:5b:a6:
                    52:48:4b:90:7c:98:06:83:32:4e:37:7d:84:88:a5:
                    b7:18:2f:14:64:73:9b:79:fe:fb:df:de:15:80:71:
                    8c:6f:68:5f:1f:42:d0:5b:fa:8b:07:60:f4:43:95:
                    fc:ed:8c:6f:79:ac:55:6e:dc:82:4b:f4:6e:aa:61:
                    40:3c:a1:53:a0:bd:22:05:0f:21:d9:aa:49:0a:df:
                    61:ae:1c:69:e6:ea:ad:72:d6:ef:79:f8:c5:fc:da:
                    47:ed:5c:5e:64:fa:4d:52:10:b6:92:b4:93:fb:52:
                    fc:92:4a:53:4b:79:63:25:4b:38:40:3e:8e:7d:69:
                    ba:64:62:75:fa:0a:34:5b:e4:07:9d:bf:b7:5e:b0:
                    9c:ac:d8:70:15:e9:6f:1b:8b:fe:88:8f:45:cf:9f:
                    47:de:a7:1a:3e:5b:64:57:cf:50:01:c8:94:86:12:
                    28:66:17:5f:c7:23:9a:01:76:df:bf:ad:f9:5a:f8:
                    81:22:07:33:24:e7:27:8b:bd:7d:16:ff:93:46:55:
                    a5:d1:35:f6:d2:18:2d:6f:e9:b1:d0:cc:88:6a:32:
                    93:3c:c0:73:77:1c:6c:b1:34:87:ff:32:cc:c2:e2:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B7:52:F9:31:BD:5A:6E:F4:55:4A:B6:8D:A8:27:82:73:CB:0A:61
            X509v3 Authority Key Identifier:
                keyid:7A:FE:4B:CD:68:9D:FF:0C:18:09:88:32:9A:D8:92:2D:4A:AC:A4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/7AFE4BCD689DFF0C180988329AD8922D4AACA40B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:09:f9:2d:c7:9b:16:30:89:25:0f:3c:67:68:78:9f:10:f4:
         54:6e:4d:98:12:a7:6e:3e:5a:60:e9:cb:e9:50:34:73:aa:f4:
         b6:d0:ea:4b:d7:07:52:d3:be:d4:ce:4d:da:a9:27:37:d8:23:
         63:d9:d7:2a:03:78:bd:fd:23:50:1f:b5:13:ef:d6:55:7b:b2:
         d1:73:61:d9:e0:f6:1d:c9:26:20:70:01:9d:ae:9e:7d:25:5a:
         8c:72:73:e1:2c:e7:a0:dd:1f:98:3d:f2:c5:2b:4c:6d:c3:a5:
         ec:da:a7:fa:68:12:cc:c3:b2:53:25:e6:b2:7a:f5:3e:d8:34:
         88:1d:94:29:5a:27:9a:7b:4e:28:f0:b9:6d:20:80:f1:a5:86:
         00:b4:39:31:bd:46:c5:30:75:56:8c:0d:4d:94:ec:d2:0a:0f:
         66:b9:bc:31:97:d4:d4:bc:bb:b2:3b:f6:04:55:bd:8f:3d:4b:
         40:93:04:97:c5:29:f8:3b:a0:a9:3d:f2:c9:7a:f6:a7:33:25:
         d9:c9:13:ab:28:b2:7a:49:f4:17:a0:e4:d1:de:19:2c:11:00:
         9c:85:01:20:f4:75:26:bb:40:08:4f:53:c4:cc:87:eb:ae:ea:
         b4:29:7d:48:e3:00:05:30:79:40:cb:f7:c6:eb:dd:ff:d3:e6:
         24:11:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----