Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/07509926337622AA0F6F82B9E0BE466B251CC7DE.mft
File:                     07509926337622AA0F6F82B9E0BE466B251CC7DE.mft (raw, json)
Hash identifier:          B3LElbZw3/qQcC2fT31X2M5gZaJ8gHXjwViswda6W50=
Subject key identifier:   51:D7:38:D2:83:5B:8E:1A:F8:EA:29:3B:D5:4A:09:21:FA:12:F7:B2
Authority key identifier: 07:50:99:26:33:76:22:AA:0F:6F:82:B9:E0:BE:46:6B:25:1C:C7:DE
Certificate issuer:       /CN=07509926337622AA0F6F82B9E0BE466B251CC7DE
Certificate serial:       27C99AF0D4F52D8913185413B1A6A07F1097158B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07509926337622AA0F6F82B9E0BE466B251CC7DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/07509926337622AA0F6F82B9E0BE466B251CC7DE.mft
Manifest number:          0161
Signing time:             Tue 02 Jan 2024 08:20:05 +0000
Manifest this update:     Tue 02 Jan 2024 08:15:05 +0000
Manifest next update:     Wed 03 Jan 2024 09:51:05 +0000
Files and hashes:         1: 323830343a313036383a3a2f33322d3438203d3e20323633363334.roa (hash: wF09C6jp/CMZOTrrs2a3VQRVmgJrJy+YakCi3vASfJY=)
                          2: 3137302e38312e34382e302f32322d3234203d3e20323633363334.roa (hash: YkM+QXxhuR5c1FIIP+V7MNkvxzh6zlH78FeURHNXnWA=)
                          3: 07509926337622AA0F6F82B9E0BE466B251CC7DE.crl (hash: o5IiAci2PiJM5BtwHjM1453brzKzcN9Ob5lktO/1Xl4=)
                          4: 3137392e3132352e3131322e302f32312d3234203d3e20323633363334.roa (hash: Sr4moDsZBgshYZsFEJo0b9ujTXoNEXAO2fWThgfbupg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c9:9a:f0:d4:f5:2d:89:13:18:54:13:b1:a6:a0:7f:10:97:15:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07509926337622AA0F6F82B9E0BE466B251CC7DE
        Validity
            Not Before: Jan  2 08:15:05 2024 GMT
            Not After : Jan  3 09:51:05 2024 GMT
        Subject: CN=51D738D2835B8E1AF8EA293BD54A0921FA12F7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:9b:cf:e5:83:e2:66:3c:b1:23:cd:16:67:
                    ac:b4:53:06:ae:ad:3f:fb:fc:33:09:33:de:02:b2:
                    6f:94:ef:9f:51:15:be:57:75:eb:57:8d:e9:b6:a7:
                    31:dc:eb:df:4b:84:82:09:2f:89:36:e9:65:70:da:
                    30:ab:58:dc:84:08:7e:4c:c2:0e:42:54:68:55:14:
                    25:4a:d3:d5:ec:0a:85:70:35:23:0f:fc:20:58:3d:
                    ef:2d:3a:15:f5:b9:11:9b:8d:03:35:92:15:23:97:
                    73:75:bb:36:bf:aa:22:4f:74:96:b0:1b:3f:73:14:
                    d6:02:a8:5c:22:a6:3e:d8:3c:e4:a4:b2:a4:eb:4d:
                    5e:7c:78:f0:50:61:f7:47:1d:73:2f:63:cb:97:eb:
                    c7:64:02:e4:84:ed:49:62:aa:5b:2b:82:4a:93:f6:
                    ec:5c:07:8d:2c:81:1a:96:2f:1b:aa:96:b6:67:d1:
                    f4:b5:b6:b0:72:5d:87:b0:4a:da:bb:f9:3e:86:60:
                    8f:fd:3b:18:0a:be:12:f2:0c:b9:9f:57:ed:96:a7:
                    11:81:f0:a9:2f:8f:03:53:d1:97:53:72:a8:1c:9c:
                    56:6f:f6:46:c3:38:8f:f6:7a:f7:66:08:a5:e0:3d:
                    dc:90:62:13:c9:9f:e9:97:24:8c:e2:0a:b1:5b:8b:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:38:D2:83:5B:8E:1A:F8:EA:29:3B:D5:4A:09:21:FA:12:F7:B2
            X509v3 Authority Key Identifier:
                keyid:07:50:99:26:33:76:22:AA:0F:6F:82:B9:E0:BE:46:6B:25:1C:C7:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/07509926337622AA0F6F82B9E0BE466B251CC7DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07509926337622AA0F6F82B9E0BE466B251CC7DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/07509926337622AA0F6F82B9E0BE466B251CC7DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:24:8e:4a:6e:41:41:8b:4a:85:2e:2d:93:64:cc:eb:76:
         62:49:35:6f:eb:41:c5:15:f7:12:ab:46:20:64:be:6c:a1:01:
         f0:7c:e8:a2:90:cf:1f:bf:f2:21:4f:65:49:05:95:b8:06:79:
         5c:68:21:92:a0:d0:b1:5a:22:aa:86:7a:59:65:5e:fc:cc:8d:
         37:43:bd:b4:34:ef:5e:1a:39:09:c4:60:c6:bd:7e:d0:b3:48:
         5c:36:d3:3d:ef:6b:ad:50:a3:b3:8a:8f:5b:97:3e:17:27:dd:
         4b:77:ba:9c:b0:e3:29:37:01:7d:87:95:f1:87:db:21:9d:be:
         d6:7a:e1:e3:5e:b1:b8:f7:b0:92:d6:dc:de:9c:44:05:d1:78:
         05:18:a6:27:c5:76:f6:14:5c:5f:a0:a6:68:9d:21:4b:59:7c:
         64:75:b4:8e:6a:b6:54:a2:49:50:8c:ac:b8:4b:55:92:c4:fe:
         8b:5b:31:1a:cf:fe:b7:09:69:ef:2f:65:34:d0:80:47:16:48:
         c2:67:9a:9e:47:48:03:09:75:37:09:15:27:89:03:0a:6a:d6:
         01:2d:e1:76:73:f0:ed:8e:af:b2:ca:5f:c9:bc:ac:b6:6f:4b:
         82:e4:26:5f:21:f0:86:c8:30:f5:a5:7e:b8:d7:31:87:19:ee:
         dc:cd:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----