Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/6486FC09ADB0FE66171EC484C065334E69A44E44.mft
File:                     6486FC09ADB0FE66171EC484C065334E69A44E44.mft (raw, json)
Hash identifier:          PWUOy5gWYl3zCVOR2BHs5XFfl417MMYMKuxS1H95Zf0=
Subject key identifier:   B6:65:FB:F2:1E:8E:E9:97:A7:3C:C2:EF:B9:DC:19:F5:26:72:EC:E4
Authority key identifier: 64:86:FC:09:AD:B0:FE:66:17:1E:C4:84:C0:65:33:4E:69:A4:4E:44
Certificate issuer:       /CN=6486FC09ADB0FE66171EC484C065334E69A44E44
Certificate serial:       21D26DE51DE30DE3EDF3805FD566A9627B293C1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6486FC09ADB0FE66171EC484C065334E69A44E44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/6486FC09ADB0FE66171EC484C065334E69A44E44.mft
Manifest number:          02
Signing time:             Mon 15 Apr 2024 01:36:58 +0000
Manifest this update:     Mon 15 Apr 2024 01:31:58 +0000
Manifest next update:     Tue 16 Apr 2024 04:28:58 +0000
Files and hashes:         1: 3137302e302e3130302e302f32322d3233203d3e20323634393637.roa (hash: YjYS0GZeFpfU94BatPavu91WuHIGuY5KCbH6CNroReA=)
                          2: 323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (hash: wmP7QzmBHVWQQBJjZWKP8XKpwH1HZsSl+RE+9XMuIvQ=)
                          3: 6486FC09ADB0FE66171EC484C065334E69A44E44.crl (hash: AOmEcdj/V1tTmws8WIQYmiqgdDHbSoVendaMNWZf3AI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d2:6d:e5:1d:e3:0d:e3:ed:f3:80:5f:d5:66:a9:62:7b:29:3c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6486FC09ADB0FE66171EC484C065334E69A44E44
        Validity
            Not Before: Apr 15 01:31:58 2024 GMT
            Not After : Apr 16 04:28:58 2024 GMT
        Subject: CN=B665FBF21E8EE997A73CC2EFB9DC19F52672ECE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:74:18:f1:54:4c:98:65:b2:ca:90:4b:27:
                    56:18:7a:16:c7:ef:80:70:e0:9b:64:a4:3a:42:08:
                    2d:3e:76:e9:3c:02:d1:08:8f:49:b3:fa:e6:aa:c9:
                    5a:42:6e:f8:62:4d:d9:e0:b3:58:7b:4a:39:e8:03:
                    37:52:a5:41:a6:28:6d:39:9f:76:f1:20:87:13:5c:
                    f0:f3:79:0c:9f:02:80:2a:77:83:f9:a2:d2:05:66:
                    f4:14:c3:57:4e:3d:b3:7f:a1:41:4a:d8:ce:e2:be:
                    28:c9:77:cd:88:0a:39:d1:f0:bf:05:dd:bb:24:fa:
                    fd:74:f8:32:77:7c:a5:44:8d:ac:dc:0c:0e:33:67:
                    90:e6:98:3c:4f:bb:32:ea:78:7b:02:19:e5:60:c1:
                    40:3e:26:87:46:ce:3e:57:52:61:a1:4c:56:3b:c6:
                    d2:b0:68:9d:dd:12:67:63:71:f4:2a:b3:3e:b9:dd:
                    39:e6:18:f2:63:07:31:27:1f:7c:74:54:41:30:7e:
                    be:0f:5a:07:ba:4d:d7:fa:8f:b5:84:74:bf:1a:02:
                    90:a6:0e:04:c8:98:dc:ad:c3:08:fa:8c:db:c2:71:
                    01:d1:f1:d3:06:51:3a:32:6c:f1:f2:c3:04:0f:ca:
                    3b:93:32:fd:a7:0a:97:36:26:48:88:28:2c:31:6b:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:65:FB:F2:1E:8E:E9:97:A7:3C:C2:EF:B9:DC:19:F5:26:72:EC:E4
            X509v3 Authority Key Identifier:
                keyid:64:86:FC:09:AD:B0:FE:66:17:1E:C4:84:C0:65:33:4E:69:A4:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/6486FC09ADB0FE66171EC484C065334E69A44E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6486FC09ADB0FE66171EC484C065334E69A44E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/1/6486FC09ADB0FE66171EC484C065334E69A44E44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:12:e0:00:81:5a:2b:97:c3:ad:93:d1:e6:03:2a:3f:73:77:
         66:77:86:ff:77:91:16:e8:b6:5a:34:1a:0c:8c:92:8b:e8:c5:
         49:26:8f:c2:bc:34:a5:05:ed:eb:58:30:43:0f:a0:62:d2:b1:
         af:2f:83:4b:2e:3a:2b:b5:51:3c:24:a2:0b:23:f9:32:43:c4:
         42:59:e6:5a:cd:d0:96:0c:45:a2:35:71:f3:4f:01:ee:f1:14:
         d5:5c:51:d2:7c:f5:99:79:0a:69:b4:a5:42:26:36:3c:1e:19:
         36:14:d8:0c:3b:d7:e7:76:60:33:b4:07:be:c1:50:af:a5:e4:
         e7:a2:a0:f8:5a:fe:93:41:6e:a6:18:fb:22:48:59:d7:d7:86:
         b9:b4:ab:6b:95:e0:25:0a:4e:fb:b8:7d:9e:b1:91:2c:db:ac:
         57:9d:23:c9:18:3f:39:4f:79:f5:6b:01:ad:c1:dd:1b:65:a4:
         20:b4:ba:8d:8a:16:7f:33:0b:8f:cd:bc:3e:7c:78:3a:95:32:
         21:73:95:ae:3c:e8:11:db:c6:10:97:ca:48:4f:14:53:a1:1d:
         ad:af:85:5c:d8:24:a0:30:3a:c7:f0:f7:ae:6f:c2:c6:ad:e9:
         ba:ec:3f:47:d1:20:e5:0d:e2:27:3d:24:a5:5d:f7:ed:51:53:
         3d:89:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----