Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.mft
File:                     7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.mft (raw, json)
Hash identifier:          MgbT9qi5+KBEseQ6sqWhRZUyP/ZMAgHAzPs664skRsk=
Subject key identifier:   24:09:5B:54:04:B0:98:82:2A:1F:E4:AD:D1:7F:22:AC:FE:7B:E4:B9
Authority key identifier: 7E:56:0D:CC:8A:6B:6E:BD:E9:8B:11:62:59:1E:41:5D:81:74:DE:A2
Certificate issuer:       /CN=7E560DCC8A6B6EBDE98B1162591E415D8174DEA2
Certificate serial:       5F30F203E84624F404D1F4AB5B36A1BBF67BE3E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.mft
Manifest number:          01F7
Signing time:             Mon 15 Apr 2024 10:10:29 +0000
Manifest this update:     Mon 15 Apr 2024 10:05:29 +0000
Manifest next update:     Tue 16 Apr 2024 12:00:29 +0000
Files and hashes:         1: 7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.crl (hash: vGIkTtT6Igy9ELqCHbGvUvHNVSpW90QTmQWaFqrbgUo=)
                          2: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (hash: cgyzTWCRTf2ALMKqlgepE11Q4V9HwyuGHUjfnphc9Is=)
                          3: 323830343a353461383a3a2f33322d3336203d3e20323638363633.roa (hash: 7p7Icm4zK+47jOsXLZYMdywlxAZgI47SCDENfe+1q4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:30:f2:03:e8:46:24:f4:04:d1:f4:ab:5b:36:a1:bb:f6:7b:e3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E560DCC8A6B6EBDE98B1162591E415D8174DEA2
        Validity
            Not Before: Apr 15 10:05:29 2024 GMT
            Not After : Apr 16 12:00:29 2024 GMT
        Subject: CN=24095B5404B098822A1FE4ADD17F22ACFE7BE4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:fc:f6:f6:f0:4e:1f:ed:0e:e7:72:ad:5f:
                    02:6b:dc:24:5a:f5:7f:0a:3b:32:3a:cd:d2:db:b1:
                    fd:34:90:00:6b:f7:e0:83:8f:17:45:0b:11:a3:eb:
                    22:cc:17:37:f0:b9:22:3f:f1:68:c2:25:d3:32:ca:
                    10:aa:78:ab:d8:da:32:3a:7b:ad:97:8c:28:23:a2:
                    99:48:b9:3b:28:e2:09:d9:5d:54:75:22:1b:48:bd:
                    c0:18:d1:c5:e4:8f:66:c6:02:6b:c5:16:48:f8:b0:
                    45:e1:5f:30:25:55:37:81:f2:c3:8f:da:8d:c3:bc:
                    e1:b5:30:a0:43:b1:6c:81:fe:bf:ca:23:d2:77:02:
                    83:f0:47:05:0a:44:ac:44:a9:c4:ce:96:30:30:b3:
                    4c:b7:a9:d9:0d:93:5e:d0:a0:99:c0:9d:f4:04:b1:
                    98:79:f6:70:c3:30:1a:46:d7:5f:64:e2:fc:bf:25:
                    e5:24:b8:b0:ac:35:33:fd:52:1a:04:42:cf:1c:55:
                    10:aa:cf:a4:97:01:4a:c0:65:01:f2:40:8e:75:ca:
                    18:e0:3f:9b:6a:c8:42:a3:93:1b:5d:8c:bf:78:ac:
                    48:3f:2e:a7:85:48:df:0d:fd:b2:c1:ea:88:7a:e7:
                    98:9f:b0:de:94:a7:e7:dd:80:0d:c2:ad:3c:73:36:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:09:5B:54:04:B0:98:82:2A:1F:E4:AD:D1:7F:22:AC:FE:7B:E4:B9
            X509v3 Authority Key Identifier:
                keyid:7E:56:0D:CC:8A:6B:6E:BD:E9:8B:11:62:59:1E:41:5D:81:74:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:81:b0:cd:9b:72:e6:b4:69:64:ab:8f:3e:3d:f2:aa:29:1f:
         1a:1f:c6:40:d4:61:93:cc:c6:c1:7a:43:74:b3:0d:cf:17:9f:
         43:b1:ee:99:3a:fb:58:ba:e0:d5:d1:2d:81:67:b7:5c:58:af:
         53:99:d4:6b:4f:03:8d:be:47:25:7d:46:37:f9:cc:5f:39:b4:
         d2:b6:6d:9b:e5:d7:70:85:b5:90:7d:4a:1a:cc:55:33:95:96:
         75:1a:c6:fb:76:19:eb:50:3f:92:b0:f3:14:a5:6f:86:a2:3d:
         b0:e1:3f:cc:06:ed:96:60:57:c0:7d:63:b5:ce:66:ca:6c:93:
         f0:a4:3d:07:26:b0:d7:cb:30:e6:2c:73:80:26:bd:6b:e5:38:
         01:7b:09:0f:41:c9:f7:7e:f4:c2:75:5c:5b:e4:5b:31:35:84:
         f8:3d:3e:3d:b4:99:d8:04:fd:66:d9:56:58:04:2d:ec:e2:27:
         e1:4d:15:55:c4:2e:68:77:15:68:4c:af:52:8f:ec:5a:bb:c0:
         82:aa:04:a3:85:fb:77:77:fd:dc:0d:15:ef:13:94:28:0e:e3:
         fd:5a:c7:56:b6:9d:43:ec:99:a4:34:b1:eb:55:c3:cf:c9:8e:
         aa:ab:e2:87:da:ed:a5:99:f5:05:a4:7c:05:13:5b:48:73:b3:
         89:b0:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----