Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft
File:                     77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft (raw, json)
Hash identifier:          sugAC5uf23mFsMb+5zVS8sELtg9aYxiqSlx3x+pRDOo=
Subject key identifier:   C7:5E:80:6C:1E:1E:E3:45:B3:2D:D1:B3:5F:58:1F:8B:84:F7:C6:CF
Authority key identifier: 77:AF:F1:CE:48:93:AC:78:7B:68:CB:24:A4:DB:41:64:33:7C:A8:E0
Certificate issuer:       /CN=77AFF1CE4893AC787B68CB24A4DB4164337CA8E0
Certificate serial:       0394A2ABB6EB1542289D4FE41C7D3363BB5A5DF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft
Manifest number:          47
Signing time:             Wed 17 Jan 2024 18:25:01 +0000
Manifest this update:     Wed 17 Jan 2024 18:20:01 +0000
Manifest next update:     Thu 18 Jan 2024 19:47:01 +0000
Files and hashes:         1: 3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa (hash: U2/igWvdbXsGxE3bQBboDwuQksreRyPz7cqPof3M5js=)
                          2: 77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.crl (hash: bAQdnnjQfwb9/1hEjA4p0acH/pNWkDfB9bhx3IG7rLo=)
                          3: 323830343a366537633a3a2f33322d3438203d3e20323730363030.roa (hash: UhzuydHcRoSE+tibDfeoOc0iJkP9rhlZQALCNNPSFGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:94:a2:ab:b6:eb:15:42:28:9d:4f:e4:1c:7d:33:63:bb:5a:5d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77AFF1CE4893AC787B68CB24A4DB4164337CA8E0
        Validity
            Not Before: Jan 17 18:20:01 2024 GMT
            Not After : Jan 18 19:47:01 2024 GMT
        Subject: CN=C75E806C1E1EE345B32DD1B35F581F8B84F7C6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:95:0c:66:33:21:16:dd:1f:d5:97:74:14:
                    b1:c6:5e:64:47:60:a3:95:5e:bf:ab:87:da:dc:15:
                    91:ad:ef:f6:ff:99:e2:3c:94:ce:7d:a9:9a:91:f6:
                    df:e3:98:0b:68:3f:5f:ad:68:b5:cd:20:64:87:19:
                    e8:ef:fe:3d:a0:1f:3e:78:cf:e7:f2:ec:06:ff:0d:
                    1b:7f:02:2d:f9:af:e0:1a:13:69:37:f8:72:77:fb:
                    0b:c5:68:2f:59:4b:d4:69:7c:75:42:8e:fe:9f:72:
                    84:11:35:31:6c:53:4f:bb:bf:01:01:94:c9:3b:fa:
                    5b:34:07:5a:9a:73:dc:8f:c9:ef:e7:b4:86:74:c9:
                    be:9d:ac:b4:64:61:76:c4:be:a5:2c:9e:82:1f:53:
                    f6:2d:96:da:11:cb:2e:ef:7c:4c:47:db:a4:f1:9f:
                    5e:8a:ad:da:65:87:74:73:38:66:6c:06:47:c8:71:
                    f1:09:e9:0e:82:5d:41:41:ba:74:4e:8e:52:19:cc:
                    84:42:ff:6a:3a:fa:58:da:6d:cc:79:d1:69:1b:5e:
                    da:cf:d2:fa:f5:99:78:cc:5f:7e:df:4f:c6:68:f3:
                    b6:ab:50:4e:66:5a:89:a7:72:f8:b0:4d:eb:04:d7:
                    da:ff:d1:a5:aa:83:92:4f:24:72:21:c3:77:b8:c3:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5E:80:6C:1E:1E:E3:45:B3:2D:D1:B3:5F:58:1F:8B:84:F7:C6:CF
            X509v3 Authority Key Identifier:
                keyid:77:AF:F1:CE:48:93:AC:78:7B:68:CB:24:A4:DB:41:64:33:7C:A8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/77AFF1CE4893AC787B68CB24A4DB4164337CA8E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:dc:8e:e8:50:00:a7:e4:e2:1d:07:85:24:80:94:d4:6c:
         fe:a4:ce:81:fd:c9:9f:2f:48:76:87:97:0a:dd:08:55:33:9c:
         8c:72:5f:7e:48:8e:d4:74:25:34:36:3f:f3:9f:97:48:41:e4:
         6c:7f:45:5e:d4:0a:ce:f8:56:5c:ea:a0:af:b0:83:2d:84:ef:
         7b:fe:2c:f8:3e:40:bc:26:2d:34:1e:b8:5e:b4:2b:4d:ee:59:
         e7:c2:a3:c3:b9:a1:da:d4:44:b7:08:38:9b:2f:58:a5:67:42:
         09:99:15:3c:35:99:68:56:28:c5:c7:08:a0:3e:35:b3:61:a1:
         1d:cf:a0:28:78:4a:b3:1c:ce:f9:1e:9a:25:d0:d4:8e:ce:c4:
         70:d9:7d:3e:54:84:fb:de:46:56:e4:7a:b9:75:4c:f0:55:05:
         9e:fc:68:dc:ee:0b:fc:89:ab:ce:c4:93:a9:3a:b4:90:a3:cf:
         a7:14:cf:71:da:7f:36:b0:8c:51:34:12:4e:a2:0b:a1:31:d7:
         4e:66:56:92:91:6e:f5:0f:43:55:d8:91:33:08:a5:2e:df:2a:
         40:1a:24:e6:df:e8:ab:29:52:5a:c4:50:9e:9b:9b:95:d0:86:
         bb:9d:bb:a1:2e:22:17:d6:c2:67:31:a7:97:07:ca:98:8c:da:
         85:1d:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----