Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft
File:                     67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft (raw, json)
Hash identifier:          pTdtoxGnZbAQ6ZNKD2YRY2KeKVOn5qHYUd0+VgL9rtM=
Subject key identifier:   E8:10:62:3C:68:4D:D6:A5:1D:CF:C2:73:1A:CE:8D:B8:8D:23:E8:AB
Authority key identifier: 67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C
Certificate issuer:       /CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
Certificate serial:       0906EC5F8D7794F166B3FBEF42D48E11E47F1960
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft
Manifest number:          0154
Signing time:             Sat 14 Dec 2024 16:18:48 +0000
Manifest this update:     Sat 14 Dec 2024 16:13:48 +0000
Manifest next update:     Sun 15 Dec 2024 18:46:48 +0000
Files and hashes:         1: 3133312e37322e39322e302f32322d3234203d3e20323632373937.roa (hash: TlsY5inHbuGeMQNaT7+GjBG5FO85d+ZDN76TiBhjQ9c=)
                          2: 323830343a3233633a3a2f33322d3336203d3e20323632373937.roa (hash: crUAt9ZS3/G5ti0UvUDpdTsO7GtEbXlb6JnMAxTVAqc=)
                          3: 3138362e3233372e302e302f32302d3234203d3e20323632373937.roa (hash: mgRYtOOOm3+fawzXENVOfv3gA9t4tZtlm6Qf+162gRI=)
                          4: 67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl (hash: j/Eyhkhwx09grkUFcqQ4Fa8rlrzXKtcyRyLA1cw9kf4=)
                          5: 3137392e39372e36342e302f32312d3234203d3e20323632373937.roa (hash: r2p0uuYsaJXsRPm5N1d2fJ6WD3roacHnUevwakXY2Pk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:ec:5f:8d:77:94:f1:66:b3:fb:ef:42:d4:8e:11:e4:7f:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
        Validity
            Not Before: Dec 14 16:13:48 2024 GMT
            Not After : Dec 15 18:46:48 2024 GMT
        Subject: CN=E810623C684DD6A51DCFC2731ACE8DB88D23E8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:d8:f7:2b:9b:5a:db:e9:9c:28:d8:42:ea:
                    a8:92:08:42:0d:ae:b8:ab:6c:08:0a:28:49:17:65:
                    b8:81:ce:51:05:79:f9:6f:76:4f:3f:a8:8c:f1:48:
                    a2:ce:f0:26:b0:97:98:47:ff:f2:48:6d:22:28:b5:
                    ed:53:94:f4:7c:02:a8:41:d3:6e:38:6f:17:ab:e4:
                    a0:d8:a7:82:f0:8a:3a:5e:be:7a:79:2d:0b:f1:fd:
                    47:65:72:1a:31:02:43:5a:8e:d4:94:e3:15:fc:10:
                    7c:b8:09:a2:e8:2e:b2:98:df:b9:38:0a:9f:54:6d:
                    27:8e:66:89:2f:23:42:29:05:f3:3f:b3:c9:63:1f:
                    38:6b:7f:37:68:13:cc:3f:90:d6:46:eb:45:ac:58:
                    6b:d8:45:3f:17:69:d2:ef:17:15:26:02:75:a3:95:
                    8b:d5:c0:dc:99:00:60:4a:1b:35:28:39:f3:50:cf:
                    7b:39:59:cb:5c:a2:5b:b0:75:e0:a6:47:48:e5:58:
                    a7:20:42:c4:39:63:70:09:b9:2d:93:e2:96:ed:96:
                    73:f0:10:63:8f:7c:b6:2a:23:19:47:ea:f8:b5:8e:
                    6e:80:c5:57:6b:aa:10:9f:03:a6:85:b8:75:42:4c:
                    87:e6:3f:bf:02:5f:72:7c:c0:5b:fc:f0:eb:06:4b:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:10:62:3C:68:4D:D6:A5:1D:CF:C2:73:1A:CE:8D:B8:8D:23:E8:AB
            X509v3 Authority Key Identifier:
                keyid:67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:03:2e:da:47:47:eb:8a:b0:21:0d:88:3b:a9:03:63:d3:
         6f:5c:b0:a5:78:bd:1e:ff:48:ec:0f:ec:1f:13:74:58:ab:c2:
         44:e7:58:06:48:33:0f:c8:8c:b4:1c:0b:04:cf:5c:ae:bd:77:
         6e:fe:30:c4:31:ec:a0:f3:6f:42:31:37:34:5f:34:43:6f:db:
         d1:d0:72:7f:fb:0f:c5:57:ae:e7:27:8e:33:bb:b4:2f:ad:15:
         92:61:e5:8a:14:8b:20:31:fe:22:17:3b:87:1b:c4:8c:af:0c:
         f1:3b:e1:cf:de:8c:6c:c4:95:33:20:8f:3b:3c:0c:a4:f6:1f:
         4c:fb:c9:c7:5f:75:0b:9d:a1:0d:54:43:31:7f:ab:2f:29:9f:
         34:4d:9f:83:8a:0b:52:69:ff:d8:14:93:85:ba:c2:42:d9:92:
         38:a9:11:eb:81:7f:06:e5:2c:0a:bf:ee:0a:e8:e1:2f:81:88:
         9e:0c:84:4e:b6:ab:d0:75:d8:3f:6b:e7:e9:b4:9a:93:ae:f7:
         6d:2c:4a:65:8e:f9:7d:91:6b:07:8d:45:e6:8c:13:bc:96:c9:
         b5:5a:30:dd:56:74:41:a9:99:f2:69:66:b1:33:76:27:bd:cf:
         60:9d:e4:0d:a5:64:14:14:ad:6c:69:06:ef:e8:5b:1d:c4:06:
         97:cc:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----