Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.mft
File:                     9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.mft (raw, json)
Hash identifier:          ZAsAjbFbZV1lmT+Ti+j4Bjr9RYJ+reOSWyRgXPaFF+s=
Subject key identifier:   E2:3D:A9:88:9B:0B:E7:F4:DE:B5:B1:EB:13:A2:03:AC:AD:7F:1B:AC
Authority key identifier: 9B:AE:48:B6:08:C1:27:AF:7D:05:ED:6C:EB:DB:68:E7:04:61:DA:DD
Certificate issuer:       /CN=9BAE48B608C127AF7D05ED6CEBDB68E70461DADD
Certificate serial:       7CD82923526BEE47E225B66634365F4846A97796
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.mft
Manifest number:          8F
Signing time:             Tue 05 Nov 2024 12:16:45 +0000
Manifest this update:     Tue 05 Nov 2024 12:11:45 +0000
Manifest next update:     Wed 06 Nov 2024 14:45:45 +0000
Files and hashes:         1: 9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.crl (hash: 8n3qCmosFhFW1/dZUEftU/PiDfSHhj0FRYsu5JUyloM=)
                          2: 3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (hash: EE+YBQ5qJfSuyEJoaKadl+hVki7I0LoGQdynSR1UvzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d8:29:23:52:6b:ee:47:e2:25:b6:66:34:36:5f:48:46:a9:77:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAE48B608C127AF7D05ED6CEBDB68E70461DADD
        Validity
            Not Before: Nov  5 12:11:45 2024 GMT
            Not After : Nov  6 14:45:45 2024 GMT
        Subject: CN=E23DA9889B0BE7F4DEB5B1EB13A203ACAD7F1BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:23:69:41:69:d7:f2:53:78:73:ef:97:fd:
                    3c:22:1c:a8:99:9b:ed:9a:11:74:0a:15:be:37:2c:
                    e5:34:1b:58:79:ba:ce:f0:b2:3b:a0:53:33:49:f7:
                    8e:eb:09:6a:a8:d7:5b:01:3b:13:68:13:f6:d8:1d:
                    9f:e4:35:95:d3:1e:50:06:b3:b3:b8:84:a4:57:8a:
                    ff:ec:a9:c4:65:bc:c7:65:3b:33:10:77:18:42:99:
                    e3:a7:3c:c7:36:91:ec:24:e4:f2:65:72:75:2f:84:
                    e4:74:f1:ce:d8:ad:d4:16:a8:dc:2c:ec:90:63:d7:
                    8c:50:c4:ea:eb:7c:d5:42:68:45:c5:6e:d5:cb:b8:
                    c4:28:4b:60:92:b5:fd:b2:88:03:e5:20:51:a1:e6:
                    b6:31:2d:57:4b:d7:8e:89:51:4b:89:4d:c2:bf:a5:
                    8a:da:8f:f4:9e:10:05:5f:54:54:d2:3f:95:03:1e:
                    54:64:74:9c:1f:9f:52:35:89:f5:23:ae:9e:db:91:
                    52:d7:cc:0a:f2:0c:98:e3:93:35:e6:3d:bf:c9:b4:
                    67:5d:2d:62:ab:5d:37:f6:c4:75:66:04:ae:14:56:
                    4a:cf:9b:13:5f:de:60:5c:51:26:ff:a3:34:fa:c3:
                    ea:ce:cf:e7:98:fa:2d:05:5d:ab:bc:96:cd:7c:d5:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:A9:88:9B:0B:E7:F4:DE:B5:B1:EB:13:A2:03:AC:AD:7F:1B:AC
            X509v3 Authority Key Identifier:
                keyid:9B:AE:48:B6:08:C1:27:AF:7D:05:ED:6C:EB:DB:68:E7:04:61:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/2/9BAE48B608C127AF7D05ED6CEBDB68E70461DADD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:4d:af:75:55:48:43:6a:ce:3d:be:8c:f4:1d:b8:86:ca:
         03:b1:56:ad:d6:cc:a0:8b:6f:62:cd:42:94:3e:73:6e:ec:3f:
         cf:56:c1:24:00:cf:8e:30:3e:cb:52:98:8c:de:b9:c0:94:13:
         b3:b7:c2:19:ee:45:b8:6a:45:da:87:62:fe:5e:49:8d:cb:5c:
         d0:05:fe:f7:b1:b7:23:26:66:7a:60:32:58:25:bb:c9:0d:a4:
         a5:2f:6c:44:00:a5:07:eb:1c:e6:d0:ec:ac:25:37:e9:f7:94:
         9f:8a:fc:83:c1:01:76:04:f8:ba:48:09:5b:7d:35:6f:93:b3:
         d9:d1:14:76:eb:00:9c:21:eb:0d:94:a9:ad:84:f0:75:da:05:
         da:0d:c6:82:23:a8:15:d7:dd:ea:ff:00:7c:bf:ba:25:83:80:
         e4:43:f5:ba:3d:bc:f6:e2:a1:75:9c:32:63:6e:b2:98:b4:c9:
         a6:a2:5f:9a:97:54:67:86:be:4a:1a:72:b5:7c:01:af:b9:13:
         2d:ff:50:e1:56:86:7c:68:ee:36:3d:47:db:5e:f5:70:3d:e9:
         42:d3:3c:9b:b7:28:b9:8c:aa:e3:79:5f:34:d8:aa:a9:4f:a8:
         18:0b:75:ba:19:04:9d:dc:09:98:a8:42:f9:bf:33:64:7b:75:
         ae:7a:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----