Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.mft
File:                     487FA03B43556370F59D61474B6B57E8783FCC68.mft (raw, json)
Hash identifier:          AzqsL8F/xK7k0BDpXgSCeK4BIEt8sWgfgrXebC6Q9iE=
Subject key identifier:   AF:37:1A:AF:74:93:58:17:14:32:4F:84:78:DD:98:59:1A:A6:47:F1
Authority key identifier: 48:7F:A0:3B:43:55:63:70:F5:9D:61:47:4B:6B:57:E8:78:3F:CC:68
Certificate issuer:       /CN=487FA03B43556370F59D61474B6B57E8783FCC68
Certificate serial:       1F00E2BD899DB5EF8728E2AAE046912111061541
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/487FA03B43556370F59D61474B6B57E8783FCC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.mft
Manifest number:          5D
Signing time:             Sat 29 Jun 2024 01:14:37 +0000
Manifest this update:     Sat 29 Jun 2024 01:09:37 +0000
Manifest next update:     Sun 30 Jun 2024 03:21:37 +0000
Files and hashes:         1: 323830343a343131383a3a2f33322d3336203d3e20323636303033.roa (hash: TwuXDQWqUm5I7QcbAuokRy01hSXnM1CbYrHW+TxIEFk=)
                          2: 3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa (hash: i7egcmP2jT4uYDkXKxVqEH1jioOW9jr7XrnFoXBx5ro=)
                          3: 487FA03B43556370F59D61474B6B57E8783FCC68.crl (hash: yH3boKffBSGjjxgX5x5S/UFeUTzLh9IhwxlrRb1v8FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:00:e2:bd:89:9d:b5:ef:87:28:e2:aa:e0:46:91:21:11:06:15:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487FA03B43556370F59D61474B6B57E8783FCC68
        Validity
            Not Before: Jun 29 01:09:37 2024 GMT
            Not After : Jun 30 03:21:37 2024 GMT
        Subject: CN=AF371AAF7493581714324F8478DD98591AA647F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:42:58:b9:96:45:79:20:a4:ff:06:23:25:
                    79:3e:65:3f:62:28:0d:6e:33:e8:1e:0c:57:d4:5d:
                    e9:01:ff:50:29:8a:c0:73:e1:67:b3:fb:e5:6a:0c:
                    0a:0b:65:97:7f:b3:36:8f:90:88:ad:90:1e:fa:d2:
                    18:cb:8c:f0:a2:d2:32:fb:a1:b3:3b:98:42:06:a3:
                    23:67:c2:b5:b2:c8:96:fb:e5:4a:9d:78:e6:f9:db:
                    e8:e9:93:b6:06:5a:a6:5b:84:d4:f6:62:4a:13:72:
                    b1:f1:25:90:84:5f:13:a5:43:1b:e3:95:f6:61:8e:
                    e8:b0:64:62:54:b4:5d:cf:05:1c:61:eb:41:d6:7d:
                    37:64:7d:67:5e:0b:3b:b2:c0:68:16:9e:67:77:1a:
                    06:b5:a7:ec:f4:8e:14:17:fb:62:83:56:b7:3a:21:
                    f0:36:d8:ba:b0:f3:43:23:6b:19:c3:ee:a4:0d:36:
                    ad:1f:7c:fa:de:d6:f0:db:c4:0e:86:7e:7a:99:fd:
                    4f:8d:09:b7:67:d6:ce:63:3d:f0:a4:2c:38:56:3b:
                    ee:26:a3:e7:89:bc:2f:1c:73:1e:c2:6a:d8:43:f0:
                    9d:33:07:27:5b:4d:f0:4a:d4:b9:a1:ce:a2:be:b1:
                    a2:b5:7c:2a:c9:6f:c7:06:69:a8:f3:93:29:d2:8d:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:1A:AF:74:93:58:17:14:32:4F:84:78:DD:98:59:1A:A6:47:F1
            X509v3 Authority Key Identifier:
                keyid:48:7F:A0:3B:43:55:63:70:F5:9D:61:47:4B:6B:57:E8:78:3F:CC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/487FA03B43556370F59D61474B6B57E8783FCC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:48:6b:e7:f1:1d:da:55:68:ce:a8:c2:96:11:b7:72:4d:b1:
         37:8c:7c:a5:91:f5:f7:0b:83:65:34:34:97:3d:b1:11:1c:24:
         dd:5b:a9:7c:6c:60:30:ea:d1:d9:55:bd:62:1f:d6:04:be:a1:
         43:76:39:0c:1a:8c:41:d3:19:d4:01:18:c2:c0:87:a8:4f:ad:
         0a:b8:be:9b:9e:5d:68:4d:bf:a6:5e:2a:5b:8b:8c:bd:a5:a3:
         b5:ea:24:2b:d1:b7:6a:e8:e5:ba:23:7d:7b:4d:93:b2:b2:8c:
         88:69:dc:57:fc:bf:3d:47:e2:dd:d2:72:b9:80:95:a5:dc:f1:
         49:51:0f:0a:a4:2e:81:c2:83:92:fa:f9:94:6c:79:05:c5:4d:
         3f:e6:29:2b:18:11:1f:23:81:f0:3f:b2:0b:2a:0c:9e:1d:18:
         ff:d9:6e:21:f9:56:b6:a9:95:1a:57:c6:3b:b4:49:6c:6c:ad:
         cd:64:08:f3:7f:00:66:bf:9c:7d:80:43:84:2d:ba:47:29:ca:
         91:19:16:b9:da:df:f1:b1:42:2b:2e:47:c9:fa:67:a9:41:74:
         12:78:3e:19:7c:be:69:74:81:34:82:d6:cf:71:02:a9:33:9b:
         30:8a:7e:43:c4:c8:2d:eb:22:d6:d0:2c:90:9a:39:9d:c0:22:
         a7:51:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----