Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.mft
File:                     60BF19636304497B9AF26C48A5DC1EB337D25A44.mft (raw, json)
Hash identifier:          5ApIvoMrOoqpA0S9hHa7+Dyt/zVnZEnyMQ8613rtcl0=
Subject key identifier:   5A:E3:8B:0B:2B:21:AC:53:C0:56:5B:70:9B:7D:1B:D8:DB:49:79:CD
Authority key identifier: 60:BF:19:63:63:04:49:7B:9A:F2:6C:48:A5:DC:1E:B3:37:D2:5A:44
Certificate issuer:       /CN=60BF19636304497B9AF26C48A5DC1EB337D25A44
Certificate serial:       2FA8DB2B9E8503BC49CE2B533C0DBE39B1C5FBD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.mft
Manifest number:          015F
Signing time:             Mon 15 Apr 2024 10:48:03 +0000
Manifest this update:     Mon 15 Apr 2024 10:43:03 +0000
Manifest next update:     Tue 16 Apr 2024 11:23:03 +0000
Files and hashes:         1: 34352e3137362e3234382e302f32322d3234203d3e20323638393737.roa (hash: sjqDDS0Ah5/nWsgAypkSs6HkK3d1aLEn8d1jI8JsuUA=)
                          2: 323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (hash: ThvyXXihIO/4Tfjni0c8OP+L22tYvvQipb6NQjV27t8=)
                          3: 60BF19636304497B9AF26C48A5DC1EB337D25A44.crl (hash: vSk3QmyoiFl1255uC34zKbbN86262M5ier61FJrnHzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:db:2b:9e:85:03:bc:49:ce:2b:53:3c:0d:be:39:b1:c5:fb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BF19636304497B9AF26C48A5DC1EB337D25A44
        Validity
            Not Before: Apr 15 10:43:03 2024 GMT
            Not After : Apr 16 11:23:03 2024 GMT
        Subject: CN=5AE38B0B2B21AC53C0565B709B7D1BD8DB4979CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:30:05:ac:a8:80:2f:fc:b2:21:5b:43:bb:
                    05:50:8b:7f:3f:1a:75:a5:5b:0e:d9:47:b6:ce:84:
                    3c:65:64:e6:33:02:ee:c2:0c:92:42:aa:40:97:6b:
                    df:3d:af:35:cb:51:ed:41:83:b9:d6:8c:89:c5:5a:
                    e6:f4:02:4b:af:08:01:db:45:a8:ab:7a:b9:5c:71:
                    67:8b:47:94:06:8c:b8:3d:8e:cb:52:a9:23:32:2f:
                    56:b7:95:9f:1f:c9:46:11:21:5c:bd:67:c8:e6:8d:
                    b9:45:86:ab:fb:e0:c4:a5:f9:2b:7e:ea:fd:21:72:
                    33:44:0a:55:d8:ee:d1:0f:e0:ae:fd:ca:74:ab:74:
                    ce:6e:9f:b8:f7:1f:89:3c:5a:b3:3b:93:1d:f0:0b:
                    ac:9f:3b:f9:9d:07:81:f1:1c:22:58:14:ec:15:aa:
                    e7:8f:e4:24:10:6b:74:57:1a:58:fa:da:ce:dc:4a:
                    ef:8e:52:76:85:ce:c2:bb:79:61:8e:6d:3d:17:28:
                    53:51:a1:22:15:90:03:4b:39:db:5e:3c:2c:56:6b:
                    e0:bd:78:f2:3c:e8:6b:8d:a6:23:e7:07:fc:7e:39:
                    29:70:85:3d:88:aa:5c:45:90:3e:a7:71:d1:3e:68:
                    a1:16:8b:01:8f:2e:c3:c5:77:f1:52:a1:f7:88:9c:
                    67:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:8B:0B:2B:21:AC:53:C0:56:5B:70:9B:7D:1B:D8:DB:49:79:CD
            X509v3 Authority Key Identifier:
                keyid:60:BF:19:63:63:04:49:7B:9A:F2:6C:48:A5:DC:1E:B3:37:D2:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:de:0c:2e:39:2d:73:2d:74:b6:95:46:09:bb:1c:1e:ef:da:
         7e:0d:ac:96:c8:b1:04:a4:f9:ee:4c:24:5c:18:c1:fc:6f:0f:
         a6:af:60:a5:66:b0:3f:2b:73:9b:90:b4:e2:bb:26:2f:67:05:
         22:ed:0e:96:36:a6:4f:00:1b:08:16:c9:a4:8e:74:f6:6e:8f:
         a5:df:72:27:e6:57:5d:86:f2:42:15:35:da:d8:64:ac:a9:94:
         ae:07:cb:75:cb:30:ff:f5:7b:4e:46:44:74:59:a7:5c:b0:fa:
         23:31:ec:46:da:71:f1:2d:3d:05:b5:91:42:c2:58:1c:14:a8:
         7f:2d:b5:54:ce:05:57:cc:4e:3d:ae:b1:c9:93:d3:68:7c:9e:
         44:04:57:68:68:e2:f4:cf:5a:b8:ee:51:9f:ed:98:86:84:2c:
         35:3d:14:36:cd:22:79:73:69:95:12:9f:b7:60:a9:e9:0d:78:
         c6:75:f1:e2:96:41:5b:b8:0b:b4:f9:83:18:89:49:16:4f:7b:
         13:dc:f7:d9:b9:a7:e9:05:f9:05:23:14:f5:f8:a9:a2:20:72:
         c8:90:ee:29:56:96:c9:8a:dc:f2:3e:e8:6d:f0:7a:90:34:9f:
         c5:b8:2b:af:24:24:2b:c1:ee:2d:7b:34:d2:15:97:7f:e4:01:
         5a:1e:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----