Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
File:                     AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft (raw, json)
Hash identifier:          DqjpMufXwbd7Vw8SitHngFGjfeCy2UfD3hrT/MyCEAc=
Subject key identifier:   1A:1E:14:F9:F0:C6:F7:BF:04:83:C6:90:C4:83:0A:F5:05:98:D5:37
Authority key identifier: AF:E9:B7:AA:D4:2F:01:9C:0F:2C:D5:A5:71:4D:CA:AF:7C:33:9A:04
Certificate issuer:       /CN=AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04
Certificate serial:       0EAA14D8709A766FEFD753AB782E08761EE9F035
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft
Manifest number:          67
Signing time:             Mon 19 Feb 2024 14:58:10 +0000
Manifest this update:     Mon 19 Feb 2024 14:53:10 +0000
Manifest next update:     Tue 20 Feb 2024 18:33:10 +0000
Files and hashes:         1: AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.crl (hash: dvqb2Gmbj24QuANY7I2LJ3fbLhW6Lfuu7ejkM+81QNc=)
                          2: 3137372e36362e38302e302f32322d3332203d3e20323632343930.roa (hash: VFtEciXFBAnpCA7srs9Ob8JW0v/c/dblMq7gpKvW1Bc=)
                          3: 323830343a3531343a3a2f33322d3438203d3e20323632343930.roa (hash: Islo/fuOJhVp5yEo0rEQbBJ+c8mLuCidjGY86cgwIlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:aa:14:d8:70:9a:76:6f:ef:d7:53:ab:78:2e:08:76:1e:e9:f0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04
        Validity
            Not Before: Feb 19 14:53:10 2024 GMT
            Not After : Feb 20 18:33:10 2024 GMT
        Subject: CN=1A1E14F9F0C6F7BF0483C690C4830AF50598D537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:b0:4b:a9:cd:ee:04:a2:e3:56:59:bc:14:
                    3a:86:d5:80:e5:d7:95:4e:07:51:8e:26:25:c0:f5:
                    7f:f8:e8:c3:9c:97:fe:d0:93:dd:76:c6:c7:00:d0:
                    e7:1e:ce:31:59:b3:0f:9e:9f:86:73:15:49:51:82:
                    09:86:98:71:aa:4c:94:fe:b5:e4:3a:1a:96:e3:48:
                    ab:b0:19:48:19:42:9d:78:09:98:91:17:7a:9a:4d:
                    d4:83:1d:32:f8:1d:b0:6a:b1:c6:d1:12:5d:70:8f:
                    53:1c:e3:35:cc:3b:b0:4e:cb:5e:ae:6b:14:2f:e5:
                    fe:a4:df:6d:50:86:11:74:ce:07:0c:9c:35:bb:d0:
                    88:bd:24:7c:ee:74:f0:fa:aa:99:5b:5a:22:65:a8:
                    bd:76:60:70:df:a9:4b:df:d6:f2:6d:64:96:fa:3c:
                    d8:10:b0:13:b2:98:27:8b:79:7d:82:63:af:d6:53:
                    61:80:b1:e9:c9:24:a2:0c:64:da:41:9c:17:dc:39:
                    3f:1a:99:41:f8:61:f1:de:20:20:a2:a1:32:6a:b1:
                    83:4a:7c:6d:b3:e3:55:5d:4f:ee:8f:5f:49:83:ff:
                    42:28:a0:ac:64:41:60:48:c7:f0:50:2c:5c:16:88:
                    2e:26:b5:be:a9:79:a1:a6:2c:7e:ca:f1:b8:71:6b:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:14:F9:F0:C6:F7:BF:04:83:C6:90:C4:83:0A:F5:05:98:D5:37
            X509v3 Authority Key Identifier:
                keyid:AF:E9:B7:AA:D4:2F:01:9C:0F:2C:D5:A5:71:4D:CA:AF:7C:33:9A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/AFE9B7AAD42F019C0F2CD5A5714DCAAF7C339A04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:07:8c:80:69:4c:07:a0:82:16:a2:7e:97:d8:84:4d:4e:fe:
         b8:0d:d9:04:89:e4:27:ff:9b:a9:81:3e:e4:67:88:21:00:f9:
         63:68:06:db:65:1f:a1:60:7b:ef:85:5d:a4:d5:e8:3e:c8:9a:
         4d:65:d1:72:dc:a0:65:b9:10:71:1f:85:70:09:7f:95:42:c8:
         bf:45:bd:80:4e:d0:46:94:74:1d:a6:dc:57:4a:f3:13:71:6a:
         18:f5:77:4d:1f:ba:93:63:3d:b2:21:18:b4:76:67:23:cf:32:
         53:8e:26:cb:6e:08:7e:b9:81:48:5a:1d:22:dd:f0:5c:3b:89:
         dc:fb:32:c8:a3:d2:97:88:95:97:b0:76:83:4b:21:89:ff:a4:
         0c:98:90:88:d6:16:37:12:67:36:9d:4c:81:92:7c:86:59:54:
         6c:d4:79:bf:76:6d:51:bb:79:23:f7:e9:f9:53:9c:0d:02:a3:
         ed:14:1d:cd:3b:df:a4:d5:e3:5b:10:02:93:fe:d8:96:ce:5f:
         0a:d2:bc:38:8f:1d:67:d9:e2:17:56:fc:6f:4d:c2:ca:cb:e5:
         69:cf:47:8f:b9:b6:4b:f4:97:86:c2:3a:e2:1e:aa:93:4b:a8:
         74:33:18:9b:ed:41:81:d7:ea:27:6d:71:88:9f:7d:44:79:e5:
         d7:2c:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----