Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
File:                     89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft (raw, json)
Hash identifier:          wtGABRhyZ39kjB68BLcBQO0UccIY7Po1/oVYT+bal6M=
Subject key identifier:   7A:70:1F:99:1B:FA:04:A8:1C:B2:2D:9D:BF:D1:54:51:E2:3B:42:92
Authority key identifier: 89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0
Certificate issuer:       /CN=89CE27D64527B101D4BBA3737DAAF6FA000F34B0
Certificate serial:       26FAF5CB64A01FBE158D45D66F40199A3511D3BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft
Manifest number:          0139
Signing time:             Tue 29 Oct 2024 02:16:01 +0000
Manifest this update:     Tue 29 Oct 2024 02:11:01 +0000
Manifest next update:     Wed 30 Oct 2024 02:16:01 +0000
Files and hashes:         1: 89CE27D64527B101D4BBA3737DAAF6FA000F34B0.crl (hash: zURsgzODy0AcPtm9PK/2YYAUNID91h25GcobATbbEq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fa:f5:cb:64:a0:1f:be:15:8d:45:d6:6f:40:19:9a:35:11:d3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CE27D64527B101D4BBA3737DAAF6FA000F34B0
        Validity
            Not Before: Oct 29 02:11:01 2024 GMT
            Not After : Nov  5 02:16:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:a2:08:c2:3a:24:44:aa:cf:61:b1:d0:1d:
                    cb:0b:47:43:35:5f:d4:8b:7c:02:34:83:fe:bc:6c:
                    8d:16:ba:9d:5d:1b:61:7d:ee:02:0b:67:42:28:47:
                    0d:2a:94:02:95:c7:f5:d5:f5:74:57:0d:9a:43:88:
                    b2:c0:05:5b:6f:3e:6f:db:27:ea:35:a7:80:0e:b5:
                    39:58:02:98:08:91:5d:01:47:db:ae:76:e6:99:a2:
                    70:64:5a:e6:b2:e4:5b:9f:4b:7a:d0:ca:1b:98:32:
                    67:62:07:8e:ce:64:45:e1:57:e6:4f:b2:da:1c:92:
                    65:97:57:9c:e3:c6:39:99:73:4f:a5:b3:08:e7:d1:
                    b2:16:c9:3a:bf:bb:5c:1e:df:79:f4:e0:f8:b7:c8:
                    4f:6b:dd:1d:ae:ca:68:6f:42:5f:fd:6d:b4:0c:92:
                    ad:0a:8e:59:63:d8:2b:a6:ba:0b:da:ae:9f:3f:39:
                    cf:cb:e8:05:95:5b:ad:a5:13:86:64:16:2a:c9:a0:
                    e4:07:c2:f7:07:01:c5:2a:59:a4:52:e4:25:79:04:
                    af:73:c0:66:b4:e9:e2:04:2a:e9:2a:ce:ec:8b:34:
                    1d:93:d1:e5:80:ba:c2:4d:8f:8a:31:cf:3f:f5:7e:
                    d8:93:29:59:5b:7c:de:30:05:21:c4:93:92:31:4c:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:70:1F:99:1B:FA:04:A8:1C:B2:2D:9D:BF:D1:54:51:E2:3B:42:92
            X509v3 Authority Key Identifier:
                keyid:89:CE:27:D6:45:27:B1:01:D4:BB:A3:73:7D:AA:F6:FA:00:0F:34:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/1/89CE27D64527B101D4BBA3737DAAF6FA000F34B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:b5:73:aa:ea:76:72:a3:e5:f2:b3:a4:2c:d9:8d:d5:91:
         35:54:7f:c1:4d:08:28:55:f8:3c:73:5c:8d:4c:77:04:56:51:
         0d:e4:b7:d0:b3:bb:12:32:41:e6:04:49:06:16:98:1f:f6:9b:
         09:78:94:e2:3f:be:c8:5f:4c:e0:39:b8:c4:df:35:7b:58:3e:
         e9:76:12:a2:06:21:39:70:80:30:bd:ef:4e:cb:16:85:b8:f3:
         f7:18:af:3a:78:cc:ad:60:10:6b:06:dd:fe:6b:fa:46:71:b0:
         24:59:85:e4:16:43:02:a4:9d:b0:16:3d:c8:4b:d1:a7:6c:20:
         50:8a:e8:80:b5:03:da:1c:0c:f8:dc:96:7b:30:31:91:67:e6:
         db:d4:12:4d:be:e2:be:cb:ef:94:57:99:b2:f3:08:4d:9d:1b:
         cf:4b:37:d5:dc:18:d1:48:1a:44:74:26:e9:3d:6a:1f:90:1e:
         41:c5:b1:e0:8b:37:03:88:69:bb:8c:05:19:55:d5:11:3c:55:
         de:3c:9f:bb:3e:6a:12:27:4a:b2:8c:f1:7f:12:bd:1c:9e:47:
         ef:64:4b:84:ad:dd:32:a8:7b:80:3b:08:d4:5d:36:6c:b7:21:
         50:cd:ae:a0:7d:4a:49:eb:4e:39:e7:16:fe:f3:d2:d1:2e:a2:
         eb:82:03:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----