Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.mft
File:                     66EA09809D63B05E9ED21D386D077B26F209BAF0.mft (raw, json)
Hash identifier:          iwiyhcSGN1uw+mwo9wLeoUxf76VbZzcuUQ9Q3dPjEVQ=
Subject key identifier:   61:D4:EB:53:9C:E1:E2:72:17:0B:A2:76:48:17:81:99:CC:6E:88:6F
Authority key identifier: 66:EA:09:80:9D:63:B0:5E:9E:D2:1D:38:6D:07:7B:26:F2:09:BA:F0
Certificate issuer:       /CN=66EA09809D63B05E9ED21D386D077B26F209BAF0
Certificate serial:       101110ED26218B5701293A805D154BD9FE98924C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.mft
Manifest number:          079E
Signing time:             Mon 15 Apr 2024 08:10:47 +0000
Manifest this update:     Mon 15 Apr 2024 08:05:47 +0000
Manifest next update:     Tue 16 Apr 2024 20:25:47 +0000
Files and hashes:         1: 323830343a336233343a3a2f33322d3438203d3e20323636313335.roa (hash: k0XmwsmDtVxwfTXcrbAmG6FjJwgJIMx0D2dbrgsx1Ao=)
                          2: 34352e362e3132382e302f32322d3234203d3e20323636313335.roa (hash: 0Plxoj1skAnwjYyA+B6bn4QU0kOa1RchUlMIHwJyWdQ=)
                          3: 66EA09809D63B05E9ED21D386D077B26F209BAF0.crl (hash: 0uc7TkguKkrCupkmB9W5X+kaTtg3Ny/FgyAls1NqTg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:10:ed:26:21:8b:57:01:29:3a:80:5d:15:4b:d9:fe:98:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EA09809D63B05E9ED21D386D077B26F209BAF0
        Validity
            Not Before: Apr 15 08:05:47 2024 GMT
            Not After : Apr 16 20:25:47 2024 GMT
        Subject: CN=61D4EB539CE1E272170BA27648178199CC6E886F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:d4:0a:0c:01:60:6f:26:c9:eb:22:44:d5:
                    83:3e:a8:51:98:b1:3a:c9:c5:90:dc:64:30:97:99:
                    96:9a:75:01:2f:98:9f:fb:4d:76:33:95:f3:ec:ed:
                    e7:b5:0c:85:c4:d6:b3:8f:43:13:a5:9a:0b:38:ed:
                    e0:3f:c5:c7:e6:bf:0b:50:99:6b:48:81:81:d0:73:
                    50:e2:51:6e:94:d6:58:da:11:74:c3:e4:bb:a2:b5:
                    54:63:ee:ad:7f:61:6c:03:0c:92:e1:cb:a7:16:2a:
                    0b:33:25:aa:33:c7:64:16:3b:0e:ef:c9:84:fe:ba:
                    1b:53:32:06:ef:f9:b5:a1:77:cf:5d:f3:86:3d:49:
                    65:53:92:08:b3:3e:e7:98:88:dc:7c:f7:1c:49:ca:
                    47:1a:05:72:4f:d8:dc:63:50:14:5d:35:96:de:c1:
                    60:92:63:86:09:3e:71:25:4c:bd:30:b2:a9:f5:50:
                    db:0f:9d:ea:2a:ef:73:47:c6:43:28:48:0a:30:35:
                    95:31:31:d2:8e:8c:12:36:7e:8b:ac:1a:94:a5:0e:
                    c4:88:c4:61:db:ca:21:bf:5a:49:7e:7c:d4:e0:59:
                    4c:2b:f5:e7:d3:21:96:dd:50:d5:ac:94:14:ec:0c:
                    61:ba:ad:85:c0:fb:82:94:e4:9f:88:2b:88:e3:1f:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D4:EB:53:9C:E1:E2:72:17:0B:A2:76:48:17:81:99:CC:6E:88:6F
            X509v3 Authority Key Identifier:
                keyid:66:EA:09:80:9D:63:B0:5E:9E:D2:1D:38:6D:07:7B:26:F2:09:BA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:9d:59:7a:22:f7:6d:89:28:a1:31:1b:b4:c9:9d:d7:09:
         60:74:e4:d7:b0:fd:c6:4d:90:e6:df:f9:c1:94:a3:ce:65:20:
         88:59:28:e2:fa:b9:cb:c8:ac:a6:34:51:88:e1:38:f4:a5:5b:
         ca:be:63:c3:0c:f7:4b:52:50:ab:b5:17:2a:a8:92:7c:15:f9:
         d2:7b:74:8d:e5:06:24:dd:77:15:6a:e4:d2:8b:59:86:27:69:
         94:e8:bd:17:2a:9c:94:68:a7:51:ab:03:2e:39:97:af:2f:fd:
         d7:c9:98:93:2d:7e:32:82:28:19:62:21:c8:ac:23:34:2a:3c:
         5e:10:5c:60:45:3c:04:82:7d:f2:f1:8d:0a:49:d2:fd:4e:6d:
         b3:ad:82:23:60:41:35:95:54:b3:69:0c:be:75:58:04:eb:60:
         e6:b5:e2:8c:ae:26:6c:96:0b:f2:a9:26:8e:ce:a7:f0:3f:cb:
         8d:8b:f0:cd:61:0d:48:f4:ed:d7:ce:bf:68:64:55:7c:bc:19:
         af:7e:b8:0f:99:68:16:52:46:85:54:50:fe:1a:2d:44:f0:25:
         9a:02:bc:68:28:43:2d:07:4a:e7:59:04:e3:31:d3:24:19:c7:
         5c:bb:d7:06:c1:ef:d5:f9:9d:a4:0f:db:15:22:1f:fa:92:a4:
         51:f5:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----