Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/E7F21F5C36725D1544566F24D524EA663254F06A.mft
File:                     E7F21F5C36725D1544566F24D524EA663254F06A.mft (raw, json)
Hash identifier:          FxugQA+eZO0VrhDviSlTh6DymqQCW/jadzZHwW3uuWQ=
Subject key identifier:   AC:95:F0:10:54:01:CB:02:9F:F6:84:38:D7:C5:EB:0F:D0:F7:05:FB
Authority key identifier: E7:F2:1F:5C:36:72:5D:15:44:56:6F:24:D5:24:EA:66:32:54:F0:6A
Certificate issuer:       /CN=E7F21F5C36725D1544566F24D524EA663254F06A
Certificate serial:       1F59526B76CF2E16569C246F0FF99357BDDD0204
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7F21F5C36725D1544566F24D524EA663254F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/E7F21F5C36725D1544566F24D524EA663254F06A.mft
Manifest number:          7C
Signing time:             Mon 15 Apr 2024 00:03:49 +0000
Manifest this update:     Sun 14 Apr 2024 23:58:49 +0000
Manifest next update:     Tue 16 Apr 2024 02:14:49 +0000
Files and hashes:         1: 3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (hash: RO1pCdY0HTsRgNwD0lnCq65N9mOc6b4tID59HXRvrL0=)
                          2: 323830343a373735343a3a2f33322d3335203d3e203631363034.roa (hash: pE0LFsUGbi3vLxecRk282+6a94Wn/8pqHCG+1P9ob6U=)
                          3: E7F21F5C36725D1544566F24D524EA663254F06A.crl (hash: 1fxtbD7WYRtvbxjLNaB27jpp2Ny3q+3sCbGK021BxSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:59:52:6b:76:cf:2e:16:56:9c:24:6f:0f:f9:93:57:bd:dd:02:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F21F5C36725D1544566F24D524EA663254F06A
        Validity
            Not Before: Apr 14 23:58:49 2024 GMT
            Not After : Apr 16 02:14:49 2024 GMT
        Subject: CN=AC95F0105401CB029FF68438D7C5EB0FD0F705FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:43:3f:46:3d:65:26:d2:76:c0:12:c8:9c:
                    85:e2:6c:ba:d6:6a:c7:e3:e9:f5:3a:f8:45:b5:b0:
                    b8:c2:27:fb:a9:c7:1b:0a:0b:ee:28:78:77:6a:e8:
                    d1:8a:3b:4e:a6:6a:e0:b9:33:ef:92:c9:34:25:70:
                    11:14:70:2d:35:60:a3:f7:ee:b5:64:84:41:28:11:
                    b8:80:f1:25:72:f3:4d:4b:db:4d:07:48:94:ab:9d:
                    58:39:44:fc:76:09:c3:03:41:43:7d:6d:56:46:3f:
                    59:a6:f7:9a:c8:d9:61:a9:8b:fd:70:e7:7c:4c:b3:
                    ff:90:19:43:76:69:b3:94:f7:1b:fd:97:89:6e:50:
                    f5:78:2e:71:f3:bc:76:e0:c9:9b:84:13:54:d0:f4:
                    7d:f3:b1:dd:4c:a4:b2:bb:5d:4d:79:a2:63:ff:96:
                    b1:cf:80:c2:ff:a3:61:12:e6:e1:14:4a:28:ed:c6:
                    87:9b:b2:fd:24:44:ea:e7:e8:20:86:73:d7:2f:8b:
                    cc:56:05:eb:7d:e0:1b:28:4f:05:13:65:e4:f9:14:
                    f1:a6:73:7b:ae:38:00:8c:50:8c:dd:aa:05:23:b1:
                    05:2f:06:82:36:15:89:f2:6f:3f:2c:1a:48:94:fa:
                    2e:68:20:b9:96:d2:a4:f9:ff:51:0a:a2:9b:06:7c:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:F0:10:54:01:CB:02:9F:F6:84:38:D7:C5:EB:0F:D0:F7:05:FB
            X509v3 Authority Key Identifier:
                keyid:E7:F2:1F:5C:36:72:5D:15:44:56:6F:24:D5:24:EA:66:32:54:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/E7F21F5C36725D1544566F24D524EA663254F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E7F21F5C36725D1544566F24D524EA663254F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/E7F21F5C36725D1544566F24D524EA663254F06A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:53:5f:38:b6:ad:6e:31:09:4d:75:37:8b:ff:4d:f0:af:
         d1:fc:2c:bc:3f:88:53:fa:c8:46:a3:ab:d0:9e:ab:ae:db:d9:
         62:23:4f:e1:1d:de:cb:96:36:81:a6:5c:a7:aa:69:fa:be:d5:
         82:85:7d:96:c6:3a:55:fc:33:84:5b:f2:5a:25:df:34:90:49:
         0f:b9:45:16:c9:ee:d0:fe:2e:c4:9b:60:42:43:3c:27:1b:48:
         f2:72:c8:f2:f4:25:c5:0c:1b:85:d6:6d:fc:ed:5c:82:1a:b1:
         7c:56:ec:7c:6b:5c:86:77:23:f2:c5:00:45:a0:0b:55:f8:5f:
         db:15:7f:9b:35:2c:7c:a7:8d:c3:6d:74:94:bf:41:7d:58:d0:
         58:2c:a2:3f:0c:e0:7e:f9:95:39:83:dc:02:a2:62:51:f6:54:
         5d:6c:99:c4:59:c1:3b:b4:81:47:5e:b1:17:37:14:5b:b4:44:
         f2:52:1e:06:6b:99:1a:ca:10:aa:ae:a4:01:27:fd:df:fa:a4:
         fb:26:c3:6e:3c:7d:0a:68:3b:57:05:24:ab:65:f5:34:1f:95:
         96:d1:15:2e:25:82:31:df:5c:91:99:81:44:2d:ce:36:64:6a:
         f0:d6:84:9a:fa:95:e7:ee:5e:18:24:ef:b9:a5:a2:3a:2a:78:
         76:ef:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----