Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.mft
File:                     67B2664D2E6E96D73A15D705B531D2A7386AF888.mft (raw, json)
Hash identifier:          WK/5BIf1a1a7WNQcMwp0gQD4QkBupc92jbQowhaMnpQ=
Subject key identifier:   06:AC:6B:10:FF:D6:ED:AB:6F:BF:10:7B:F3:C8:49:D3:23:37:8E:5B
Authority key identifier: 67:B2:66:4D:2E:6E:96:D7:3A:15:D7:05:B5:31:D2:A7:38:6A:F8:88
Certificate issuer:       /CN=67B2664D2E6E96D73A15D705B531D2A7386AF888
Certificate serial:       699357BDF77FC58650CEC90AC7B6D70F1CAF9E6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.mft
Manifest number:          29
Signing time:             Tue 10 Oct 2023 18:31:51 +0000
Manifest this update:     Tue 10 Oct 2023 18:26:51 +0000
Manifest next update:     Wed 11 Oct 2023 21:59:51 +0000
Files and hashes:         1: 323830343a383031383a373030303a3a2f33362d3336203d3e20323731323533.roa (hash: uSdGNrdd60RnlvNLFn8jbm7XVJGmLdfsQfvrI5I9OKQ=)
                          2: 323830343a383031383a333030303a3a2f33362d3336203d3e20323731373239.roa (hash: 2tQhne54HWGuLH2DzU5GzzE4E5fW2hupjhZzbA0xZp8=)
                          3: 67B2664D2E6E96D73A15D705B531D2A7386AF888.crl (hash: W81ApL0+2dIJwTrmlE0JbrKetpr4wTmMkjP3JurNtAY=)
                          4: 323830343a383031383a3a2f33322d3332203d3e20323731373239.roa (hash: 1MRBOgu1ouflfZVIKpl4MhHZ7o1q6zl3dtQabePlYVk=)
                          5: 323830343a383031383a313030303a3a2f33362d3336203d3e20323733363132.roa (hash: Q8ouyCVjxVEngC2oTPxaGSObhdCvR5M0EB455WI4EAw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:93:57:bd:f7:7f:c5:86:50:ce:c9:0a:c7:b6:d7:0f:1c:af:9e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B2664D2E6E96D73A15D705B531D2A7386AF888
        Validity
            Not Before: Oct 10 18:26:51 2023 GMT
            Not After : Oct 11 21:59:51 2023 GMT
        Subject: CN=06AC6B10FFD6EDAB6FBF107BF3C849D323378E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:bf:84:16:34:29:d8:89:c4:aa:ce:b6:c9:
                    70:94:48:bc:22:4b:70:38:2f:4e:db:56:b8:5a:0b:
                    6a:82:47:e9:29:c4:4c:ea:f8:dc:73:6a:95:4d:04:
                    4a:f8:78:9e:e6:1d:0f:26:68:6b:c5:7c:ac:4e:9a:
                    47:73:a3:7b:87:60:f7:2b:f6:db:90:df:2f:38:72:
                    ff:86:7c:30:bd:a0:02:f9:0e:85:f7:47:40:1c:4a:
                    4d:30:44:1d:d1:56:fa:d3:0c:b9:02:72:33:3d:32:
                    d6:67:16:f2:3b:18:a0:a0:b8:a3:f4:7a:70:01:99:
                    db:db:48:53:46:23:ff:12:37:bf:71:83:b3:37:62:
                    44:dd:73:40:f4:fe:f8:a1:95:b4:d3:82:fa:e1:98:
                    46:67:73:69:0e:64:a3:fb:08:11:cb:a4:6d:1c:be:
                    6a:b3:4f:99:46:78:c9:28:8a:28:66:b0:3e:06:c0:
                    77:df:3f:12:71:e9:53:b9:b3:d5:38:b7:1a:16:34:
                    e1:35:62:6e:84:f3:48:7a:b4:33:06:ae:bd:91:18:
                    bd:23:95:dd:bc:1e:c1:3c:4a:3a:0b:c9:38:aa:ec:
                    df:ff:a6:7f:83:63:74:32:e3:9f:e9:7a:44:f2:17:
                    9f:85:e5:02:29:d1:74:91:72:03:85:51:a6:11:70:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AC:6B:10:FF:D6:ED:AB:6F:BF:10:7B:F3:C8:49:D3:23:37:8E:5B
            X509v3 Authority Key Identifier:
                keyid:67:B2:66:4D:2E:6E:96:D7:3A:15:D7:05:B5:31:D2:A7:38:6A:F8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/67B2664D2E6E96D73A15D705B531D2A7386AF888.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:11:d2:03:81:d1:83:74:61:1d:4d:a5:a2:c7:40:b9:49:
         52:5d:ca:be:9c:ce:90:69:36:f7:fc:a2:fa:d1:a2:60:8f:df:
         ed:3c:72:26:d2:80:27:98:68:9d:53:69:e9:f4:01:8f:2a:43:
         fe:87:ed:fb:49:dd:87:09:be:20:a9:7b:6b:7a:e0:a3:7d:a5:
         09:18:f1:5a:96:68:5c:7c:32:47:a2:ff:bc:e5:50:66:1d:53:
         7b:bd:34:a4:fe:92:0c:4a:c5:30:cd:b5:77:3a:c2:15:c3:cd:
         62:a0:96:c6:e8:06:3b:71:35:76:fe:99:36:12:f7:3f:6c:3c:
         aa:b8:c9:89:12:24:2f:81:ef:fb:9e:84:1f:41:0a:70:3a:7f:
         b4:85:91:73:1b:74:ab:73:97:9e:92:a5:9a:2f:87:78:71:93:
         d4:bb:35:95:ef:2a:96:a2:03:b2:28:cd:c4:d8:68:08:0b:aa:
         7e:75:49:3d:ee:00:84:0d:58:76:7f:71:a9:9a:6d:a4:90:ab:
         a6:e2:d8:10:e2:fa:d6:33:c4:c1:08:6e:1c:ee:04:4c:97:98:
         86:49:0e:31:16:2e:b2:81:ef:35:66:3f:07:81:87:81:e9:c3:
         1e:04:41:3c:ef:27:0e:88:1b:ef:c1:cf:0b:ae:7e:94:8b:6e:
         61:5b:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----