Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.mft
File:                     D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.mft (raw, json)
Hash identifier:          ryNN/E8k0K5ZVJfaaqYYFfEwFJUXzoxTWCHojbWrjIU=
Subject key identifier:   BD:F5:87:C6:8D:8D:7B:91:0E:22:1D:ED:4A:98:49:69:8E:B4:41:02
Authority key identifier: D7:E9:D6:D8:5A:E2:DE:C0:38:FF:ED:C1:DF:D2:20:C8:92:88:A8:CA
Certificate issuer:       /CN=D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA
Certificate serial:       65A8DAFDDB5F594528397A5EF2869DE906B147B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.mft
Manifest number:          92
Signing time:             Mon 11 Mar 2024 04:59:36 +0000
Manifest this update:     Mon 11 Mar 2024 04:54:36 +0000
Manifest next update:     Tue 12 Mar 2024 06:46:36 +0000
Files and hashes:         1: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: b8EzM1poh/tXMRpyl1+ZDcJAp6JRUy3Wpx1l3ClUfIo=)
                          2: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: tqNs4spwilxsUWQA2h2bxKgLhaV/YWL9TyKrpLYZ/S0=)
                          3: D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.crl (hash: 5u9b6a/9AeCY/qZswVk/nKvwPU6NG6B8sjOYiOpI/E4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a8:da:fd:db:5f:59:45:28:39:7a:5e:f2:86:9d:e9:06:b1:47:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA
        Validity
            Not Before: Mar 11 04:54:36 2024 GMT
            Not After : Mar 12 06:46:36 2024 GMT
        Subject: CN=BDF587C68D8D7B910E221DED4A9849698EB44102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:70:f3:d0:a0:cb:8d:a5:cb:92:0a:67:e4:
                    c0:7a:89:72:51:17:e3:3f:c0:54:bb:e8:d7:46:a1:
                    b8:77:e5:26:ba:36:e9:d4:3a:7d:83:68:34:82:35:
                    4b:7d:97:4b:54:11:11:5d:53:0d:99:dd:09:ba:df:
                    64:b8:f2:a7:7b:80:84:49:b1:73:86:b3:fe:ac:75:
                    99:2d:fe:1b:80:31:3d:43:f9:37:cd:22:98:40:63:
                    29:82:27:67:9d:9c:67:0a:6c:fd:87:e0:30:b6:9a:
                    bc:e0:66:7b:f6:16:f8:1c:8a:53:c4:96:c2:c0:75:
                    d9:d7:fe:a3:7c:16:b6:ee:91:07:c9:46:c9:92:0d:
                    df:9f:b6:8e:14:a2:83:1a:61:4c:a5:bf:2e:5e:4a:
                    e6:c5:58:64:de:fa:1b:ca:f0:8d:6f:31:33:db:a2:
                    06:99:50:8e:38:b1:1c:9a:1a:49:f8:54:ad:3d:77:
                    3b:41:14:ce:35:bd:1d:9b:d2:4b:79:ab:22:11:eb:
                    b8:0f:13:c8:7e:10:24:94:90:51:4c:34:0f:fd:b9:
                    70:bd:97:bb:4c:ce:c9:bb:53:56:f7:ba:dd:93:3b:
                    1e:5a:d1:59:07:1f:22:5a:02:3f:76:99:b2:57:c1:
                    8f:0e:ae:56:59:04:7a:7b:95:4a:c0:99:62:ae:27:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F5:87:C6:8D:8D:7B:91:0E:22:1D:ED:4A:98:49:69:8E:B4:41:02
            X509v3 Authority Key Identifier:
                keyid:D7:E9:D6:D8:5A:E2:DE:C0:38:FF:ED:C1:DF:D2:20:C8:92:88:A8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:27:08:2d:21:c5:26:ac:60:c4:64:cc:19:b0:88:9e:61:
         37:7d:d4:09:09:a2:18:5e:29:a3:57:12:ff:03:43:5b:2d:05:
         ac:eb:04:8f:7f:97:45:fc:1a:4a:ee:cf:41:6c:65:e6:21:30:
         4c:60:83:48:45:bf:27:d7:0f:f6:fa:ba:e7:5f:21:20:d9:58:
         b2:3b:f2:52:1a:37:e5:6c:f5:dc:e9:75:1a:fe:2a:02:c1:b2:
         7e:2d:8a:5a:fa:5b:a9:30:47:d6:22:de:c0:8c:aa:4c:7d:d6:
         c0:80:e1:82:05:e0:94:c6:54:f6:2d:c5:ac:fe:76:3b:17:5d:
         26:1d:49:57:36:84:8e:a2:4b:48:39:66:21:ae:8b:8f:72:55:
         04:82:8c:8c:08:b5:cd:db:08:f2:bf:c2:3c:48:67:6b:98:e4:
         ad:25:05:9b:5a:41:ad:b5:63:69:22:fe:8f:99:b2:f0:25:3b:
         b7:83:fc:53:d2:43:7f:bf:eb:8c:14:8f:fe:7c:b2:d4:06:96:
         30:cf:80:a1:b3:f2:62:9a:7f:45:97:27:06:8c:20:b3:40:6c:
         ac:9e:cf:47:bf:f3:11:be:d8:da:ca:84:90:ef:dc:50:ae:4c:
         f8:ed:01:46:38:a8:3a:1a:4c:22:4f:bf:51:81:37:92:bf:b9:
         c0:b0:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----