Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.mft
File:                     7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.mft (raw, json)
Hash identifier:          3kW1kv+D3Bu3X3SQaCRqtgB4aVsyfXF+APkFzEs5BT8=
Subject key identifier:   ED:4A:90:0E:55:52:21:91:B6:7C:91:07:58:90:32:B9:59:4F:B1:8F
Authority key identifier: 7F:A6:4C:74:EE:FA:83:8E:1B:47:D7:2D:86:A3:F6:98:D4:C9:5E:F3
Certificate issuer:       /CN=7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3
Certificate serial:       1F74E95941155FEE60B81C32EA9C6E5ED624CE56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.mft
Manifest number:          0427
Signing time:             Mon 15 Apr 2024 11:05:58 +0000
Manifest this update:     Mon 15 Apr 2024 11:00:58 +0000
Manifest next update:     Tue 16 Apr 2024 13:11:58 +0000
Files and hashes:         1: 3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (hash: JJ2nfkXYP8iC/osA/E8JNFAcDT/HOKBfgy7ZHwtWokg=)
                          2: 7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.crl (hash: goIQsCCtXrxsFUaC/ptUEN4Hrm+Ru6PlINziGF9ib9A=)
                          3: 323830343a343130343a3a2f33322d3336203d3e20323635393938.roa (hash: bbOWLCxbUu3zTcbbFgVOjO1Jdtc8r9mqYDC01DrsuSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:74:e9:59:41:15:5f:ee:60:b8:1c:32:ea:9c:6e:5e:d6:24:ce:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3
        Validity
            Not Before: Apr 15 11:00:58 2024 GMT
            Not After : Apr 16 13:11:58 2024 GMT
        Subject: CN=ED4A900E55522191B67C9107589032B9594FB18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:82:f5:46:d8:50:54:df:87:e1:1c:4d:1f:
                    c1:1f:82:f6:a3:01:0f:4a:b2:64:55:ca:0c:ad:a5:
                    1c:72:66:7e:d8:df:6e:bf:9c:36:66:dd:01:05:52:
                    78:2c:f9:cb:0c:7b:ea:22:a3:3f:af:3f:d6:ea:d8:
                    fe:8b:18:f8:b8:d7:ea:85:1d:99:81:1c:28:ab:82:
                    85:2b:01:74:08:f8:51:ea:1f:a0:9d:3a:40:b1:23:
                    c3:f9:02:d7:d1:64:fb:24:c4:98:b6:41:8e:08:87:
                    07:d9:dd:74:7f:78:13:7f:4c:53:ed:05:a0:8e:54:
                    a6:12:68:f5:2d:86:7c:da:25:b1:0b:c6:c2:44:2b:
                    d9:25:f6:7a:32:a1:6c:8b:92:42:e0:67:05:01:d6:
                    2d:f7:d5:aa:47:36:a2:6d:3c:e0:37:06:71:13:b2:
                    4f:71:87:10:01:6a:ed:de:07:a8:df:8c:e5:47:6d:
                    7d:57:da:a1:07:f5:e8:be:57:35:e1:69:2f:3a:ac:
                    6f:e2:8e:bd:44:0c:42:9e:ba:bf:ae:db:5e:8f:35:
                    db:37:94:2e:2b:28:4e:62:7b:b7:09:6c:93:6b:ba:
                    63:e2:d6:6e:93:59:24:2d:43:7c:64:bd:c5:29:08:
                    fd:c5:55:3b:18:1d:fe:ae:09:49:d1:7a:00:22:76:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4A:90:0E:55:52:21:91:B6:7C:91:07:58:90:32:B9:59:4F:B1:8F
            X509v3 Authority Key Identifier:
                keyid:7F:A6:4C:74:EE:FA:83:8E:1B:47:D7:2D:86:A3:F6:98:D4:C9:5E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/7FA64C74EEFA838E1B47D72D86A3F698D4C95EF3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b7:89:5d:52:d4:aa:8d:b9:86:69:87:97:ab:fe:cd:18:ad:
         50:41:c6:ac:9f:e8:2d:77:33:1b:bd:4d:90:8a:34:c2:c6:03:
         c4:51:b9:d9:3d:45:2c:7f:a6:ab:d3:d0:09:f6:55:4e:4b:4b:
         88:26:53:ef:9b:2a:90:cf:c2:bd:69:fb:12:e8:fc:1e:29:9a:
         01:cb:d3:85:25:b1:2c:b7:92:63:d3:db:f0:f6:01:6c:05:b0:
         64:9f:8c:f9:9e:60:f2:c7:d1:49:54:95:d9:18:7c:7c:22:6d:
         c9:17:32:4a:26:6d:fb:ed:e9:f3:42:aa:c2:be:ed:2a:11:1a:
         d9:e9:50:de:60:18:03:db:91:8b:e4:db:c5:da:3d:2b:ce:b7:
         c2:c7:4b:a1:c7:f6:76:38:54:8b:54:33:e0:2c:41:3d:66:dc:
         69:05:a9:c7:79:11:f0:4e:6e:09:91:ed:18:22:e9:aa:8d:dc:
         b2:1b:87:8a:e4:91:bd:6e:f5:fa:d2:1c:34:1a:82:f2:62:58:
         56:35:e2:fc:03:b7:11:67:c0:94:29:66:75:8c:8b:9d:7d:a9:
         f5:2b:92:ec:ef:49:cd:8a:ee:8c:71:af:f6:55:f5:c9:72:18:
         5b:f2:aa:69:50:57:f1:5c:62:92:0c:3d:81:72:93:b2:eb:ea:
         10:62:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----