Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.mft
File:                     AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.mft (raw, json)
Hash identifier:          oQj/kF5zBch9SkEeDgVh12ICm1qWvBAwxuM1CVyLv+g=
Subject key identifier:   39:F0:80:47:D4:29:E9:5C:B2:C4:74:2A:C6:66:A7:F9:16:C6:80:D7
Authority key identifier: AD:27:BF:71:D3:4E:93:7B:91:B3:AF:FE:7B:A5:95:DA:A2:8D:B3:9C
Certificate issuer:       /CN=AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C
Certificate serial:       520DFDCBFA41829ED631D5AD40D689672955A0F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.mft
Manifest number:          7B
Signing time:             Mon 15 Apr 2024 09:20:21 +0000
Manifest this update:     Mon 15 Apr 2024 09:15:21 +0000
Manifest next update:     Tue 16 Apr 2024 09:22:21 +0000
Files and hashes:         1: AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.crl (hash: VEuUg/rk3OlcNoL5ZwDIjyG0aO/nDaBpS+R+h6vt2Nw=)
                          2: 323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (hash: aBmm+l7G8zq+6Dh+jr1cRCSYqzpivS6d6Q/OPAVC0zI=)
                          3: 3138312e3138392e36342e302f32322d3332203d3e20323731333530.roa (hash: RLq1UvJ7V17mOWxGhotplfGkYILC4x1G/6hUy0spuk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:fd:cb:fa:41:82:9e:d6:31:d5:ad:40:d6:89:67:29:55:a0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C
        Validity
            Not Before: Apr 15 09:15:21 2024 GMT
            Not After : Apr 16 09:22:21 2024 GMT
        Subject: CN=39F08047D429E95CB2C4742AC666A7F916C680D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:03:5b:62:34:2c:ec:53:d2:43:f7:94:81:
                    d4:d6:7a:7d:e0:ff:22:b2:1b:ee:ca:45:96:77:4e:
                    c4:aa:27:3b:04:3e:70:da:08:80:1c:71:d7:57:e3:
                    70:dc:63:79:e3:63:d9:55:2d:09:ff:48:fa:72:b7:
                    1a:3e:b0:1c:a5:f5:33:fa:a3:f3:bb:de:cb:c1:d3:
                    40:3d:ea:0d:32:06:92:40:de:96:ee:27:93:5c:34:
                    cc:10:4a:3f:92:86:0d:a5:35:7f:23:d8:b0:b2:96:
                    8d:52:e7:da:ea:da:37:d3:ca:7c:de:4d:ad:e8:82:
                    03:e7:8c:0b:3a:b2:4f:b1:64:0e:65:1f:38:07:11:
                    73:9f:8c:fa:a5:8b:c1:66:7a:5d:da:f6:99:85:65:
                    92:5f:95:b9:d7:b0:76:bc:54:9e:64:09:23:b9:1a:
                    cc:ee:60:65:ad:bf:98:b5:ae:bf:07:8f:a0:be:8d:
                    5a:92:c3:f0:c6:b2:fc:a7:31:bc:a4:3f:0b:00:6d:
                    67:66:27:51:6a:fc:35:9f:56:db:b7:61:fe:7e:82:
                    bf:bb:a2:15:8b:0c:ed:96:4c:9f:5a:74:6c:26:3c:
                    c0:28:48:c1:d4:48:24:fb:09:0e:1f:94:cc:55:ed:
                    74:d8:2a:f4:1b:a9:75:b1:e5:f8:6a:f6:7a:97:86:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F0:80:47:D4:29:E9:5C:B2:C4:74:2A:C6:66:A7:F9:16:C6:80:D7
            X509v3 Authority Key Identifier:
                keyid:AD:27:BF:71:D3:4E:93:7B:91:B3:AF:FE:7B:A5:95:DA:A2:8D:B3:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:ae:fb:7c:3c:2d:78:29:29:32:e9:83:3e:43:1c:72:84:
         da:4e:16:39:b3:b7:3e:31:91:71:51:32:70:48:1c:d1:fd:f3:
         5e:38:0c:e9:3e:ce:ba:e3:b3:5d:51:03:68:24:a9:0c:45:31:
         64:8f:52:74:96:84:8a:e3:05:ae:66:4f:4a:3f:1e:02:2c:af:
         04:61:ea:05:a7:1e:8d:f4:62:75:b0:c6:62:6b:0a:48:c7:27:
         69:70:a5:c8:75:63:91:87:5b:73:f3:48:a4:d2:58:d4:7e:18:
         41:de:87:59:9c:d7:41:48:a4:b0:35:a6:d8:6c:32:91:00:ca:
         1d:06:bb:3f:84:26:13:fb:f1:2a:50:eb:a4:d2:ed:df:87:9f:
         b2:ac:6a:8b:60:64:6f:6b:5c:47:4e:85:c0:7d:00:f3:1f:33:
         42:eb:60:96:8d:18:26:e3:86:4d:0f:d0:e9:79:24:b3:df:45:
         9c:64:16:e2:5a:c2:c5:79:03:a1:29:84:de:08:cd:fc:7a:c0:
         5f:8d:ee:ab:ab:ba:0b:5e:cd:86:9a:b8:d6:9a:90:b5:1a:67:
         5d:9a:53:f5:1e:7a:4c:30:72:cd:e6:7d:d9:93:4f:33:71:d7:
         fb:ec:e1:cd:f4:f8:6b:81:fc:83:21:53:63:a6:b5:66:b5:a5:
         ec:d8:81:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----