Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/586B917AC6718A218B67C05C808ECDDBEB386DB0.mft
File:                     586B917AC6718A218B67C05C808ECDDBEB386DB0.mft (raw, json)
Hash identifier:          WM5K90NAAVtQxFgC1PjWjvAxNNmJquLzbFO0P/09NWE=
Subject key identifier:   0C:5A:1E:41:42:2C:8E:7C:F8:00:8A:FA:A5:B2:DD:46:27:F3:3A:10
Authority key identifier: 58:6B:91:7A:C6:71:8A:21:8B:67:C0:5C:80:8E:CD:DB:EB:38:6D:B0
Certificate issuer:       /CN=586B917AC6718A218B67C05C808ECDDBEB386DB0
Certificate serial:       AA8282E6773F74785BBFE571C6D2A833B55CFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/586B917AC6718A218B67C05C808ECDDBEB386DB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/586B917AC6718A218B67C05C808ECDDBEB386DB0.mft
Manifest number:          16
Signing time:             Sat 13 Apr 2024 10:32:27 +0000
Manifest this update:     Sat 13 Apr 2024 10:27:27 +0000
Manifest next update:     Sun 14 Apr 2024 14:20:27 +0000
Files and hashes:         1: 586B917AC6718A218B67C05C808ECDDBEB386DB0.crl (hash: 5Oq0SRgA0QO+8QlGTRkvbuYMVOGZfKMM5uVBdc3YRxA=)
                          2: 323830343a343535633a3a2f33322d313238203d3e20323636393231.roa (hash: S15VK+d4yT133JVDEryNT84eC8mgrVBA90/XduF0BVs=)
                          3: 34352e3232352e33362e302f32322d3332203d3e20323636393231.roa (hash: HNgC4eo5F6ad7Ls+yzqnH1iq6WNxVZGkMwSVoduBehM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:82:82:e6:77:3f:74:78:5b:bf:e5:71:c6:d2:a8:33:b5:5c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586B917AC6718A218B67C05C808ECDDBEB386DB0
        Validity
            Not Before: Apr 13 10:27:27 2024 GMT
            Not After : Apr 14 14:20:27 2024 GMT
        Subject: CN=0C5A1E41422C8E7CF8008AFAA5B2DD4627F33A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:78:61:92:7a:19:bd:cc:38:0f:f6:0c:13:
                    2d:ba:cc:50:c0:a5:1a:47:c4:85:ef:0d:67:41:ba:
                    6e:0c:e0:88:d1:fb:cf:f4:75:cb:5c:01:f8:ed:49:
                    bd:d3:94:c2:6b:df:f9:24:5a:ee:45:53:55:45:10:
                    de:7e:39:51:7d:27:e0:51:49:ce:10:e9:26:36:96:
                    f5:14:fe:28:9b:c6:84:e8:fb:23:af:ed:ea:3c:21:
                    df:f7:b8:81:a7:9a:f9:8b:95:de:d1:0d:95:34:ba:
                    0c:c5:6d:03:5b:e6:97:02:c6:e5:d5:dd:47:79:fc:
                    71:7d:e1:22:b7:ea:20:bc:dc:85:22:ae:86:d3:8d:
                    ca:f7:78:5c:a0:0d:21:8f:3c:e6:aa:e1:20:d9:c3:
                    d5:e2:51:4e:6b:ac:b5:39:9a:f1:f3:23:a7:fd:30:
                    0e:eb:b2:1c:fc:f3:62:04:86:b2:98:90:1e:60:f2:
                    85:e1:29:bd:1a:63:07:f8:fe:a1:2b:5c:2f:7f:66:
                    d9:29:38:ba:78:c2:e1:1a:e8:ea:84:8d:a1:68:ed:
                    62:01:14:b1:e2:02:81:15:bd:71:bd:91:5c:b8:97:
                    6f:96:65:02:f7:6a:62:22:f9:67:0d:c6:27:fe:fa:
                    11:78:a7:c0:8e:98:b9:31:bf:c6:e9:32:87:bb:8d:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5A:1E:41:42:2C:8E:7C:F8:00:8A:FA:A5:B2:DD:46:27:F3:3A:10
            X509v3 Authority Key Identifier:
                keyid:58:6B:91:7A:C6:71:8A:21:8B:67:C0:5C:80:8E:CD:DB:EB:38:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/586B917AC6718A218B67C05C808ECDDBEB386DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/586B917AC6718A218B67C05C808ECDDBEB386DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6XthkqKdgpnJrAEEQUAb9zgaMbfrhdjrtPDj5vpSL5g/0/586B917AC6718A218B67C05C808ECDDBEB386DB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:9b:ae:7f:48:18:0a:48:53:5c:a7:0e:d4:89:92:fb:3a:
         6b:c9:23:bd:65:ed:21:1d:6a:99:4a:67:c0:b0:51:e5:f3:99:
         7a:8a:83:e9:e0:f8:27:79:07:15:93:e8:9d:c7:c5:29:19:e0:
         38:67:03:00:aa:e8:ca:26:4a:97:dc:c8:36:1d:a7:96:dd:74:
         77:bd:d7:7f:97:dd:d6:ed:98:7e:a3:d5:ea:40:eb:1e:c4:cb:
         2b:76:b7:8e:f4:27:7c:51:73:48:79:9c:9d:ea:3e:fa:cf:be:
         93:2e:35:68:c1:9b:ee:71:20:03:5c:3e:22:06:06:ce:52:1e:
         a8:46:f4:48:6b:30:51:54:14:c4:c3:91:80:fb:9e:f9:c2:31:
         c0:92:ea:9b:1d:92:cb:34:49:a1:0a:a0:6e:7c:d2:25:5c:79:
         f4:3a:5d:ac:2d:6b:3d:dd:54:f5:09:89:aa:c5:ed:1e:a1:07:
         01:22:25:4d:47:0e:a7:74:e6:b1:a4:76:f3:e9:3e:3f:5f:e5:
         09:0e:ea:1b:ad:6a:02:13:0a:cd:db:a0:6b:49:ef:b4:7f:97:
         b1:62:2b:e9:ec:26:6e:61:5c:e5:29:32:4c:35:5c:6b:11:40:
         eb:0b:57:e0:29:f1:39:32:b5:42:24:d9:ad:02:cb:64:f8:aa:
         67:02:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----