Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.mft
File:                     3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.mft (raw, json)
Hash identifier:          /BtrgowQaNlPfZRAQy/h46veN+vXHa5Oacx0JekBMGs=
Subject key identifier:   C3:00:0A:3A:56:81:BB:F2:F3:9D:D0:9B:55:A4:62:B1:77:DA:76:07
Authority key identifier: 3F:F7:C5:31:CE:45:1A:F8:AF:B7:34:38:34:FB:D6:82:B2:CE:2E:BB
Certificate issuer:       /CN=3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB
Certificate serial:       06581C72DA9965196AA04939C8035F9E2586F391
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.mft
Manifest number:          7B
Signing time:             Thu 04 Jul 2024 06:30:01 +0000
Manifest this update:     Thu 04 Jul 2024 06:25:01 +0000
Manifest next update:     Fri 05 Jul 2024 09:51:01 +0000
Files and hashes:         1: 3138372e3130332e302e302f32302d3230203d3e203533303938.roa (hash: d23SMgSN9QeJmhH+/4/js0N3etvzkech6Fqsm6YoYhY=)
                          2: 3138372e3130332e392e302f32342d3234203d3e203533303938.roa (hash: uRHemtw5VnV/9mWQ4R/TNZ2d8soDey7f+rElXdTEYk4=)
                          3: 3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.crl (hash: tMn68vk4PNkdFNZImU1Cf9aU8kkfXL0zMFnmK/ZSjbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:58:1c:72:da:99:65:19:6a:a0:49:39:c8:03:5f:9e:25:86:f3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB
        Validity
            Not Before: Jul  4 06:25:01 2024 GMT
            Not After : Jul  5 09:51:01 2024 GMT
        Subject: CN=C3000A3A5681BBF2F39DD09B55A462B177DA7607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:84:d0:46:20:22:60:6f:30:00:43:c5:68:
                    ce:91:31:ad:8c:42:c8:0c:42:7b:c2:a7:9a:ac:47:
                    71:fb:fc:61:dd:7a:8e:ac:07:44:3f:da:95:62:10:
                    6a:d2:1a:91:22:81:40:20:4f:2f:00:0f:fa:26:a0:
                    46:58:d7:47:79:50:8a:d8:8c:9a:cd:85:c6:72:a7:
                    25:87:c9:4f:f0:07:86:bc:9f:e7:b2:0a:37:34:ca:
                    68:6d:a3:cf:2c:42:a9:c7:10:70:b4:2e:0f:5d:89:
                    8c:c0:eb:21:ab:eb:6e:fd:cd:a7:7b:df:d5:f3:f3:
                    a3:89:f9:3c:c0:85:81:59:7e:b8:87:3c:ed:e2:99:
                    e3:cf:6a:74:92:81:e8:fa:f9:f7:f8:25:06:fd:60:
                    4a:cf:07:93:33:3f:47:be:f8:40:db:7c:e9:c4:c1:
                    11:6a:43:ca:8d:ad:29:56:fb:77:60:8f:d9:19:51:
                    c6:1b:66:15:91:74:e8:22:ff:4e:10:4d:5a:61:ae:
                    2b:8f:22:28:c4:1b:01:8c:3f:b6:58:4d:6a:56:04:
                    9a:3d:91:df:ef:a3:dd:24:10:60:7a:eb:eb:a9:6e:
                    e5:9a:c8:a3:c9:f0:32:70:2b:da:93:d2:d8:f8:01:
                    72:33:d9:88:e3:3b:e5:85:18:d5:14:ca:b6:10:64:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:00:0A:3A:56:81:BB:F2:F3:9D:D0:9B:55:A4:62:B1:77:DA:76:07
            X509v3 Authority Key Identifier:
                keyid:3F:F7:C5:31:CE:45:1A:F8:AF:B7:34:38:34:FB:D6:82:B2:CE:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:48:d6:9d:bf:8d:c1:68:d6:12:97:b5:81:54:47:31:15:02:
         3e:c7:76:50:14:9c:3e:ef:4d:43:3d:79:fa:6d:4a:ec:05:0a:
         0a:bc:aa:27:e3:c5:6d:76:59:59:fe:9f:4a:22:98:bb:b0:cd:
         bc:98:59:27:2c:5a:0f:6e:29:a9:11:dd:f2:d5:85:2b:a4:c7:
         d1:13:3a:76:60:d4:c3:0f:e1:b4:f8:bb:28:9f:8c:64:24:3c:
         b4:2d:c3:b7:c9:cd:8d:a6:55:47:e1:b2:6e:cc:21:c6:ce:8b:
         a5:02:23:19:00:87:75:b2:71:1d:00:79:3c:32:0d:97:22:0f:
         71:eb:7b:27:2e:1a:21:e4:5b:60:ec:50:d2:5c:c6:e1:49:95:
         79:41:9e:11:aa:12:10:b6:94:66:5a:0d:5f:52:bf:1e:d8:fb:
         fe:ef:ae:37:5f:2f:60:22:a5:4b:04:f2:4b:e5:3a:dd:f3:9e:
         f9:cb:6f:9c:63:f4:38:2b:12:d7:74:9f:74:62:dd:f0:40:bf:
         b9:b3:18:3c:cd:9e:71:05:23:3c:e9:35:e5:27:fb:71:3f:f5:
         87:64:d3:57:eb:25:e3:1e:26:e5:71:b6:44:3d:25:97:dd:d0:
         57:4f:bf:0f:e1:62:7f:a8:04:32:0d:0a:b8:88:51:d8:6a:05:
         ef:27:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----