Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.mft
File:                     7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.mft (raw, json)
Hash identifier:          czc/jg46IvFXWKpa6Jsu9fVy6YUYg+mi9dgWFCd6JOY=
Subject key identifier:   9F:EA:08:C6:C5:7A:D4:50:4D:0B:9C:06:D1:F1:03:EE:EF:34:E8:9C
Authority key identifier: 7F:17:5C:48:BF:0E:2B:F9:2E:CE:B4:5C:8E:8D:5A:B9:31:AA:29:F4
Certificate issuer:       /CN=7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4
Certificate serial:       5C9DF52DE120CAACDFCC87341B441BAC53CC5CE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.mft
Manifest number:          0130
Signing time:             Tue 19 Nov 2024 02:46:30 +0000
Manifest this update:     Tue 19 Nov 2024 02:41:30 +0000
Manifest next update:     Wed 20 Nov 2024 05:11:30 +0000
Files and hashes:         1: 323830343a3565383a3a2f33322d3332203d3e20323632353439.roa (hash: pAlHKBYYSzqExG3PMCNV0asxyPxoz6Gr/3wqxbNAYRI=)
                          2: 7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.crl (hash: YqhhnI5jNUCyZgsGpNS5b5gmKb/zI9JWBciIxx/SYx0=)
                          3: 3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa (hash: qpM6RjAKEV2LW6zD/bzz/vixbiov+nvNtFDniTM0Lc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9d:f5:2d:e1:20:ca:ac:df:cc:87:34:1b:44:1b:ac:53:cc:5c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4
        Validity
            Not Before: Nov 19 02:41:30 2024 GMT
            Not After : Nov 20 05:11:30 2024 GMT
        Subject: CN=9FEA08C6C57AD4504D0B9C06D1F103EEEF34E89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:db:9b:1a:fd:19:fd:5e:89:3e:4c:ad:b8:
                    c6:d5:0c:88:c1:ef:e7:87:19:2f:63:7f:c3:31:3d:
                    6c:cf:76:b9:f5:cc:d1:61:88:a2:a0:95:69:eb:d8:
                    13:75:c3:0e:cc:ac:b2:b7:22:a4:22:2c:8f:89:49:
                    ea:39:71:7d:a6:52:ae:26:82:46:74:22:a9:49:51:
                    08:0f:dd:df:db:86:c8:e0:41:e4:62:08:d3:00:65:
                    f5:34:66:df:da:64:91:83:09:a5:d8:94:c6:22:76:
                    d8:b5:27:e1:eb:b6:af:fe:34:7a:72:7d:0d:ad:75:
                    26:b7:b4:bd:d4:80:79:98:f4:bb:7c:e9:2c:b3:74:
                    c6:ba:c0:21:71:83:e1:69:32:00:9e:3c:18:8c:7b:
                    de:4c:79:1f:20:4a:e0:bc:f6:03:ff:7c:71:f4:e8:
                    e2:ba:d2:24:b9:de:19:94:6c:81:12:6d:48:34:71:
                    ff:39:5a:64:b7:1f:1b:b5:a4:11:b0:50:92:66:dd:
                    c7:af:e1:13:47:a3:92:62:ee:64:2c:d7:c5:94:58:
                    b3:b0:d2:3c:ed:36:4d:23:29:f0:bf:e7:22:aa:f7:
                    b0:6d:00:17:8c:f9:57:39:bf:86:98:61:54:79:29:
                    65:45:8d:0e:f7:c1:9d:e1:2c:d3:ff:64:9a:57:cb:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EA:08:C6:C5:7A:D4:50:4D:0B:9C:06:D1:F1:03:EE:EF:34:E8:9C
            X509v3 Authority Key Identifier:
                keyid:7F:17:5C:48:BF:0E:2B:F9:2E:CE:B4:5C:8E:8D:5A:B9:31:AA:29:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:2b:41:4e:57:ba:76:fe:b9:36:13:de:46:a6:45:c7:17:17:
         59:1d:be:66:b8:e4:60:d1:1e:0e:c7:56:5a:7e:a7:a4:28:f0:
         fe:2f:a6:cc:ac:a3:d2:c6:38:44:db:dc:0d:89:ac:51:36:ae:
         6b:49:f9:3b:b2:1d:76:94:05:3d:f2:cc:79:72:ec:a7:64:e7:
         7b:71:af:01:b2:dc:07:d5:ea:fc:08:1d:83:02:d8:4f:fa:14:
         dd:9b:43:05:bf:dc:e5:ad:3f:f1:e3:1f:92:2a:8d:dd:e1:f6:
         26:e1:9c:5d:a9:12:65:ae:07:d5:b4:ca:2f:c2:02:b8:f4:65:
         80:a4:26:44:7e:ac:65:46:72:88:78:e0:46:30:8e:2e:72:c4:
         35:0a:41:a4:17:80:8e:61:4a:8a:b4:19:a4:51:b6:50:49:b5:
         51:c8:7b:c4:e5:22:44:9b:4e:bb:da:6b:0c:47:bc:5c:fe:df:
         5d:2d:d3:83:4c:72:ab:ff:5e:87:d3:5b:2c:56:27:54:94:ad:
         bb:cb:3a:bf:b0:10:95:c0:2a:e1:c1:6d:2a:91:95:ac:70:99:
         dc:ed:78:a3:49:2f:b2:73:22:56:02:c1:ef:43:0a:43:60:6e:
         81:f3:d6:c2:d6:86:5c:df:7f:71:8d:08:54:6e:81:6c:b6:02:
         dd:fe:3a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----