Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/7CE899C5D216A4124AAE990089106D0A238C23BE.mft
File:                     7CE899C5D216A4124AAE990089106D0A238C23BE.mft (raw, json)
Hash identifier:          Rq4GYge8H1NbstIoxmASUARcD1QrcMmSTZni1GmCHZg=
Subject key identifier:   E5:FD:8A:A0:2C:24:72:C7:D1:F7:5C:20:3E:07:AF:81:49:86:C7:EC
Authority key identifier: 7C:E8:99:C5:D2:16:A4:12:4A:AE:99:00:89:10:6D:0A:23:8C:23:BE
Certificate issuer:       /CN=7CE899C5D216A4124AAE990089106D0A238C23BE
Certificate serial:       14CA84778F6F04CEF8CE33FEF0110A2D6F56492C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE899C5D216A4124AAE990089106D0A238C23BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/7CE899C5D216A4124AAE990089106D0A238C23BE.mft
Manifest number:          01F6
Signing time:             Thu 16 Nov 2023 16:02:33 +0000
Manifest this update:     Thu 16 Nov 2023 15:57:33 +0000
Manifest next update:     Fri 17 Nov 2023 17:39:33 +0000
Files and hashes:         1: 7CE899C5D216A4124AAE990089106D0A238C23BE.crl (hash: tZYtlZaYIY67jV5HhT3bjnV7lx7kocfa9ojZ9MPdYRg=)
                          2: 34352e3233382e39362e302f32322d3234203d3e203532333230.roa (hash: +08yyQ4OKGpW6/rmZyPrTpBnZEYwmaG/GoPWG1YZ0DY=)
                          3: 323830343a346637633a3a2f33322d3438203d3e203532333230.roa (hash: wpqrel0tfvaV3qg/K/GdYKgPzb+rt/ch/FYflvMZK3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ca:84:77:8f:6f:04:ce:f8:ce:33:fe:f0:11:0a:2d:6f:56:49:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE899C5D216A4124AAE990089106D0A238C23BE
        Validity
            Not Before: Nov 16 15:57:33 2023 GMT
            Not After : Nov 17 17:39:33 2023 GMT
        Subject: CN=E5FD8AA02C2472C7D1F75C203E07AF814986C7EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:e6:78:32:e7:b4:bd:8d:4f:1e:71:09:de:
                    e6:a1:ad:38:5d:f8:7e:8a:90:a0:de:56:19:a6:a0:
                    51:bf:e6:8b:67:78:34:10:8a:7f:ca:ba:f7:3a:bc:
                    38:fe:5b:39:56:83:d4:fa:48:83:18:4d:19:34:50:
                    76:7c:3d:07:10:43:f4:92:25:38:41:bc:61:51:17:
                    b2:74:e7:29:64:6d:6c:b2:03:e4:70:ce:21:86:96:
                    b5:f0:2a:a9:5a:01:90:6f:6d:98:2f:91:60:0e:9b:
                    cb:ef:07:5b:b0:d9:8e:b6:79:24:ac:38:20:5e:26:
                    71:21:b2:10:a5:4d:df:fb:ba:ae:a6:3b:d1:21:65:
                    7b:db:e3:9e:3b:fd:88:dc:5f:d5:9e:3c:03:b5:30:
                    9a:71:06:72:90:45:4f:8a:f7:c9:2b:86:18:ec:c2:
                    5f:e9:72:47:32:d0:dd:10:1a:b9:ea:37:27:96:05:
                    3f:6c:62:80:b8:24:f9:6c:54:ca:2a:bd:76:00:e0:
                    bb:fc:fc:9f:3b:11:0e:15:62:52:ba:22:d0:a5:6a:
                    73:35:a1:64:fe:44:d7:a5:33:29:d0:18:17:34:b4:
                    9b:0f:c5:bb:af:5b:21:79:08:2e:00:5e:84:80:0e:
                    12:f0:88:a8:cb:a7:43:4f:bb:90:07:14:7a:76:78:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FD:8A:A0:2C:24:72:C7:D1:F7:5C:20:3E:07:AF:81:49:86:C7:EC
            X509v3 Authority Key Identifier:
                keyid:7C:E8:99:C5:D2:16:A4:12:4A:AE:99:00:89:10:6D:0A:23:8C:23:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/7CE899C5D216A4124AAE990089106D0A238C23BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE899C5D216A4124AAE990089106D0A238C23BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/7CE899C5D216A4124AAE990089106D0A238C23BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c7:d5:2c:9c:35:0e:0e:97:14:44:37:5a:6e:33:cc:c0:05:
         48:92:51:db:5d:a9:47:71:4b:af:67:39:dc:13:eb:9a:b8:76:
         0c:e3:b1:7c:93:93:c1:d3:65:87:68:ee:a8:75:3e:45:00:0d:
         e9:b7:81:36:2e:1d:71:63:aa:28:5e:64:a1:7d:c0:a7:b0:62:
         33:5e:f5:34:6b:fc:9b:20:c7:8d:e6:cf:3b:74:af:53:a0:06:
         2e:a9:a6:97:7a:b6:60:cc:2d:ad:b2:7e:77:4f:a9:6e:51:9b:
         dd:88:99:96:ca:bb:11:07:8e:50:7c:ee:14:6e:1d:16:ed:80:
         6b:6c:c1:a3:51:2e:53:d2:f4:9f:c5:df:8d:e3:b8:be:f1:15:
         6d:4d:47:1a:14:14:93:3d:b7:23:8b:9b:c0:70:52:87:e7:ff:
         87:30:0e:d5:91:e9:6f:1c:5a:ad:98:60:34:e5:29:5b:b7:0b:
         b2:52:08:f2:3d:78:1e:05:56:06:a4:5c:f6:0c:ae:66:23:87:
         1b:4a:55:a7:bb:47:e1:80:11:cc:49:ff:75:56:08:e0:43:64:
         34:50:9b:01:3a:cf:20:50:fd:13:bb:ab:62:18:b7:d6:29:9c:
         21:18:0b:f5:71:dd:5d:a7:3f:7c:99:64:4c:25:10:db:27:6e:
         5d:3f:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----