Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.mft
File:                     798DB7B7794E3C243A83DCF5019E600D453E6AFC.mft (raw, json)
Hash identifier:          kyR1wzobUwu10VfP0zvIY7vOYpPo38pxYvYasGU44wM=
Subject key identifier:   DF:F9:B9:81:4B:4B:D7:1B:9A:34:B5:A2:80:FF:90:3F:F3:30:40:2B
Authority key identifier: 79:8D:B7:B7:79:4E:3C:24:3A:83:DC:F5:01:9E:60:0D:45:3E:6A:FC
Certificate issuer:       /CN=798DB7B7794E3C243A83DCF5019E600D453E6AFC
Certificate serial:       07B1AF50BF621A55F20F1550DE56CA24A8D2DEAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.mft
Manifest number:          0342
Signing time:             Mon 15 Apr 2024 02:23:54 +0000
Manifest this update:     Mon 15 Apr 2024 02:18:54 +0000
Manifest next update:     Tue 16 Apr 2024 05:02:54 +0000
Files and hashes:         1: 3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa (hash: fOS4F/jFapQW4yJ9ek4WI+LvCBmqtA+yNeUmtabM9XE=)
                          2: 798DB7B7794E3C243A83DCF5019E600D453E6AFC.crl (hash: gbnSfGjdKa8QPhjfjXteOqKqGqayrqDil188WjrAlkU=)
                          3: 323830343a313764633a3a2f33322d3438203d3e20323633323535.roa (hash: uHwEdVaXRQjBCKY/Wq5USrZhpKk+vPIkDELhokLY0QI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b1:af:50:bf:62:1a:55:f2:0f:15:50:de:56:ca:24:a8:d2:de:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798DB7B7794E3C243A83DCF5019E600D453E6AFC
        Validity
            Not Before: Apr 15 02:18:54 2024 GMT
            Not After : Apr 16 05:02:54 2024 GMT
        Subject: CN=DFF9B9814B4BD71B9A34B5A280FF903FF330402B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:72:5e:82:cd:46:2a:08:66:38:ca:61:5f:
                    5d:64:70:c0:e8:cc:0c:bc:58:cd:f6:6a:3e:c2:92:
                    5b:c8:e3:3f:c0:e5:60:93:b9:00:96:39:c0:63:c6:
                    5b:a7:55:43:c7:4a:38:41:d6:ef:dd:68:ef:7d:d6:
                    d1:e3:18:a1:b9:13:cb:cc:ab:16:33:f1:d9:72:59:
                    93:9d:ad:f7:83:48:77:d1:ea:1f:a3:a7:c4:ae:fc:
                    03:a2:38:f2:86:8a:eb:21:62:5e:4b:61:34:97:de:
                    a8:8b:54:93:13:f2:24:d3:bd:32:53:46:d7:dc:09:
                    17:23:53:d5:09:80:7d:bd:86:f6:22:15:93:8a:00:
                    f6:14:49:47:3c:c1:f6:46:15:4c:63:f6:c3:f0:85:
                    d4:34:30:83:03:b2:a8:d6:ba:5f:ed:93:67:7c:02:
                    0a:21:3d:2d:33:26:62:20:ed:b5:bd:83:38:ba:a1:
                    b1:55:16:56:09:52:33:1f:6a:69:8b:9a:a3:67:6f:
                    21:88:80:80:88:4c:5b:17:53:fd:71:69:40:de:4d:
                    cc:d0:df:d9:2a:13:4e:af:b4:21:48:9f:71:54:6d:
                    fe:eb:bc:50:49:9c:3c:56:c5:b7:b1:08:e0:86:e0:
                    20:5b:ca:23:ea:a0:da:37:96:51:b0:ae:46:32:68:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:B9:81:4B:4B:D7:1B:9A:34:B5:A2:80:FF:90:3F:F3:30:40:2B
            X509v3 Authority Key Identifier:
                keyid:79:8D:B7:B7:79:4E:3C:24:3A:83:DC:F5:01:9E:60:0D:45:3E:6A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d9:7d:8c:60:ba:fb:14:17:29:d9:27:b9:20:43:d4:56:85:
         c7:a0:b4:43:92:ed:a2:75:6d:84:2e:2f:59:94:1d:5c:a0:c8:
         a6:98:dd:31:7f:06:8c:0f:18:82:18:f5:4d:2f:03:9f:49:53:
         08:6e:6a:66:61:f5:85:93:52:9f:5f:54:8b:be:54:e5:21:be:
         34:86:30:18:c9:aa:c9:0c:f2:ba:e8:47:52:99:e8:6a:c9:90:
         b9:bf:a1:fb:0a:f2:8e:57:01:b3:83:df:62:6d:ca:08:b9:b3:
         64:5f:c1:2e:41:23:21:08:9e:af:5a:c5:87:58:0e:8e:df:8f:
         40:89:66:52:5a:d2:7b:08:a4:1f:1c:68:41:8a:15:ce:da:15:
         c5:e0:fe:91:0a:40:d3:5f:79:0a:ba:c1:e6:3e:48:6e:d5:1d:
         93:61:de:15:48:a6:bb:18:50:70:31:54:98:ae:76:44:1c:59:
         93:90:ab:49:8f:99:db:db:0a:aa:e5:49:03:0a:a6:ed:7f:42:
         22:ff:95:8e:88:f4:85:fc:a2:cf:ef:16:4e:3e:4c:ec:60:9c:
         e3:42:ef:78:23:bd:fe:98:75:bf:9c:82:4c:99:0a:d3:8c:12:
         2b:27:c1:ff:be:ff:0b:ef:f5:37:6f:7c:e8:e5:89:40:95:2d:
         d1:42:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----