Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.mft
File:                     D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.mft (raw, json)
Hash identifier:          LXUxPkKNewgP9CNGq08yrSS+H8ec4bgoh2ZVtRr4OUE=
Subject key identifier:   EE:E5:CD:4F:14:47:F5:6B:6D:3F:D3:8C:0E:99:47:59:A5:18:45:F5
Authority key identifier: D0:9E:DB:27:9C:C8:28:D0:E3:DC:91:22:4F:7F:BB:0E:69:BC:B1:94
Certificate issuer:       /CN=D09EDB279CC828D0E3DC91224F7FBB0E69BCB194
Certificate serial:       6D584D109FACE22F61203147F419749023C3301E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.mft
Manifest number:          6F
Signing time:             Fri 10 Nov 2023 00:24:21 +0000
Manifest this update:     Fri 10 Nov 2023 00:19:21 +0000
Manifest next update:     Sat 11 Nov 2023 01:47:21 +0000
Files and hashes:         1: 34352e372e3139322e302f32332d3234203d3e20323636363037.roa (hash: kUe124EzxOQGHrXg8GBkloDQB1UAoR++VRLh7FBAwik=)
                          2: 34352e372e3139322e302f32322d3232203d3e20323636363037.roa (hash: bwJw1Z7jB0sFqfuwXYxOFM5rjiu/BzzVim6xDiWrWrQ=)
                          3: D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.crl (hash: banV1PPHWsz7CLYFfQMCZoRMxzI1hot0WqTRfi0fubg=)
                          4: 323830343a336539343a3a2f33322d3338203d3e20323636363037.roa (hash: tmAoyXsG3h8sDsUoEwNwENJ4fhIq1KDu+/sLScZwigY=)
                          5: 34352e372e3139342e302f32332d3234203d3e20323636363037.roa (hash: NLMmvJC2vJQtGGJz11J5GGroN9oYwMJ0B0wnBySUCkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:58:4d:10:9f:ac:e2:2f:61:20:31:47:f4:19:74:90:23:c3:30:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EDB279CC828D0E3DC91224F7FBB0E69BCB194
        Validity
            Not Before: Nov 10 00:19:21 2023 GMT
            Not After : Nov 11 01:47:21 2023 GMT
        Subject: CN=EEE5CD4F1447F56B6D3FD38C0E994759A51845F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:6e:f7:2d:b7:1a:88:c4:61:ec:bf:59:16:
                    e7:56:aa:56:f6:87:b8:c7:f3:75:cc:5c:70:29:7a:
                    15:68:2c:ba:7e:ff:3b:6d:89:ec:a7:73:36:61:f3:
                    7a:86:64:e2:83:c1:59:86:b2:46:2e:43:8c:92:e1:
                    37:9a:6f:a2:1b:ad:b0:d4:49:21:e9:b7:d1:ee:32:
                    88:61:68:f4:d1:de:9d:7e:44:55:a7:a3:0f:22:85:
                    51:2b:76:5b:37:20:5b:b0:6b:c3:7e:87:2c:27:da:
                    b0:db:99:b4:69:d7:5e:c1:57:9f:e3:82:4b:db:de:
                    48:3a:82:80:e2:1e:41:31:9b:b6:bd:6f:06:68:c9:
                    f1:96:92:97:df:e4:5b:5e:8c:e0:29:cf:33:29:91:
                    c7:a6:8e:bb:02:63:82:b4:7b:8b:f0:f4:ca:fd:10:
                    f4:1a:d6:95:0c:21:46:83:e3:f4:ab:f6:77:eb:7d:
                    c6:20:d0:95:26:07:5a:60:f8:fc:39:d7:51:99:4e:
                    9c:be:77:61:23:a8:fb:dd:a0:47:0e:44:a1:73:b5:
                    f1:3f:d4:bd:d0:23:15:94:9b:7f:8f:43:9a:ea:34:
                    ff:4d:cf:32:3a:06:58:8d:c5:55:20:1e:d6:a7:14:
                    b2:07:34:18:1c:08:a2:0e:77:61:51:af:be:75:5f:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E5:CD:4F:14:47:F5:6B:6D:3F:D3:8C:0E:99:47:59:A5:18:45:F5
            X509v3 Authority Key Identifier:
                keyid:D0:9E:DB:27:9C:C8:28:D0:E3:DC:91:22:4F:7F:BB:0E:69:BC:B1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/D09EDB279CC828D0E3DC91224F7FBB0E69BCB194.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:66:bd:a2:b8:ff:1c:76:97:ab:3a:47:cb:ce:b1:6c:65:
         74:88:55:fb:38:5d:d6:56:34:b0:87:29:8c:2e:4a:7d:53:31:
         1f:e3:40:9c:dd:94:67:9f:d4:77:1f:80:ce:48:40:11:8a:db:
         90:5d:db:df:bb:d8:9f:f8:f2:32:a3:e8:37:97:63:b9:bb:30:
         28:e6:2b:d7:12:cd:8e:21:0b:22:f9:d8:2a:c0:27:8a:ba:2a:
         e6:e7:a8:18:71:75:a0:d0:4c:f3:ba:cb:38:aa:24:40:36:01:
         39:bc:ab:83:91:ef:0e:86:e6:db:b3:69:b8:e5:34:df:8f:83:
         95:3c:18:88:e2:b1:92:5c:c5:4f:f4:90:d6:13:f1:92:d6:d4:
         7b:73:90:1b:54:03:31:af:b0:59:77:ca:43:da:63:c6:25:25:
         ad:13:3e:05:c9:b7:a7:1f:ec:36:8d:67:d4:c1:73:05:45:fe:
         f1:96:24:4f:0b:04:76:ab:3e:f6:13:53:99:bd:2e:60:1f:f5:
         98:f6:16:1b:ac:91:fb:a0:a7:75:f2:2a:1c:3d:52:a1:d5:3a:
         1c:bc:73:90:28:65:09:e1:aa:49:af:4f:90:3d:43:8a:43:25:
         a3:69:b5:30:e1:28:16:e5:d8:e8:93:50:9a:2f:f9:21:68:9d:
         1b:94:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----