Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.mft
File:                     98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.mft (raw, json)
Hash identifier:          TSVWUm66LHM6vYbfBuXbcUFxLtH37Thui+2f62Nvsus=
Subject key identifier:   AC:1E:5C:F8:65:F1:FE:F0:13:4A:92:E1:67:99:FF:4A:1B:EA:0B:E3
Authority key identifier: 98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Certificate issuer:       /CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
Certificate serial:       4E7AD83EB8212DED175F76BB6657F47180F3C1E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.mft
Manifest number:          01C2
Signing time:             Mon 15 Apr 2024 04:33:42 +0000
Manifest this update:     Mon 15 Apr 2024 04:28:42 +0000
Manifest next update:     Tue 16 Apr 2024 07:26:42 +0000
Files and hashes:         1: 3137392e36332e3131362e302f32322d3235203d3e20323731353434.roa (hash: GwyZJShPUApbCNw9DoihpFmBl9tLL9uSDT+X7G7+wik=)
                          2: 98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl (hash: dLSEe9Ba21lIz5Zh9sPjCCULjxlw6qN6Iay+yX9HKuY=)
                          3: 323830343a376432633a3a2f33322d3336203d3e20323731353434.roa (hash: Xi6d7ZKSvLya56ftXDaDT/Hk8ahmfYwwf+s+yQSuxc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7a:d8:3e:b8:21:2d:ed:17:5f:76:bb:66:57:f4:71:80:f3:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Validity
            Not Before: Apr 15 04:28:42 2024 GMT
            Not After : Apr 16 07:26:42 2024 GMT
        Subject: CN=AC1E5CF865F1FEF0134A92E16799FF4A1BEA0BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:fe:03:c0:9d:68:bf:5d:b0:b8:1d:8b:a1:
                    04:45:e4:0d:84:31:ae:ed:f6:db:9b:45:dc:07:87:
                    74:e0:a8:a0:89:f3:cb:ea:0f:31:16:d3:d1:05:a0:
                    76:5c:05:d3:f1:d0:af:05:cd:af:a2:fc:78:03:06:
                    b9:70:f8:0c:8d:a5:30:02:31:03:fc:a1:25:12:36:
                    4b:80:0f:1b:00:9d:58:a2:7f:5c:54:8d:d3:5b:5f:
                    77:a5:5b:16:6f:ee:7b:96:b0:7a:9d:d7:2e:24:b3:
                    34:af:4d:f1:f8:00:5a:55:71:5a:aa:dd:b8:ca:74:
                    29:70:d5:df:b0:4b:c7:8e:2d:12:5a:8c:31:69:94:
                    2c:3a:c1:9b:0e:2c:b3:ee:07:1d:43:72:8f:c6:b2:
                    27:52:3e:bb:5a:a8:fe:66:3a:00:44:73:6c:8c:f8:
                    b2:f3:28:2a:c3:0d:3d:d8:8e:80:7b:28:c6:15:ea:
                    33:22:d0:f2:ca:e0:ec:3d:1d:3c:62:46:d2:88:fb:
                    54:cd:54:d0:65:8f:55:22:06:93:1a:8b:5a:19:ac:
                    54:2d:98:f0:bb:1e:2b:9c:6c:a6:9d:53:69:b8:51:
                    10:c9:88:3a:ae:b8:8c:05:87:8a:f9:84:de:e0:51:
                    12:7e:8e:20:f3:a9:9b:c8:be:68:ce:96:b5:67:fd:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:5C:F8:65:F1:FE:F0:13:4A:92:E1:67:99:FF:4A:1B:EA:0B:E3
            X509v3 Authority Key Identifier:
                keyid:98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:e1:86:f6:bc:be:3f:30:19:1a:be:19:3a:e1:35:e6:db:
         58:f6:37:40:2a:72:24:4f:88:55:5b:5d:2a:00:58:db:22:15:
         e4:e7:10:9d:db:b0:97:e6:e6:19:b2:b8:7a:74:dd:d3:ed:64:
         cf:2a:da:ac:cb:a3:4c:68:ff:9d:76:bc:b6:e9:79:d2:83:26:
         20:1f:5d:3f:a2:55:0c:b2:3a:5a:f8:4a:70:56:c2:70:c3:bc:
         be:3b:f8:fe:1d:a7:d5:54:de:e1:0f:fa:b2:65:33:da:07:05:
         b4:ed:48:9a:db:fa:6e:26:1f:38:66:d9:fc:39:5d:99:94:fc:
         03:cd:9d:c5:4c:21:62:ab:97:67:d6:3e:0b:4a:0e:af:56:32:
         cd:bb:08:4f:58:16:08:3d:b6:0e:b5:49:18:42:46:a9:42:81:
         ee:e0:48:17:04:4e:cf:d6:f1:65:37:f5:15:21:94:3d:3d:42:
         ed:8d:24:c7:10:3d:4b:ca:24:24:25:a2:d9:c3:22:62:58:ba:
         c0:ce:1c:2d:4a:b5:8b:df:68:92:f3:ee:1a:30:32:51:ab:89:
         26:3e:56:8e:1d:6d:9c:fe:f6:65:7f:2c:39:b0:a4:10:97:cf:
         71:32:3c:6d:fe:09:1f:73:5a:89:0d:fa:90:a8:c6:d5:30:62:
         2f:49:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----