Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.mft
File:                     D7F8A8230BE2C0158081FA4A43712D5B68AD3215.mft (raw, json)
Hash identifier:          Zn4oEkAeuiiUpaRHlcONG0fzqT5ZYG1tXvAnor+txu0=
Subject key identifier:   99:FA:2A:26:18:A6:0F:AB:3A:C3:A5:A6:54:34:4D:06:A8:F8:62:2A
Authority key identifier: D7:F8:A8:23:0B:E2:C0:15:80:81:FA:4A:43:71:2D:5B:68:AD:32:15
Certificate issuer:       /CN=D7F8A8230BE2C0158081FA4A43712D5B68AD3215
Certificate serial:       2FF1EABF22B02FC16B4C853D29CAE19C4023D661
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.mft
Manifest number:          6E
Signing time:             Mon 22 Jul 2024 04:33:26 +0000
Manifest this update:     Mon 22 Jul 2024 04:28:26 +0000
Manifest next update:     Tue 23 Jul 2024 07:39:26 +0000
Files and hashes:         1: D7F8A8230BE2C0158081FA4A43712D5B68AD3215.crl (hash: fLmkUTfbRKOamYElpuJcC7bBvXXFYqQvN8pj/6SMkgc=)
                          2: 323830343a336162383a3a2f33322d313238203d3e20323636313035.roa (hash: e7eWMAxnnPg8OGCB0zcheuVs08fr0YivB591xcJ3bvA=)
                          3: 34352e352e3139362e302f32322d3332203d3e20323636313035.roa (hash: Ism3cxIO+PCd0fbvz/Bs2UkCPOZpBpwX3HaO5LfLb0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f1:ea:bf:22:b0:2f:c1:6b:4c:85:3d:29:ca:e1:9c:40:23:d6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F8A8230BE2C0158081FA4A43712D5B68AD3215
        Validity
            Not Before: Jul 22 04:28:26 2024 GMT
            Not After : Jul 23 07:39:26 2024 GMT
        Subject: CN=99FA2A2618A60FAB3AC3A5A654344D06A8F8622A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:c6:fc:8c:dd:3e:43:ad:b3:64:a6:ba:19:
                    32:f9:9d:c2:4c:c4:4b:f4:95:f8:1e:a7:06:91:93:
                    dc:09:18:84:d9:30:93:89:d1:a5:f2:6e:0c:41:61:
                    fc:b7:1b:18:fe:25:fe:fa:86:86:16:03:14:c8:e2:
                    86:e4:04:d1:b2:91:be:01:eb:6a:83:91:94:0e:63:
                    ca:5a:f4:3d:6f:31:1c:14:8b:f6:50:e7:49:91:59:
                    5d:b4:8c:38:f3:7c:03:c4:c1:d8:17:61:81:b1:ea:
                    91:0b:66:40:60:c4:a8:d3:71:1c:8a:55:46:a4:3d:
                    19:28:3e:85:6c:08:ed:08:69:9f:bc:63:48:c1:de:
                    c3:04:8e:f3:40:3b:78:c3:d3:f2:58:eb:53:e7:50:
                    ec:48:af:f8:1c:14:16:cc:7a:3d:b9:00:1f:bb:75:
                    75:50:18:05:a1:de:ba:7a:69:f0:07:1b:d9:1d:06:
                    61:bc:a8:75:77:9d:a8:74:4d:e7:f5:79:bd:3b:31:
                    75:16:dc:67:41:b3:ff:13:13:8a:d7:73:2a:da:dc:
                    92:df:9c:f9:0a:7a:a2:22:0a:b8:9f:b3:f1:9e:aa:
                    8a:1a:d7:b8:d4:25:bb:30:f1:d5:6d:31:32:25:70:
                    00:2a:70:4e:82:43:c1:45:d7:0c:78:24:ce:f4:1f:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:2A:26:18:A6:0F:AB:3A:C3:A5:A6:54:34:4D:06:A8:F8:62:2A
            X509v3 Authority Key Identifier:
                keyid:D7:F8:A8:23:0B:E2:C0:15:80:81:FA:4A:43:71:2D:5B:68:AD:32:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:26:21:ac:91:2a:f5:f6:59:43:e5:67:24:cf:88:9a:89:67:
         1b:fe:9f:67:f5:93:83:f4:ab:5b:97:f5:2b:05:fd:27:6c:a6:
         ac:b4:ea:2e:f0:cc:e0:05:14:df:15:72:b1:1a:a3:0a:f6:6c:
         d7:e8:88:8a:77:c1:3b:82:04:9a:4d:c1:b7:af:85:81:18:47:
         b8:58:30:17:e5:25:47:3d:6e:6c:18:9b:3e:d2:1f:4c:4d:93:
         82:1a:7c:ab:71:48:0f:f8:ba:5c:06:02:52:65:75:fb:40:30:
         58:c3:56:4d:ef:c5:09:c8:99:93:bc:c6:aa:db:fa:fe:28:fb:
         3f:d2:bb:bb:8b:8c:6f:10:be:56:d4:6a:0e:3d:9e:ad:b5:87:
         74:80:5d:4d:4e:3c:78:bf:55:61:0f:76:70:75:c1:44:60:70:
         25:b7:0d:13:28:ce:e8:70:80:f9:e4:5b:fa:c2:1f:21:03:a2:
         c5:92:6c:0d:94:d8:b5:e6:aa:6e:1f:0c:16:be:cd:44:c8:87:
         46:72:d8:0f:2e:aa:ef:51:1b:76:f7:59:13:91:2f:1d:eb:2e:
         5b:1a:d4:d0:4d:a4:15:90:fe:40:69:2b:91:58:e3:c2:b0:b5:
         ca:54:84:4a:ce:a7:55:8b:c9:32:cd:ec:14:f4:16:04:ed:d7:
         b3:e6:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----