Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.mft
File:                     9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.mft (raw, json)
Hash identifier:          D0R4GpWtHvAnFoox/TBf25xn9uIL/E/VjttJ47r01jY=
Subject key identifier:   1E:88:8A:72:5F:4F:B4:8D:6B:E3:1A:9D:7F:4B:C5:1C:9C:4A:0B:73
Authority key identifier: 9D:C1:D5:91:86:D2:DB:0C:20:0F:55:A6:45:8E:A7:98:DD:9F:BC:05
Certificate issuer:       /CN=9DC1D59186D2DB0C200F55A6458EA798DD9FBC05
Certificate serial:       51202ED363CA58CD527249E2203BD56F67F74C6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.mft
Manifest number:          010A
Signing time:             Sat 17 Feb 2024 04:41:41 +0000
Manifest this update:     Sat 17 Feb 2024 04:36:41 +0000
Manifest next update:     Sun 18 Feb 2024 05:35:41 +0000
Files and hashes:         1: 3133312e3130382e36342e302f32322d3332203d3e203631363830.roa (hash: pdg4w1Jb0IySrBZIEcrT7R7mpvznPRDj67Rire7t8MM=)
                          2: 323830343a316365303a3a2f33322d313238203d3e203631363830.roa (hash: KxkZPs5QSdlYFOqjnxgnilf/Xuu7T9RyjD2nlyR+Wmc=)
                          3: 9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.crl (hash: aG+Vz/umSdF4uo86PWnDYuV2T2u97dvcU12Jt2t6PF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:20:2e:d3:63:ca:58:cd:52:72:49:e2:20:3b:d5:6f:67:f7:4c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DC1D59186D2DB0C200F55A6458EA798DD9FBC05
        Validity
            Not Before: Feb 17 04:36:41 2024 GMT
            Not After : Feb 18 05:35:41 2024 GMT
        Subject: CN=1E888A725F4FB48D6BE31A9D7F4BC51C9C4A0B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:22:3a:33:d7:e3:ee:c9:8a:50:67:af:b6:
                    46:0a:be:11:ba:22:1d:b9:95:d9:be:8e:d7:fe:f6:
                    80:9f:6b:bb:c5:00:7c:8c:20:55:9b:3e:c1:5b:ce:
                    c5:c1:9b:f1:c2:84:7a:7c:57:b7:f4:ba:f6:95:1c:
                    95:4b:e6:59:bf:6a:ca:79:56:73:06:9d:19:48:0b:
                    d9:dd:be:7a:8e:c4:e6:87:e8:eb:fc:1e:15:c3:63:
                    ed:07:65:03:ec:e8:27:92:74:1f:12:09:03:08:e4:
                    1f:f8:c3:4f:10:44:aa:e3:ff:13:05:6d:cc:a0:2a:
                    7f:67:9a:a2:e6:61:f3:96:04:06:85:bc:19:f2:89:
                    0f:5b:36:7e:85:e1:05:bd:0c:d2:7f:00:f4:f9:1c:
                    bf:00:ec:0d:95:cd:87:69:eb:b0:ab:ce:5c:3a:e3:
                    04:09:2f:57:8e:4f:95:e5:88:c6:b4:0b:03:d1:ff:
                    ad:a8:ec:d1:1f:03:f0:21:21:5a:e7:c0:17:7a:22:
                    92:83:06:e1:eb:73:bc:5c:d8:72:bf:2b:6f:bd:0d:
                    0b:9b:d4:01:61:af:72:92:b3:6b:ec:ad:a3:68:72:
                    e4:73:56:05:f3:d6:ff:67:3b:0b:9c:7a:55:0d:18:
                    04:41:17:02:fe:fb:e4:dc:3f:ba:59:79:be:4c:1e:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:88:8A:72:5F:4F:B4:8D:6B:E3:1A:9D:7F:4B:C5:1C:9C:4A:0B:73
            X509v3 Authority Key Identifier:
                keyid:9D:C1:D5:91:86:D2:DB:0C:20:0F:55:A6:45:8E:A7:98:DD:9F:BC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9DC1D59186D2DB0C200F55A6458EA798DD9FBC05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:04:3f:6c:6f:53:ef:a2:c7:6f:b8:8f:17:45:b8:b5:46:
         b0:31:7b:e6:21:26:1d:b3:80:ea:ad:ce:1f:04:74:75:f6:65:
         ea:5f:88:a9:c5:e8:83:ac:aa:38:5f:7f:15:7e:5b:b3:fe:10:
         58:86:6e:4f:1b:dc:81:f4:13:5a:b1:40:eb:28:33:cd:4e:57:
         f6:e4:2f:ac:05:18:a1:71:eb:5b:e9:f9:76:6d:11:6b:d2:35:
         0a:0f:53:e2:60:9a:7a:df:66:88:21:a7:a7:7c:3e:e0:86:83:
         b4:09:0b:c9:78:0a:81:70:c1:46:a6:3f:95:39:6f:da:f9:c0:
         a5:82:22:96:71:fc:86:58:ae:88:e7:b6:71:a9:f5:ec:5e:f8:
         6e:50:4b:f8:da:a2:1f:b9:6b:95:fa:91:3b:27:fc:48:43:9e:
         1a:d1:80:fd:6a:82:ce:ae:cb:84:d8:2c:67:72:21:0f:cb:a4:
         85:f2:62:d4:53:f2:f8:12:e1:62:cc:12:0c:67:07:9f:5e:dd:
         1f:fc:a5:66:9c:6b:d0:85:5b:bd:a8:d6:10:2c:67:a2:be:4d:
         1b:57:7d:60:49:30:f8:f4:11:53:49:9b:a3:67:e8:84:e4:3e:
         4a:3c:ea:76:86:28:71:d8:73:56:d3:ad:e2:7b:7b:43:34:cf:
         b9:d4:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----