Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/F997305314F0C91FCB67BA5D5D5A800086047FBB.mft
File:                     F997305314F0C91FCB67BA5D5D5A800086047FBB.mft (raw, json)
Hash identifier:          qrgoipKWzqlA24odfy4CqDxBCCumTGiTAno2HkQ7w+8=
Subject key identifier:   09:89:86:97:E7:F4:53:7F:B9:91:35:C5:58:2C:49:1D:A4:D9:2E:93
Authority key identifier: F9:97:30:53:14:F0:C9:1F:CB:67:BA:5D:5D:5A:80:00:86:04:7F:BB
Certificate issuer:       /CN=F997305314F0C91FCB67BA5D5D5A800086047FBB
Certificate serial:       44F5A2F3C5F9836F9E572A71FAB4D3D38B213950
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F997305314F0C91FCB67BA5D5D5A800086047FBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/F997305314F0C91FCB67BA5D5D5A800086047FBB.mft
Manifest number:          06
Signing time:             Mon 11 Nov 2024 01:59:01 +0000
Manifest this update:     Mon 11 Nov 2024 01:54:01 +0000
Manifest next update:     Tue 12 Nov 2024 03:55:01 +0000
Files and hashes:         1: 3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa (hash: kLTLRfKE9MeVF9KKJNX5EJUpyiTMashGNCQM5FCm2mQ=)
                          2: 323830343a323262633a3a2f33322d313238203d3e20323634313139.roa (hash: JjoqzcRiMInhUkvw9nrK8tuE0kAeuY30zW/5XhU3eSQ=)
                          3: F997305314F0C91FCB67BA5D5D5A800086047FBB.crl (hash: FnCQLl/IQmg1nhxQjRT2I/kBMmDbl69H3B+dPCY65io=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:a2:f3:c5:f9:83:6f:9e:57:2a:71:fa:b4:d3:d3:8b:21:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F997305314F0C91FCB67BA5D5D5A800086047FBB
        Validity
            Not Before: Nov 11 01:54:01 2024 GMT
            Not After : Nov 12 03:55:01 2024 GMT
        Subject: CN=09898697E7F4537FB99135C5582C491DA4D92E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:d2:85:7e:d2:7e:96:eb:32:21:c4:99:80:
                    8e:f9:1e:16:da:dd:6e:4f:dc:93:98:22:d5:86:e6:
                    2a:57:f3:1f:5c:1b:40:a0:87:c4:9d:96:ad:cc:d6:
                    dd:3f:fc:f3:9e:a5:1f:37:53:cc:2c:c0:dc:07:aa:
                    a3:01:4e:66:f5:09:a1:dc:15:5e:34:dd:54:20:7f:
                    3f:d9:91:5a:28:7c:93:af:a3:f8:22:51:83:d6:81:
                    70:95:e1:51:9f:f1:e2:f6:ec:19:11:40:03:6a:d8:
                    8a:04:0e:d8:af:64:3c:dc:90:c4:f5:ad:46:88:a2:
                    b9:81:78:c9:29:0b:f3:c7:80:a5:a6:de:dd:f6:cd:
                    c1:49:f4:83:10:0b:a0:ae:f7:27:8c:0e:f3:5e:0c:
                    79:76:ac:d8:71:36:78:32:3e:d4:0a:49:b7:03:09:
                    ed:ce:76:be:23:cf:33:54:85:12:39:49:5e:51:0a:
                    fe:1a:65:16:e1:0f:e3:a0:b7:2f:24:00:d7:76:e4:
                    49:71:93:ca:b9:6e:47:d2:72:b7:7a:ae:4e:cb:d8:
                    f0:58:32:2b:06:e5:c3:d9:c0:f7:c2:12:38:c1:31:
                    f1:1b:60:63:0c:ec:2e:d6:74:10:18:1d:f0:ac:08:
                    d3:f0:11:c0:e0:ac:0b:0c:6a:11:d9:61:be:49:3a:
                    14:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:89:86:97:E7:F4:53:7F:B9:91:35:C5:58:2C:49:1D:A4:D9:2E:93
            X509v3 Authority Key Identifier:
                keyid:F9:97:30:53:14:F0:C9:1F:CB:67:BA:5D:5D:5A:80:00:86:04:7F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/F997305314F0C91FCB67BA5D5D5A800086047FBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F997305314F0C91FCB67BA5D5D5A800086047FBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/F997305314F0C91FCB67BA5D5D5A800086047FBB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:19:bc:9e:bc:47:5b:06:b6:b1:dc:53:d4:20:80:f7:a9:
         2b:ef:7b:98:d0:6c:db:b0:2e:3d:96:95:de:c6:55:5b:67:80:
         99:43:53:0e:05:78:84:2c:f6:2f:06:84:8d:90:af:b7:6a:09:
         3e:1d:5b:6f:7e:bd:5a:0d:06:ea:10:76:22:e1:74:9c:23:b8:
         ec:1a:50:4e:a6:a3:85:38:77:fa:59:27:55:fb:65:52:4f:8f:
         d3:35:53:63:bc:b3:5c:98:23:fe:bc:fd:59:9e:2e:c6:f0:9f:
         08:8c:b6:67:c4:5f:cc:ef:2a:53:04:c9:d6:3c:6e:d0:9f:5c:
         0b:ca:c3:34:54:95:a1:91:b7:76:86:4d:e5:77:d1:93:c1:57:
         9a:af:ed:75:d9:80:80:6c:80:ce:ee:ce:de:79:5d:6d:58:32:
         01:41:d3:2a:9e:15:8d:f4:18:0b:bd:fc:51:b7:58:99:eb:df:
         2b:34:9a:92:ac:8d:f1:59:3a:14:26:fd:ef:20:98:48:af:e1:
         aa:4d:1c:7c:5e:51:23:77:37:88:ae:49:f2:af:17:c8:da:aa:
         61:93:9b:15:eb:1c:b9:14:91:f5:1b:3c:57:e6:c9:9d:dd:13:
         b7:33:aa:ee:26:4f:41:02:49:43:12:2f:1e:42:d4:e7:45:32:
         54:2f:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----