Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.mft
File:                     9309FE707145E46FE4C086068E4C9D77076BEB2B.mft (raw, json)
Hash identifier:          PxNPN0pJUNK7twMK+GaLefwhgUNqxkNYojvxprM8ubU=
Subject key identifier:   29:FC:8B:B4:B6:AD:ED:FD:3B:72:0A:C5:DD:48:79:68:6B:3F:58:2F
Authority key identifier: 93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B
Certificate issuer:       /CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
Certificate serial:       6DC7C2310AFCFA4FE8CD5442610E8F2B3F934F54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.mft
Manifest number:          43
Signing time:             Sun 14 Apr 2024 21:53:25 +0000
Manifest this update:     Sun 14 Apr 2024 21:48:25 +0000
Manifest next update:     Mon 15 Apr 2024 22:33:25 +0000
Files and hashes:         1: 323830343a356661633a3a2f33322d3332203d3e20323639313136.roa (hash: HmRgHvsUmn1Noyxihn6oMS7zkdYf1xqvO13ysI4OlZ0=)
                          2: 34352e3137392e3230382e302f32322d3234203d3e20323639313136.roa (hash: QiTCM4abT9v2J5ls8wmqmzaMgkvnqePGm4Qc5SDWypk=)
                          3: 9309FE707145E46FE4C086068E4C9D77076BEB2B.crl (hash: Ici2s+flqSjcrhDrzvB5ehyLyv0TYQK5Eq7pqTZF0eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c7:c2:31:0a:fc:fa:4f:e8:cd:54:42:61:0e:8f:2b:3f:93:4f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309FE707145E46FE4C086068E4C9D77076BEB2B
        Validity
            Not Before: Apr 14 21:48:25 2024 GMT
            Not After : Apr 15 22:33:25 2024 GMT
        Subject: CN=29FC8BB4B6ADEDFD3B720AC5DD4879686B3F582F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:a5:67:aa:85:f5:d7:ec:10:d8:98:18:5a:
                    ad:c7:0c:8a:ec:7e:8b:a4:a8:eb:5d:ee:95:8d:d1:
                    58:9f:f3:d8:78:b4:72:2b:a2:67:7c:e6:f9:7f:7d:
                    43:2d:66:5a:ea:08:1f:6c:49:d2:d7:30:2d:7e:78:
                    a7:dd:25:76:dd:7c:ad:84:b9:aa:e9:0b:ff:65:b5:
                    86:b3:08:38:9f:9a:9b:5a:85:cc:58:87:80:08:c2:
                    dd:5a:d4:04:e5:ba:6d:31:22:ca:c6:51:eb:a4:8d:
                    fa:5d:b3:c4:21:35:1f:c9:68:f4:bc:e6:7d:5a:7f:
                    7b:c7:37:d3:95:19:3c:4c:45:d2:55:70:89:15:3e:
                    a1:bd:0d:c5:94:e9:2c:d3:48:79:45:6c:d1:cf:18:
                    c6:49:7f:85:6f:b1:9d:f3:cc:4f:39:b9:85:1a:31:
                    0b:e8:89:e6:8f:60:fe:c5:c6:1f:06:8d:16:7d:45:
                    e1:c2:28:97:f0:1e:01:bb:58:84:25:f9:4b:41:92:
                    08:20:4b:b1:7f:7f:3a:29:60:2c:36:60:9d:4c:a4:
                    03:c3:5c:fd:ab:a1:e3:70:67:67:d8:ea:18:43:59:
                    3d:8e:89:02:e7:f5:29:fc:8d:50:52:a7:a7:52:ea:
                    9a:af:13:5e:a6:91:7c:f1:67:82:cd:18:e5:29:3a:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:8B:B4:B6:AD:ED:FD:3B:72:0A:C5:DD:48:79:68:6B:3F:58:2F
            X509v3 Authority Key Identifier:
                keyid:93:09:FE:70:71:45:E4:6F:E4:C0:86:06:8E:4C:9D:77:07:6B:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/0/9309FE707145E46FE4C086068E4C9D77076BEB2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:85:9a:03:99:50:81:ef:64:d5:0c:09:fb:ff:3d:8b:7c:d2:
         c1:0a:04:23:58:ac:26:cc:c6:6b:49:88:aa:ac:59:bb:73:f1:
         21:58:63:33:94:43:08:7b:a4:c9:49:fa:82:c4:22:7f:48:71:
         75:6f:c6:b8:6d:65:45:5e:ee:e8:1e:87:1f:22:93:3a:12:e3:
         52:a0:c3:e8:27:49:e9:df:2a:37:90:26:17:f4:d0:cb:d0:e8:
         dd:c0:b9:dc:1f:b5:51:b2:08:01:d2:f3:20:03:76:a5:c2:fc:
         4b:96:6f:77:b0:71:4c:88:6b:7e:4a:bf:ff:c5:49:0e:fe:ce:
         e4:26:1a:e0:01:52:94:9f:ba:1f:23:ab:4d:5e:c4:e6:a5:ab:
         80:fc:ba:a5:e0:22:15:59:29:ee:6f:8c:5a:4a:ec:85:29:a9:
         1e:d6:e2:05:90:7d:1f:43:ee:d8:de:36:e9:f7:11:1c:be:ae:
         61:1d:c7:24:9a:d1:71:dd:71:33:96:c2:6d:00:bc:70:a3:7e:
         6f:f7:76:a5:9b:f5:4d:77:51:88:9c:90:3c:2d:2b:10:46:35:
         c4:7c:13:d1:17:83:95:0d:6d:ac:e5:b5:47:91:e1:bd:83:6b:
         cc:72:a0:d4:c5:19:56:e1:1a:79:b9:13:cd:de:6d:8c:09:5d:
         8b:9e:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----