Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/06A8587477A5C2CB9128A687310324045A727305.mft
File:                     06A8587477A5C2CB9128A687310324045A727305.mft (raw, json)
Hash identifier:          V1uOrVI+YSSobCmuOSEGuwZ+Nok6hyuISRc9fNqpAXE=
Subject key identifier:   58:44:0F:72:6D:C5:4F:C6:A6:D0:36:6B:EE:89:3A:5A:34:4F:50:5E
Authority key identifier: 06:A8:58:74:77:A5:C2:CB:91:28:A6:87:31:03:24:04:5A:72:73:05
Certificate issuer:       /CN=06A8587477A5C2CB9128A687310324045A727305
Certificate serial:       21BF7F03D45E04553C0E9F7267CB91463D2C33A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06A8587477A5C2CB9128A687310324045A727305.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/06A8587477A5C2CB9128A687310324045A727305.mft
Manifest number:          01A1
Signing time:             Sun 14 Apr 2024 21:32:43 +0000
Manifest this update:     Sun 14 Apr 2024 21:27:43 +0000
Manifest next update:     Tue 16 Apr 2024 00:19:43 +0000
Files and hashes:         1: 3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (hash: m7Yl+N1mzS5QAUNkz+K8YycJcbHDjpCmY8pmGdzd+RU=)
                          2: 06A8587477A5C2CB9128A687310324045A727305.crl (hash: I0T4UspYQ47qlpr2O3UzJCIHlnXyCfw3uLoqjLxMC3k=)
                          3: 323830343a326364343a3a2f33322d3438203d3e20323635323436.roa (hash: jnfGqf5r34zD5Lch6Fb6Ade5eZlT019gPqRlrlB7QE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bf:7f:03:d4:5e:04:55:3c:0e:9f:72:67:cb:91:46:3d:2c:33:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8587477A5C2CB9128A687310324045A727305
        Validity
            Not Before: Apr 14 21:27:43 2024 GMT
            Not After : Apr 16 00:19:43 2024 GMT
        Subject: CN=58440F726DC54FC6A6D0366BEE893A5A344F505E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a0:cd:b4:8c:ee:80:12:f9:fa:bb:15:34:c0:
                    53:fb:05:3a:fc:e2:86:a3:81:6f:f0:c7:42:d7:74:
                    4c:80:7c:8b:de:5c:49:b5:55:48:06:e5:02:ee:a2:
                    39:ac:9d:c9:4c:3c:70:36:b5:f2:98:12:29:c8:8c:
                    56:8e:04:53:a5:35:45:51:fc:e9:ee:78:42:6a:30:
                    86:b3:0c:dc:ec:02:84:b6:1e:01:9e:a5:4b:db:30:
                    3f:75:13:7e:17:4a:2a:6d:e8:89:80:a9:78:ac:fa:
                    f8:bc:ac:c5:1b:c4:44:46:49:9c:12:45:69:52:d2:
                    58:5f:41:8b:4f:bf:14:d3:8c:9a:fe:0f:a3:e9:87:
                    c7:6c:a0:10:95:78:22:ab:8d:42:a4:3d:fc:26:36:
                    a5:31:f4:7c:da:d7:7e:39:80:41:05:37:44:c8:c6:
                    67:db:aa:23:66:3a:cb:dc:1d:04:96:ae:ba:51:a5:
                    f2:95:b0:ae:6e:32:60:18:f4:41:a6:fb:93:14:52:
                    8d:fc:00:5c:27:da:70:33:cf:52:8b:7c:d0:13:c0:
                    5a:21:2c:e2:05:c3:a7:21:4b:5d:33:ba:ac:99:28:
                    ff:ba:08:75:f2:be:9f:d8:3f:0c:d6:f4:5b:ce:d7:
                    c7:01:44:61:ef:a0:2f:c1:d4:5c:34:c4:23:d4:a5:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:0F:72:6D:C5:4F:C6:A6:D0:36:6B:EE:89:3A:5A:34:4F:50:5E
            X509v3 Authority Key Identifier:
                keyid:06:A8:58:74:77:A5:C2:CB:91:28:A6:87:31:03:24:04:5A:72:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/06A8587477A5C2CB9128A687310324045A727305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/06A8587477A5C2CB9128A687310324045A727305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/06A8587477A5C2CB9128A687310324045A727305.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:f4:69:3e:4c:1c:bf:fb:be:e7:a3:ef:96:db:33:32:0d:
         f5:43:71:1e:be:ad:48:46:b8:9b:6d:61:c1:4f:93:83:54:d5:
         7e:ac:50:b7:7a:cd:70:ea:fc:6a:49:65:f3:98:da:51:f1:7e:
         d0:c6:08:0d:5f:b1:42:85:49:60:3b:f9:39:1c:eb:2c:3e:fd:
         3d:c8:0e:3f:05:1a:9d:4a:aa:56:7b:d8:6d:ab:ec:87:86:5e:
         e0:05:5b:f3:29:97:37:e5:b7:96:8e:e0:99:af:26:57:f6:a8:
         3e:e7:1f:e8:63:c6:00:e1:52:db:e9:89:c8:94:54:49:eb:2e:
         0e:d9:80:68:72:59:b9:ff:2b:af:40:bf:9f:7d:9e:f4:f5:90:
         6e:64:90:39:47:e7:70:56:fe:94:28:12:4f:2b:6c:ec:b3:f1:
         d6:25:f6:d5:25:8b:dd:7c:e3:f6:0c:68:26:68:0a:bf:bf:8e:
         98:80:79:3e:b6:b4:67:65:b2:55:ee:82:13:d7:ac:2d:67:98:
         c2:b7:b5:83:5d:82:05:53:cc:17:76:70:ac:01:4b:e0:f3:91:
         4f:bf:d8:da:8d:cf:7c:f2:93:21:c5:4e:3a:50:75:c7:ce:bf:
         b6:78:fb:fa:c1:af:72:9c:5e:4a:d9:df:ea:04:c3:b5:6e:10:
         46:02:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----