Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.mft
File:                     786B5546151D25951A0101333307AA41E9175AFB.mft (raw, json)
Hash identifier:          St/9tJbECeL25SS15WS2NkXAD8dWZYUn/g4pglKonaM=
Subject key identifier:   EA:97:C2:54:AC:9B:B0:1D:A6:1C:CE:B3:64:E0:1E:EA:AD:FD:67:73
Authority key identifier: 78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB
Certificate issuer:       /CN=786B5546151D25951A0101333307AA41E9175AFB
Certificate serial:       3D5DF2798577F9311D3224500F601B14897CB90E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.mft
Manifest number:          0220
Signing time:             Mon 15 Apr 2024 08:49:48 +0000
Manifest this update:     Mon 15 Apr 2024 08:44:48 +0000
Manifest next update:     Tue 16 Apr 2024 09:59:48 +0000
Files and hashes:         1: 786B5546151D25951A0101333307AA41E9175AFB.crl (hash: T7vGMTeFiTY2W3NHVz0+ZX1H9uqw1yOUFTkOuIlk0YU=)
                          2: 3139302e38392e31322e302f32322d3235203d3e20323730333437.roa (hash: 0Dj2nR0U0UTt35nhFyIhQ1S8VZs+JWatUXYmAkFfqTU=)
                          3: 323830343a366139633a3a2f33322d3438203d3e20323730333437.roa (hash: 2v4M4Hx1J54lo/AXWYq1ZDVTMgbIFqKUiFxwSluhW2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5d:f2:79:85:77:f9:31:1d:32:24:50:0f:60:1b:14:89:7c:b9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786B5546151D25951A0101333307AA41E9175AFB
        Validity
            Not Before: Apr 15 08:44:48 2024 GMT
            Not After : Apr 16 09:59:48 2024 GMT
        Subject: CN=EA97C254AC9BB01DA61CCEB364E01EEAADFD6773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:3e:27:04:53:c3:f3:72:be:28:b6:0e:3e:
                    2a:71:07:8f:ad:ee:76:7d:f2:6e:1c:f7:0d:8f:79:
                    0a:72:be:21:b9:88:72:52:1d:8f:d5:cb:d3:b9:93:
                    40:fd:23:bf:1d:d7:d8:18:8a:69:bb:7b:dc:3b:3b:
                    59:67:8e:a9:e2:3b:8b:c2:f7:b8:87:23:90:6f:b2:
                    db:73:11:87:b7:88:a4:02:dc:9e:9e:00:1c:e8:51:
                    ba:34:3a:e2:2c:65:98:4e:95:34:39:19:a2:9f:b6:
                    4a:e9:4b:b5:7e:dc:99:df:48:cb:4d:7e:d1:25:1b:
                    26:2d:78:6a:38:d4:3e:33:e1:83:18:3f:e0:3d:f5:
                    3a:c6:bc:71:13:4c:71:dd:82:84:29:e8:f0:ef:8e:
                    3c:2c:2c:3c:f8:9f:cb:fd:93:19:c2:ef:1a:6f:2c:
                    a5:0c:ca:93:01:9e:7b:8e:9f:31:97:97:c9:d3:29:
                    2b:1f:85:10:26:59:e1:21:12:97:55:26:d9:19:d4:
                    0e:73:eb:38:25:9b:91:6c:70:82:ab:85:94:d2:7b:
                    6d:2f:fe:9c:a1:dd:91:fe:15:8c:8e:dc:28:e6:d6:
                    c6:55:55:e3:f5:5e:f3:3a:83:60:53:f2:c2:5c:60:
                    a7:b8:0a:97:04:4a:e9:d9:8d:9a:2e:ab:88:a5:ff:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:C2:54:AC:9B:B0:1D:A6:1C:CE:B3:64:E0:1E:EA:AD:FD:67:73
            X509v3 Authority Key Identifier:
                keyid:78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:04:61:87:ba:48:39:70:d0:68:cd:7a:ff:49:9f:4b:89:
         f3:24:1d:37:8a:bb:e3:d5:78:a4:0f:36:b6:7e:5e:74:c7:f7:
         99:d0:02:fb:2a:63:1a:43:d6:49:a5:e0:72:35:a9:75:ef:ef:
         08:eb:4e:3e:1e:dc:5e:d5:3c:bf:67:4f:63:4b:90:04:5b:bf:
         c4:df:19:9f:37:25:af:f5:93:3e:ce:bb:ae:d4:fd:86:75:d1:
         82:83:6d:c7:f3:b1:a0:51:84:05:8f:ff:90:bf:f6:e6:b4:d6:
         dd:fb:4a:06:a9:f6:6c:5c:e0:d0:2d:2f:a9:74:16:bc:75:f6:
         02:d5:98:10:b6:a9:9f:e5:2d:46:17:35:83:0d:38:67:d8:5c:
         2d:35:8f:ab:96:6d:08:6a:78:a0:b9:35:ba:a0:aa:e3:24:7c:
         20:9e:6c:a7:de:a4:25:c8:f7:c4:5e:4b:b8:3d:34:cd:85:cb:
         2f:d7:2e:75:76:d5:13:83:03:bd:c9:ae:32:c4:a0:18:56:ea:
         9f:b0:f6:67:bd:37:f8:37:29:d4:02:08:8d:c0:04:9c:05:cf:
         06:a1:d7:61:d4:d2:4d:a0:2b:35:9d:96:12:e5:6a:aa:fa:ad:
         f8:ec:d0:3e:54:ae:84:1d:31:33:4f:02:88:51:5b:af:90:f0:
         07:b1:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----