Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.mft
File:                     788B36C2CD89F8698D3899FE503F57FCDCEF52E9.mft (raw, json)
Hash identifier:          QYOxBO2M+bgaE1I/JOyUjwX1H4SbXQXpiBsiWj1LApU=
Subject key identifier:   88:21:D4:1A:C5:60:C0:51:37:D5:B5:B8:34:21:2E:AB:72:E9:D7:DC
Authority key identifier: 78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9
Certificate issuer:       /CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
Certificate serial:       5CBEC0F224B20FE2297C3B92D2C85B6BAAF8D405
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.mft
Manifest number:          FA
Signing time:             Fri 11 Oct 2024 21:16:12 +0000
Manifest this update:     Fri 11 Oct 2024 21:11:12 +0000
Manifest next update:     Sat 12 Oct 2024 23:22:12 +0000
Files and hashes:         1: 323830313a38303a333862303a3a2f34382d3438203d3e20323730333438.roa (hash: mElbOG/pweOlbt6Espa1wRzVrmsfiKVI9nWbtHwNP58=)
                          2: 3139302e38332e32382e302f32322d3234203d3e20323730333438.roa (hash: AQsFy4jpWiw4F625sSZHFdMyL1ypjYdnioCTPUjhieY=)
                          3: 788B36C2CD89F8698D3899FE503F57FCDCEF52E9.crl (hash: 9Ce40+fp6AhIaq/IwNC7QGPtpnPy0RF3rwtARoRlRgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:c0:f2:24:b2:0f:e2:29:7c:3b:92:d2:c8:5b:6b:aa:f8:d4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788B36C2CD89F8698D3899FE503F57FCDCEF52E9
        Validity
            Not Before: Oct 11 21:11:12 2024 GMT
            Not After : Oct 12 23:22:12 2024 GMT
        Subject: CN=8821D41AC560C05137D5B5B834212EAB72E9D7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:44:9a:1c:5a:bd:de:e2:99:43:d1:a2:00:
                    b5:cf:8c:c5:77:85:00:d4:02:b6:d9:85:00:47:03:
                    b7:24:37:04:c5:17:46:a6:7b:8b:fc:55:f6:13:ee:
                    04:dc:1d:8b:47:a7:62:00:e7:be:e8:04:82:2b:b5:
                    48:91:a5:d3:3e:63:46:ec:0f:2c:a3:f9:90:fe:38:
                    44:ff:4f:87:50:d5:d4:46:07:d6:f5:cf:33:b1:83:
                    72:62:a0:6e:08:9c:94:c8:74:a6:77:ad:63:77:2d:
                    03:cd:1b:4b:77:6d:5f:33:26:f1:bb:78:dd:98:ce:
                    aa:bd:d1:54:42:0d:5c:bc:bf:35:04:ca:f0:c5:39:
                    ce:07:cf:a2:a9:a7:1a:04:77:aa:80:ed:9b:83:3d:
                    dd:30:ff:71:66:64:ed:72:44:d0:b2:3a:8c:8d:a9:
                    ae:a9:1d:e1:d3:0b:ba:02:78:57:42:3c:1f:81:18:
                    67:f1:49:8c:c4:49:55:e1:b9:53:67:1e:47:fe:a6:
                    8e:82:5d:2c:5b:84:f3:de:12:2c:49:9c:a9:28:aa:
                    3e:7e:6e:20:43:0d:2b:e2:95:43:69:0c:e4:40:04:
                    27:12:93:27:2a:3b:e7:46:30:1b:4b:27:bb:02:43:
                    45:1c:57:93:ca:7c:1d:c4:9d:0a:08:d4:a6:1b:05:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:D4:1A:C5:60:C0:51:37:D5:B5:B8:34:21:2E:AB:72:E9:D7:DC
            X509v3 Authority Key Identifier:
                keyid:78:8B:36:C2:CD:89:F8:69:8D:38:99:FE:50:3F:57:FC:DC:EF:52:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/1/788B36C2CD89F8698D3899FE503F57FCDCEF52E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:56:18:af:25:45:3d:2b:65:d6:c8:f7:de:f1:f8:16:10:ec:
         9a:20:e9:5c:92:20:83:05:f5:a7:2a:44:b2:72:ee:1c:3b:6f:
         24:50:c8:5f:9f:39:21:7a:bf:27:0e:4d:2f:f7:aa:0d:0f:8f:
         4d:6a:75:52:d9:84:46:7a:49:f0:14:8b:17:ca:ca:66:8d:b3:
         fc:58:01:e6:4c:60:5c:a9:18:4d:66:c0:06:6e:8e:35:24:94:
         28:ab:47:f1:29:0e:30:0b:e4:84:96:61:76:47:4b:eb:ca:66:
         fd:72:47:a4:80:17:88:c3:9c:a2:c4:db:27:fe:6d:3d:7d:90:
         d3:00:9a:ca:f0:d1:ed:c9:21:dd:d6:34:09:f2:fa:c0:f7:2f:
         58:a0:2c:fd:80:de:04:fc:95:e1:d1:db:88:9d:a8:9d:19:c0:
         b7:fe:7b:a8:ca:bb:5c:03:9d:c8:c8:bd:2b:25:97:79:12:e1:
         ce:6c:95:52:f8:6b:b7:44:fe:fc:f6:05:77:88:dd:9f:24:b9:
         e9:c7:bb:6e:bc:50:cc:16:1d:42:49:c0:1a:16:b6:73:2e:87:
         71:d8:bc:e7:72:60:d0:52:a8:70:c2:c5:b5:7c:93:e8:6f:69:
         e4:f5:33:18:fd:ca:90:50:52:25:7f:29:05:06:cf:be:61:75:
         21:03:b7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----