Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/5A0404C93988F8D1485906BC43C569B00CE04709.mft
File:                     5A0404C93988F8D1485906BC43C569B00CE04709.mft (raw, json)
Hash identifier:          kUOMGWGud3ntW33UEHK97n32z060ATpt0y3lj6sziPU=
Subject key identifier:   86:B6:1E:22:7B:BE:82:1D:C5:D3:FD:46:67:C3:96:8C:88:E0:0F:C3
Authority key identifier: 5A:04:04:C9:39:88:F8:D1:48:59:06:BC:43:C5:69:B0:0C:E0:47:09
Certificate issuer:       /CN=5A0404C93988F8D1485906BC43C569B00CE04709
Certificate serial:       0A5728E3081D31B4BD56668596B8C6CFA905041E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A0404C93988F8D1485906BC43C569B00CE04709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/5A0404C93988F8D1485906BC43C569B00CE04709.mft
Manifest number:          05
Signing time:             Fri 28 Jun 2024 09:13:46 +0000
Manifest this update:     Fri 28 Jun 2024 09:08:46 +0000
Manifest next update:     Sat 29 Jun 2024 12:33:46 +0000
Files and hashes:         1: 34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa (hash: zhQVQWv8ZHvyk6yR0imugoMJb1mAdEvwZbMkZBbWByk=)
                          2: 323830343a363530343a3a2f33322d3338203d3e20323639343633.roa (hash: Jsjd8IejYDSYV+kd6OIHufW40zfE7M8UP5fcUb0DUAs=)
                          3: 5A0404C93988F8D1485906BC43C569B00CE04709.crl (hash: W3tkKLaXTfMREzDwioOJH7C/8BEiUMyg+z1Lrqm+I7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:57:28:e3:08:1d:31:b4:bd:56:66:85:96:b8:c6:cf:a9:05:04:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A0404C93988F8D1485906BC43C569B00CE04709
        Validity
            Not Before: Jun 28 09:08:46 2024 GMT
            Not After : Jun 29 12:33:46 2024 GMT
        Subject: CN=86B61E227BBE821DC5D3FD4667C3968C88E00FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:06:1a:7b:e9:b3:50:c3:8f:91:d3:0f:8d:
                    99:6d:be:61:03:b0:45:b5:83:1d:64:ae:bc:74:77:
                    6b:ea:95:30:ce:ff:02:33:af:35:5a:50:ab:e4:92:
                    04:1e:05:92:0a:b7:52:a7:e8:49:c9:05:6a:91:8e:
                    95:c9:65:cb:45:0d:2c:78:6d:a3:44:85:08:e5:92:
                    85:1f:53:61:72:3b:6b:77:be:16:50:43:47:b2:91:
                    ec:72:3c:8a:7c:5d:2a:2b:54:62:11:96:b1:1d:49:
                    4a:db:02:82:b4:4a:10:34:7d:b7:16:21:0a:3b:7b:
                    99:a8:db:7c:4c:89:bf:30:65:ac:84:ff:f1:60:29:
                    d3:94:05:46:33:6c:77:3d:cf:d6:b2:95:51:d6:b3:
                    9e:a9:e6:6c:b7:ef:15:5b:53:f2:dc:61:06:21:4f:
                    7c:8d:a0:93:a2:f8:ab:a5:57:fa:0d:2c:86:d5:13:
                    59:93:d6:c8:13:5c:80:2d:6f:0c:c8:10:b2:f8:6d:
                    7c:36:45:77:2b:54:9a:51:b1:63:db:4f:2e:f2:16:
                    c9:83:ca:84:f1:cf:2d:b1:41:03:4f:ce:40:07:d7:
                    7b:cb:99:d7:09:25:87:17:2b:ea:02:fc:33:89:5e:
                    da:84:2a:56:f1:b1:45:ec:8b:de:2a:46:80:87:72:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B6:1E:22:7B:BE:82:1D:C5:D3:FD:46:67:C3:96:8C:88:E0:0F:C3
            X509v3 Authority Key Identifier:
                keyid:5A:04:04:C9:39:88:F8:D1:48:59:06:BC:43:C5:69:B0:0C:E0:47:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/5A0404C93988F8D1485906BC43C569B00CE04709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A0404C93988F8D1485906BC43C569B00CE04709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/5A0404C93988F8D1485906BC43C569B00CE04709.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:99:51:6f:06:3c:4f:8e:a7:d8:83:4a:d1:69:1f:51:91:
         af:62:d1:d7:34:a4:fe:02:99:34:ec:51:50:38:86:08:54:9a:
         ef:6c:a1:e6:ee:25:26:36:5a:e6:b2:67:e0:92:1a:85:f6:e8:
         ad:2a:bc:cf:a1:5f:ae:1e:c3:36:64:7c:6a:04:a2:56:bf:9b:
         9d:c0:9b:d1:59:cd:0c:4a:00:b7:04:4c:85:9f:aa:06:39:0f:
         9b:93:46:d4:2e:4b:36:12:c9:9b:12:02:b3:48:54:c4:f6:7d:
         27:b4:18:40:b2:9c:7d:09:1f:b2:56:8a:f3:94:8e:ea:19:86:
         ce:9d:51:0d:33:a0:52:87:1f:b7:53:22:13:01:6f:32:50:b1:
         4d:c8:5a:05:e0:9c:ca:34:37:a2:03:c5:c0:de:df:3b:77:6c:
         a1:20:e7:11:67:8b:77:64:61:7c:c6:e4:5e:df:be:a4:ea:37:
         28:bf:e9:4f:be:fc:3e:af:b3:57:2b:29:3a:90:bd:e9:4c:6a:
         d5:b1:84:f0:58:a1:2c:79:ff:d1:59:de:08:11:e5:2b:c4:92:
         fe:3d:e4:8a:71:ba:80:77:ac:24:64:71:b3:f6:84:ea:31:4c:
         32:e3:b2:ea:8a:5f:a7:9b:7c:79:a2:d7:2a:d2:b3:f0:e0:ea:
         8c:6e:40:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----