Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.mft
File:                     91BD56ECBC6C49278C61C353E8FF806FED55FD00.mft (raw, json)
Hash identifier:          zcHa21cKPIXgpiFh28qYQRiJjX1LHQa/BDbf9FN6hXc=
Subject key identifier:   E5:AC:D5:97:FC:58:DC:1E:9F:59:FE:33:AC:FF:A3:22:4F:6F:A9:D1
Authority key identifier: 91:BD:56:EC:BC:6C:49:27:8C:61:C3:53:E8:FF:80:6F:ED:55:FD:00
Certificate issuer:       /CN=91BD56ECBC6C49278C61C353E8FF806FED55FD00
Certificate serial:       0F95621F77813530BCD829B931C11DBF909E85F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.mft
Manifest number:          016F
Signing time:             Mon 15 Apr 2024 06:12:40 +0000
Manifest this update:     Mon 15 Apr 2024 06:07:40 +0000
Manifest next update:     Tue 16 Apr 2024 08:21:40 +0000
Files and hashes:         1: 91BD56ECBC6C49278C61C353E8FF806FED55FD00.crl (hash: V/Gl6pr1xOAWucasC7hcfev0VV6G/GtzbBR+ZfAqZzQ=)
                          2: 323830343a333339343a3a2f33322d3438203d3e20323635343035.roa (hash: +sHuwtpvkO7ta9EtC00zlclR39sx7J2jeQOoeRXSVtA=)
                          3: 3136382e3139342e3135322e302f32322d3234203d3e20323635343035.roa (hash: I4QAFlUIWCpxjmM3abs4tzKOJLR9Xs3pLIVz1q93TYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:95:62:1f:77:81:35:30:bc:d8:29:b9:31:c1:1d:bf:90:9e:85:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BD56ECBC6C49278C61C353E8FF806FED55FD00
        Validity
            Not Before: Apr 15 06:07:40 2024 GMT
            Not After : Apr 16 08:21:40 2024 GMT
        Subject: CN=E5ACD597FC58DC1E9F59FE33ACFFA3224F6FA9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:5c:f8:81:b9:1e:d6:ad:d6:54:1f:06:4a:
                    37:23:05:cc:73:b3:19:22:8d:1d:d3:b3:75:ce:fa:
                    47:b1:18:82:83:8c:dd:8d:39:b8:45:82:07:bf:2e:
                    53:6f:15:97:f7:99:69:05:f3:6a:cd:3d:0d:4b:32:
                    4f:5b:61:3c:73:2b:64:2a:4c:21:41:ae:30:45:2d:
                    d3:a6:75:09:6b:6c:6a:cb:0e:e7:21:3a:f4:48:13:
                    58:7c:89:d4:00:43:e1:a9:01:55:90:5b:20:0b:04:
                    e7:6f:9b:ac:c9:96:f7:37:7c:ef:50:f1:db:a2:b8:
                    e4:89:4c:21:0f:cd:61:34:4c:e6:7c:b9:4b:6c:c6:
                    51:a9:7f:23:70:62:cd:8a:13:f2:32:f2:83:a8:d7:
                    62:7d:eb:dd:5b:27:4a:21:5f:34:23:fc:37:2d:21:
                    50:cf:6e:e7:1e:f0:59:d0:f5:4e:0b:d8:fd:46:d8:
                    26:07:aa:08:e5:b8:bd:af:e7:d0:4c:be:92:3d:33:
                    fe:28:bb:78:d3:d7:5e:ff:4d:15:59:dc:cc:f0:9b:
                    4b:4e:fe:a4:ef:7a:57:84:53:fe:bf:b2:cd:f0:b4:
                    b8:e9:d6:a7:42:e3:1a:ad:95:59:29:c1:3e:ff:8e:
                    c2:cf:a6:ab:f0:7b:54:eb:22:1b:7f:fa:4d:23:48:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AC:D5:97:FC:58:DC:1E:9F:59:FE:33:AC:FF:A3:22:4F:6F:A9:D1
            X509v3 Authority Key Identifier:
                keyid:91:BD:56:EC:BC:6C:49:27:8C:61:C3:53:E8:FF:80:6F:ED:55:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/91BD56ECBC6C49278C61C353E8FF806FED55FD00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:84:1d:b4:54:7c:d1:bb:bb:b9:28:0a:c5:10:c1:3b:9c:26:
         e2:9b:65:8b:ba:b0:a2:38:0a:7d:f9:99:1b:e5:8b:9c:f9:13:
         fe:d3:c9:04:2b:a1:8a:57:bf:04:e2:9e:02:71:64:b1:b1:70:
         a6:5a:8a:83:7f:36:7f:25:92:ad:55:fd:ee:63:ce:e1:e7:05:
         15:90:a3:d2:cd:83:11:48:1f:90:5a:b1:bf:71:64:97:a7:a7:
         27:0d:a7:7c:e7:a9:03:d7:5b:fa:71:68:d0:87:30:14:73:df:
         fe:c1:ca:87:87:ca:d7:0c:07:f9:aa:2c:cd:6d:c6:1b:68:f6:
         5f:10:de:8d:f1:9a:ea:b9:e1:e7:e3:42:16:eb:73:c7:dc:6c:
         2b:85:a5:63:7e:de:c7:60:66:dc:08:d7:f0:38:0d:f2:c9:82:
         03:83:d8:6b:9a:b1:6e:b2:05:85:bb:7d:9b:07:f8:fe:4a:cd:
         90:40:a0:28:89:41:1d:66:a1:e7:22:36:7b:17:d3:0f:1d:29:
         84:e0:6d:a1:db:b9:c9:9a:48:f3:03:55:d4:69:0b:7d:f1:49:
         94:c2:83:47:dd:70:21:d4:e9:7f:15:0b:ad:19:e4:9d:97:4c:
         77:49:10:95:3f:07:ab:fd:45:84:b4:b8:4b:79:e2:14:c5:d7:
         8a:22:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----