Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.mft
File:                     BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.mft (raw, json)
Hash identifier:          Fa8Uj5LTeDDqzGDy6Yd6dxn5zdaB58sq4KcFDL5v3f4=
Subject key identifier:   60:05:BB:A9:DF:D4:71:9C:55:D5:7D:FD:CA:57:56:CE:0F:6F:9B:E7
Authority key identifier: BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5
Certificate issuer:       /CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
Certificate serial:       6AEF0DDE80B104ABA296B284639BA0029222851B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.mft
Manifest number:          50
Signing time:             Mon 15 Apr 2024 08:39:28 +0000
Manifest this update:     Mon 15 Apr 2024 08:34:28 +0000
Manifest next update:     Tue 16 Apr 2024 11:17:28 +0000
Files and hashes:         1: BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.crl (hash: /hEhm/7tgxET7UZv6O6hV1MIEJra2CIUNqcDGxU0g1M=)
                          2: 323830343a346138383a3a2f33322d3438203d3e20323637323436.roa (hash: /nSAaB3M4V01NJQdBCk9y9g+vQPBHCbzY/epMTvMzlQ=)
                          3: 34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (hash: zAlrKN057hfxmQ85ockYWnSW5bu3tT20Tp9AkxR1E4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ef:0d:de:80:b1:04:ab:a2:96:b2:84:63:9b:a0:02:92:22:85:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5
        Validity
            Not Before: Apr 15 08:34:28 2024 GMT
            Not After : Apr 16 11:17:28 2024 GMT
        Subject: CN=6005BBA9DFD4719C55D57DFDCA5756CE0F6F9BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:fc:6e:9a:0e:e6:58:ad:26:6a:28:1f:5e:
                    6c:d9:e9:d8:bf:e5:76:93:f4:60:39:45:46:80:2d:
                    b0:63:80:c8:d7:bf:57:ff:e4:67:5a:17:c7:81:84:
                    15:ab:f8:e2:27:6e:23:4c:70:43:65:d5:60:6a:cd:
                    c7:cd:ae:d0:22:1b:f4:6f:69:e7:0d:d9:02:69:26:
                    05:4d:70:9e:31:15:f0:c6:ec:6e:58:e7:0d:03:51:
                    ae:e8:95:75:d4:3f:73:10:d1:6b:a7:63:f1:6b:94:
                    a1:56:0a:44:73:f2:91:62:32:a7:08:db:ac:b9:fe:
                    13:1e:95:7a:ce:55:49:19:0b:02:f3:8b:a5:b1:cd:
                    52:6a:11:df:20:4d:3f:8a:ec:2b:1b:e7:12:ee:5d:
                    8a:0f:df:13:cb:b3:d0:ef:54:8b:77:dd:95:26:8f:
                    7d:d3:3f:70:ab:f7:b8:91:24:bd:e3:e2:09:b2:b8:
                    64:75:2b:a0:77:33:ac:60:fc:15:e9:55:df:b2:de:
                    63:98:de:8a:03:87:a5:89:d6:5c:b5:aa:8d:1e:23:
                    a7:78:a2:21:19:ee:20:db:b3:cf:13:ce:0c:6c:fb:
                    de:37:fa:c2:03:a2:c2:7f:64:3e:fd:72:4c:b2:57:
                    40:34:d3:5f:76:d0:27:e1:31:5d:d7:27:38:a4:46:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:BB:A9:DF:D4:71:9C:55:D5:7D:FD:CA:57:56:CE:0F:6F:9B:E7
            X509v3 Authority Key Identifier:
                keyid:BF:7E:A7:36:40:E6:02:9F:6A:17:BE:AA:62:D4:4D:3E:AB:DA:4A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/BF7EA73640E6029F6A17BEAA62D44D3EABDA4AB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:c9:fd:45:2b:03:94:9f:ef:5e:7d:b0:fd:47:ee:87:08:
         92:30:92:00:28:f6:f7:8f:a1:c6:d0:c1:75:e1:d6:bb:66:d1:
         f4:18:d8:be:c2:13:62:35:24:f5:c9:36:f2:b6:9a:00:15:18:
         5c:3f:f5:5a:bc:d6:f7:19:07:e0:9e:38:3d:26:05:e0:40:b7:
         14:94:cb:84:2a:53:7f:8d:8d:7c:d9:c6:c2:72:d3:62:d4:b1:
         1e:9c:99:82:d7:a8:f3:47:13:d6:3f:97:a9:2c:bc:0d:b4:06:
         3b:86:c3:39:57:e7:0f:55:d1:df:fc:bf:1d:38:dc:3a:29:f9:
         dc:d2:14:48:c8:f4:23:e6:29:90:57:0c:43:0d:a8:9a:c7:63:
         36:c4:51:77:07:10:de:8c:5c:08:7a:bf:1d:bf:ab:5e:fc:c7:
         66:76:34:1d:98:f0:50:4a:26:46:42:7c:f1:f9:1a:2a:42:06:
         66:1a:92:ae:31:79:17:3b:2e:da:6f:29:f4:d0:60:bc:95:fb:
         56:6b:ae:09:82:c7:40:f6:46:95:3b:7f:45:a8:53:a5:b9:cf:
         0f:27:23:fd:f7:df:0a:47:b2:70:75:9c:6a:e1:86:aa:0d:8c:
         2e:f2:19:b2:dc:5b:49:70:f2:98:fc:7b:a5:a5:83:f1:49:ce:
         a1:14:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----