Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/65CCA153130989E9957FE7D1123040C1DBB650CC.mft
File:                     65CCA153130989E9957FE7D1123040C1DBB650CC.mft (raw, json)
Hash identifier:          uKSQC0FNumLX30SLM90tRo+imZ28MmlSq3ZQK1y/pwM=
Subject key identifier:   2C:AC:F3:2C:2F:DB:6A:48:43:EE:66:6F:C2:35:FF:2F:B7:85:37:DB
Authority key identifier: 65:CC:A1:53:13:09:89:E9:95:7F:E7:D1:12:30:40:C1:DB:B6:50:CC
Certificate issuer:       /CN=65CCA153130989E9957FE7D1123040C1DBB650CC
Certificate serial:       2260700BCDF0CF295C35783A2B9C0865B99067CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CCA153130989E9957FE7D1123040C1DBB650CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/65CCA153130989E9957FE7D1123040C1DBB650CC.mft
Manifest number:          40
Signing time:             Wed 14 Aug 2024 22:09:51 +0000
Manifest this update:     Wed 14 Aug 2024 22:04:51 +0000
Manifest next update:     Fri 16 Aug 2024 00:31:51 +0000
Files and hashes:         1: 3137372e3138352e34382e302f32302d3234203d3e203532393330.roa (hash: cPp5Jj1/DgZM4PwpiYcki9d96BgcmkirC6LXhSJ7Ct4=)
                          2: 65CCA153130989E9957FE7D1123040C1DBB650CC.crl (hash: wAFVyyvTXiNjhe9J3k8/g97qfXeuC7I7cBTGN0uE9LE=)
                          3: 3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa (hash: eHm7ZumWcBNiDpUGKG2WIVbAUJdn5BQ/fQPhUO+AXGw=)
                          4: 323830343a6166343a3a2f33322d313238203d3e203532393330.roa (hash: q3WiSpx71OrvB4cSnx8xBco+hhSCkw852D0Y3FtLlFk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:60:70:0b:cd:f0:cf:29:5c:35:78:3a:2b:9c:08:65:b9:90:67:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CCA153130989E9957FE7D1123040C1DBB650CC
        Validity
            Not Before: Aug 14 22:04:51 2024 GMT
            Not After : Aug 16 00:31:51 2024 GMT
        Subject: CN=2CACF32C2FDB6A4843EE666FC235FF2FB78537DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:87:a0:be:2c:0f:ea:7f:e4:51:fc:fe:b4:
                    32:b9:26:75:b2:f0:a3:d1:cd:4f:8c:f1:4f:ea:0a:
                    71:b5:e3:3e:96:9e:c5:9e:c9:5d:d7:7d:aa:fd:86:
                    a8:97:48:86:5f:14:63:69:a9:fe:0a:5b:cf:67:95:
                    26:2c:78:02:20:f2:76:44:7d:1a:e7:c0:6a:e7:96:
                    7d:5c:0f:29:ba:ed:fd:6a:3b:af:fd:d9:1e:65:fe:
                    0d:6b:95:b9:7d:b3:05:9f:1f:f5:64:e4:31:09:b7:
                    45:61:4b:3e:32:ed:7e:11:e4:e8:78:37:6f:61:ca:
                    3f:e5:a0:95:0f:6d:9b:61:89:83:f6:7f:ef:c0:ba:
                    54:01:93:9b:96:15:fc:7f:76:ab:47:36:69:35:a0:
                    1e:c0:35:49:18:77:6e:77:e2:dd:67:df:6c:92:b1:
                    f7:80:00:38:94:ee:a5:e5:43:45:31:44:6f:60:e4:
                    0d:8e:f9:ad:78:13:74:53:16:f9:87:46:4c:4a:b0:
                    5e:62:6c:a2:9b:1b:bd:7b:8f:e9:07:5a:57:2e:4c:
                    90:c2:fe:2a:00:63:11:5c:90:3f:30:b4:f1:39:c2:
                    5c:0b:6e:1a:71:da:b0:95:a2:11:cb:c7:7c:d3:b6:
                    eb:98:b1:11:6d:7f:49:73:d4:65:48:c9:04:89:df:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AC:F3:2C:2F:DB:6A:48:43:EE:66:6F:C2:35:FF:2F:B7:85:37:DB
            X509v3 Authority Key Identifier:
                keyid:65:CC:A1:53:13:09:89:E9:95:7F:E7:D1:12:30:40:C1:DB:B6:50:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/65CCA153130989E9957FE7D1123040C1DBB650CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CCA153130989E9957FE7D1123040C1DBB650CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/65CCA153130989E9957FE7D1123040C1DBB650CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:07:24:90:a0:e2:3c:bd:28:06:ef:12:48:9a:d6:67:53:77:
         de:55:4e:8c:19:e9:77:61:2a:ec:a0:e6:0d:20:1f:ca:7d:6f:
         cd:b6:e5:3c:41:da:e9:5c:5d:74:d9:38:e8:3d:10:27:8b:35:
         0c:59:e2:af:18:64:07:e4:78:42:cc:f5:c5:42:db:71:70:ae:
         91:b8:04:07:df:29:17:82:23:47:b6:1a:2b:5e:ce:7a:3a:1d:
         09:1d:47:8a:3d:91:31:66:c7:cd:ca:c4:25:a6:1b:a4:e6:6b:
         f9:5b:7f:34:3e:00:47:d8:0f:62:ba:a5:cc:08:2d:a4:83:1c:
         bf:36:d9:28:86:57:91:94:9c:66:46:7d:cf:2c:0d:e5:26:3a:
         50:b3:ce:1a:98:6d:f3:29:45:5f:af:2b:1b:62:71:49:19:85:
         2c:67:b8:b5:0c:5d:89:95:86:d9:ea:3c:8d:95:1c:ff:5c:20:
         10:1a:cf:4a:03:c2:29:bf:a3:d6:fb:09:07:2c:55:2e:8c:20:
         2e:97:dc:76:f3:f4:b5:b8:c2:f8:e5:4c:1d:dc:d9:3b:11:b7:
         33:80:aa:1b:37:b1:1c:1b:80:09:9c:44:c7:ea:e1:0b:87:83:
         8e:66:b0:e5:7a:4d:09:be:69:2a:f1:cd:a9:81:e7:47:08:4f:
         d6:96:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----