Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.mft
File:                     A918546B0C5D16E5BE151521B74964B746CBDEB1.mft (raw, json)
Hash identifier:          4UhHBlsUBS0XKKmvKVPoewc8v2ZIZd7RxCTMthR3WE4=
Subject key identifier:   6D:F7:05:A4:4F:5E:1B:E0:7E:B7:0D:B4:D6:A4:EF:A1:AB:F3:FF:C6
Authority key identifier: A9:18:54:6B:0C:5D:16:E5:BE:15:15:21:B7:49:64:B7:46:CB:DE:B1
Certificate issuer:       /CN=A918546B0C5D16E5BE151521B74964B746CBDEB1
Certificate serial:       376DCC6A54D5C461676B267EEC65C5AF4951D30D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.mft
Manifest number:          1F
Signing time:             Mon 15 Apr 2024 08:12:44 +0000
Manifest this update:     Mon 15 Apr 2024 08:07:44 +0000
Manifest next update:     Tue 16 Apr 2024 11:29:44 +0000
Files and hashes:         1: 3137392e39372e32342e302f32312d3332203d3e20323633343131.roa (hash: /RWjNVOT1bLGY+ZbmDErM5LZdi1LZGBnNq35euoYQ3M=)
                          2: 323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (hash: qYaC2Qou/FwE4CkMUxWUa2ORT0WrTqyMEmkRQlINNEs=)
                          3: A918546B0C5D16E5BE151521B74964B746CBDEB1.crl (hash: FaSDXRaCCFiS7NkHWsAEDD76U7LFGSMdb5jPMicRnAE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:cc:6a:54:d5:c4:61:67:6b:26:7e:ec:65:c5:af:49:51:d3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918546B0C5D16E5BE151521B74964B746CBDEB1
        Validity
            Not Before: Apr 15 08:07:44 2024 GMT
            Not After : Apr 16 11:29:44 2024 GMT
        Subject: CN=6DF705A44F5E1BE07EB70DB4D6A4EFA1ABF3FFC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:da:1e:3e:1c:0c:56:a9:ff:ea:6c:97:db:
                    87:5b:c8:f2:d7:5a:55:1c:8e:94:ce:f8:30:10:2d:
                    2f:7e:6a:b5:c7:17:66:48:6f:68:6c:f3:d5:22:d6:
                    fe:1e:94:d1:d6:41:37:93:1d:4b:04:90:58:02:37:
                    f3:09:fa:50:5f:fb:42:46:ca:0a:2b:a4:5f:3b:3b:
                    fd:8b:0e:63:e3:d4:c4:7d:b2:8a:4b:88:ab:34:58:
                    eb:5a:23:96:c7:22:e1:57:94:33:b9:64:b9:6e:80:
                    96:bf:15:8b:3b:ef:dc:f8:16:8a:d8:41:af:d0:41:
                    73:b6:7a:16:5f:01:b8:d5:32:55:1d:0e:c7:96:ea:
                    dc:f1:c8:36:7c:fc:dc:30:7d:b4:66:0e:2f:70:b4:
                    ff:b4:0a:e4:3c:ad:f6:aa:55:21:4d:3e:b8:06:8b:
                    59:b9:18:1a:5d:01:f1:e2:a5:80:85:74:f5:f8:95:
                    94:d6:d3:f9:ea:43:f4:dd:a5:fe:12:5d:7c:92:b7:
                    3f:25:53:38:7c:b4:23:d9:d1:ea:9d:5a:a3:3a:db:
                    07:8b:5b:3b:38:e0:2d:42:97:95:3c:89:6f:0e:5d:
                    54:d4:8d:38:a4:21:79:eb:32:0a:11:fa:c4:8a:09:
                    5f:d3:7d:d5:be:85:44:f5:1b:59:f7:1b:34:04:1a:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:05:A4:4F:5E:1B:E0:7E:B7:0D:B4:D6:A4:EF:A1:AB:F3:FF:C6
            X509v3 Authority Key Identifier:
                keyid:A9:18:54:6B:0C:5D:16:E5:BE:15:15:21:B7:49:64:B7:46:CB:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d6:0a:80:36:c5:c5:33:ed:1a:45:a2:20:6d:8a:53:51:7e:
         66:ef:ea:69:d3:f4:8d:27:30:69:1a:a5:bd:9e:62:a6:72:5a:
         3b:c0:e1:16:98:46:b3:70:ea:27:62:46:66:f7:37:fc:e2:05:
         86:42:cd:6f:54:84:cf:a6:e5:37:d7:43:ae:98:5b:10:96:62:
         d0:c7:82:e1:66:53:5a:6e:be:0a:8b:6e:d7:10:17:0e:6a:26:
         7c:a0:00:30:e0:c9:4e:f7:6c:98:1b:6e:8b:d5:e7:3f:c6:25:
         79:49:6b:7f:1b:0d:82:9c:cd:db:f9:ee:46:67:d7:84:a2:c3:
         df:8b:5b:46:ab:fe:66:6b:09:93:d6:cb:a7:e2:55:82:fc:c1:
         b8:70:e5:d4:e7:3e:02:07:90:86:49:0a:2a:f6:92:b1:2d:40:
         24:70:96:17:7a:73:3e:78:50:ec:ca:81:0e:90:3e:53:c3:dd:
         54:d0:4e:e4:02:e3:20:f4:4c:0d:05:c4:94:4c:71:bc:99:87:
         cf:79:00:b1:1a:f9:0a:1b:d8:70:f1:f0:8f:3d:d4:8a:d6:fb:
         bd:5d:3e:e6:2e:28:cf:59:c8:69:27:6d:b2:59:95:4f:0f:f6:
         2c:90:25:60:7c:41:c8:9f:04:9b:73:69:b9:b5:19:ae:40:1e:
         0a:6f:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----