Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.mft
File:                     7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.mft (raw, json)
Hash identifier:          ydxGz/OjtU0fxQPy4JFudpvsq14oB9EypqCA7JqvUHk=
Subject key identifier:   87:8B:B1:B8:13:F0:8C:4E:ED:6E:CA:34:8F:CD:B0:B5:46:75:72:A6
Authority key identifier: 7B:0E:E7:7F:36:E4:2B:60:3F:E6:14:63:C5:A6:E8:A8:75:CD:8A:A3
Certificate issuer:       /CN=7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3
Certificate serial:       75C763F091E0C0299C501F86FABE6B7046606325
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.mft
Manifest number:          2F
Signing time:             Sun 28 Jul 2024 19:11:27 +0000
Manifest this update:     Sun 28 Jul 2024 19:06:27 +0000
Manifest next update:     Mon 29 Jul 2024 21:32:27 +0000
Files and hashes:         1: 323830343a373032633a3a2f33322d313238203d3e20323632393039.roa (hash: lmNEMiM3GcMsyzZCQaNMUS9cAn3lQLpFxYVYJQbp3Ho=)
                          2: 7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.crl (hash: ZGK9xLAWeL1+GTgiCwIRiagvuU2ZDI6STHT99vUDHw8=)
                          3: 3137372e33362e34382e302f32302d3332203d3e20323632393039.roa (hash: 0V3hia6iK+70zsKqvo3UyLkO/BVi3bvN+bCJVBOveT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c7:63:f0:91:e0:c0:29:9c:50:1f:86:fa:be:6b:70:46:60:63:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3
        Validity
            Not Before: Jul 28 19:06:27 2024 GMT
            Not After : Jul 29 21:32:27 2024 GMT
        Subject: CN=878BB1B813F08C4EED6ECA348FCDB0B5467572A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:f3:8e:cd:84:de:cc:8a:52:19:95:59:e6:
                    a0:0b:d5:47:0f:b0:de:bb:2f:69:1a:ec:a9:a6:cf:
                    45:5e:8c:1b:6a:bc:6f:1d:0d:71:00:0f:14:66:87:
                    9e:60:17:64:a5:f5:63:52:e6:ec:e5:76:e4:04:cd:
                    cf:66:c9:ef:24:ab:86:02:6f:78:19:fe:14:ef:9e:
                    58:64:a1:93:4b:60:c4:bc:3d:01:de:6b:87:d9:6d:
                    9e:61:f3:73:48:d3:8e:70:72:04:6b:87:73:05:e9:
                    bb:17:6d:24:1f:40:f7:ae:40:d1:14:a8:6f:47:40:
                    8e:2a:84:ff:60:12:23:11:a0:86:79:b7:2b:b3:6e:
                    77:23:f7:26:bf:0e:87:e2:14:3b:9c:1a:4e:ed:a3:
                    f5:54:99:93:0f:0e:cf:d8:6f:1c:a8:01:ce:11:90:
                    22:bc:db:e6:a4:25:60:da:ee:a7:c9:0e:a6:06:68:
                    43:62:e9:8d:d7:bd:59:da:29:e2:e5:66:c0:cf:0d:
                    ae:2d:4b:47:7f:ed:ef:68:8a:9b:fb:e3:ed:ca:7d:
                    6a:72:7d:ab:e8:89:21:03:e1:b2:3d:dd:01:24:98:
                    b4:dc:3d:93:28:d6:35:91:25:cc:7e:41:9d:1a:6a:
                    ba:49:c7:7a:ac:f8:63:5c:27:ef:8c:40:dd:45:65:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8B:B1:B8:13:F0:8C:4E:ED:6E:CA:34:8F:CD:B0:B5:46:75:72:A6
            X509v3 Authority Key Identifier:
                keyid:7B:0E:E7:7F:36:E4:2B:60:3F:E6:14:63:C5:A6:E8:A8:75:CD:8A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/7B0EE77F36E42B603FE61463C5A6E8A875CD8AA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:d7:9a:a1:6f:cf:96:97:66:cf:36:d6:2a:4b:27:ef:3f:
         01:95:fb:f6:d2:3f:26:07:1f:9e:a0:b1:d8:7b:8c:e4:7a:95:
         c4:93:a9:74:dc:6c:12:08:24:da:a1:e8:0d:fd:86:35:71:dd:
         d6:d0:ab:df:41:22:6f:2a:1f:58:6c:ed:f6:6d:fe:64:95:5d:
         5e:11:34:e4:2f:85:16:ba:b3:c2:69:f0:14:dd:aa:ab:6c:5d:
         49:f7:db:37:db:a2:99:92:f2:1a:87:c9:23:7b:90:f9:0e:13:
         f5:86:7f:be:08:eb:2c:3b:1f:c2:8f:05:25:c5:0d:07:3c:7e:
         38:e2:51:b9:21:36:b7:44:61:a9:a0:a4:10:fe:ed:3f:ff:e9:
         ad:f6:76:ec:58:1c:53:2a:2e:a2:7a:e4:79:f1:99:d0:04:93:
         14:8d:bc:5b:5c:d8:ad:d4:86:1a:b0:e3:16:f2:0f:c2:84:99:
         9e:b4:f2:1d:ad:e9:ac:08:4f:3b:9d:8d:46:56:44:15:2c:a7:
         f5:77:9f:d6:8c:a2:0b:f5:96:93:5e:e2:de:c0:1d:3c:cf:12:
         68:7f:f7:62:00:be:bc:04:20:29:c8:7d:8c:99:97:44:7b:89:
         d6:95:38:38:4e:19:f7:3c:13:fd:40:25:35:b1:1f:94:e7:59:
         14:e2:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----