Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/1/7D1843AD918297DCB48DB477E542F40C8171BF4E.mft
File:                     7D1843AD918297DCB48DB477E542F40C8171BF4E.mft (raw, json)
Hash identifier:          zQVNCuTpWUZAsdVnJSlEwJ4IcRiTjI5JwOuckvKEGz0=
Subject key identifier:   35:1B:04:63:F9:69:78:83:78:DF:3F:50:20:2A:DF:52:57:13:D3:00
Authority key identifier: 7D:18:43:AD:91:82:97:DC:B4:8D:B4:77:E5:42:F4:0C:81:71:BF:4E
Certificate issuer:       /CN=7D1843AD918297DCB48DB477E542F40C8171BF4E
Certificate serial:       075DE5EBB1A29EE2B56F0FAA07D88569C201FD9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1843AD918297DCB48DB477E542F40C8171BF4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/1/7D1843AD918297DCB48DB477E542F40C8171BF4E.mft
Manifest number:          1C
Signing time:             Sun 21 Apr 2024 18:40:00 +0000
Manifest this update:     Sun 21 Apr 2024 18:35:00 +0000
Manifest next update:     Mon 22 Apr 2024 18:40:00 +0000
Files and hashes:         1: 7D1843AD918297DCB48DB477E542F40C8171BF4E.crl (hash: TD4Yocus4EzCl4goJdCPyOxiD2pQ7lTJs3ApUjU8jy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:e5:eb:b1:a2:9e:e2:b5:6f:0f:aa:07:d8:85:69:c2:01:fd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1843AD918297DCB48DB477E542F40C8171BF4E
        Validity
            Not Before: Apr 21 18:35:00 2024 GMT
            Not After : Apr 28 18:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:80:92:c6:41:3c:51:27:d4:47:2b:ce:b0:
                    a9:7a:ea:d0:16:af:70:29:0a:e8:24:a2:6d:29:68:
                    08:21:a2:a9:ef:77:cf:76:2f:bd:8a:77:64:12:f9:
                    87:5e:80:e3:96:e8:ba:41:18:da:1b:f2:8e:28:90:
                    ba:0d:3c:56:4f:23:77:b0:b0:06:68:09:58:2c:91:
                    42:63:17:a8:05:79:29:b7:a3:02:21:6d:5a:01:39:
                    dc:6b:3f:f2:5e:97:90:f9:41:11:32:94:32:13:b4:
                    b0:63:d3:56:8c:62:b0:68:62:91:da:5e:ed:18:be:
                    4e:89:63:9d:01:68:20:21:5e:b6:6d:51:e0:8a:a1:
                    bf:2f:8b:bc:f5:04:dc:c5:25:89:e5:a2:6b:cd:6e:
                    e6:db:fb:2d:32:ff:c3:ab:62:8b:4a:1a:e5:6f:25:
                    23:4f:64:6e:4f:07:72:2c:d3:b9:1f:b4:68:f2:b3:
                    ab:09:2f:28:00:3a:08:4b:3c:41:a1:88:e7:0b:93:
                    d6:72:06:31:d2:83:04:05:83:55:5e:3c:a1:4c:65:
                    7d:1f:ae:a7:8c:20:0e:07:d5:af:86:39:9e:81:71:
                    b5:25:fc:68:5c:ad:1f:bd:19:f9:a5:d5:a4:ba:96:
                    6c:fb:98:63:28:3f:cd:e4:c2:d8:be:11:14:17:15:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1B:04:63:F9:69:78:83:78:DF:3F:50:20:2A:DF:52:57:13:D3:00
            X509v3 Authority Key Identifier:
                keyid:7D:18:43:AD:91:82:97:DC:B4:8D:B4:77:E5:42:F4:0C:81:71:BF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/1/7D1843AD918297DCB48DB477E542F40C8171BF4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1843AD918297DCB48DB477E542F40C8171BF4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/1/7D1843AD918297DCB48DB477E542F40C8171BF4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:c8:66:66:3d:34:5b:50:65:7a:ff:03:7c:62:ae:cd:1d:
         15:66:dc:3c:5b:79:52:f7:65:fb:7e:d0:5a:6e:3d:1b:3a:ab:
         fd:89:b3:ad:a4:37:9a:c3:ad:e7:14:5c:d2:38:98:5a:b3:cd:
         be:81:26:0a:65:a1:13:52:cf:a6:fc:a5:33:ae:e8:d4:fa:30:
         50:48:04:3d:fe:05:90:02:be:42:84:f3:21:ea:93:35:bc:a9:
         5b:7b:33:f0:71:1b:9b:f9:ff:91:67:90:a7:00:00:79:a8:12:
         44:8b:96:75:57:eb:8f:13:3b:04:4c:57:95:e1:7f:92:e8:f9:
         8e:d1:e4:96:d4:d4:1b:e5:a7:80:ee:ba:bd:e9:a3:71:60:13:
         96:c6:c3:e9:28:c4:94:2b:93:a2:b5:fe:6d:a8:54:21:7f:b3:
         68:de:9b:c6:e0:c5:c5:c8:48:04:b6:cf:61:e0:bd:b2:72:55:
         47:25:d4:7f:e7:8e:b4:48:23:dd:55:29:9e:6b:d2:56:3d:e1:
         b0:fc:bf:e6:e7:f0:a2:41:ba:d9:81:4c:97:29:8e:ee:96:8d:
         ff:a1:4b:0b:a2:f1:db:d3:cf:b6:76:a7:19:d6:ee:d7:44:89:
         56:61:95:c7:f1:c8:60:51:f8:3d:db:1e:ec:d6:a3:95:c1:ce:
         eb:75:c4:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----