Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1D001E0C683786F6071FF0B5D345A739882F8C3D.mft
File:                     1D001E0C683786F6071FF0B5D345A739882F8C3D.mft (raw, json)
Hash identifier:          02Nm3wXNbBKOnnor4c5SQruBTQ28zeDfkREJShzGCto=
Subject key identifier:   FD:B8:2C:70:DD:DC:53:77:85:68:6E:01:7C:DF:59:65:22:78:B5:A7
Authority key identifier: 1D:00:1E:0C:68:37:86:F6:07:1F:F0:B5:D3:45:A7:39:88:2F:8C:3D
Certificate issuer:       /CN=1D001E0C683786F6071FF0B5D345A739882F8C3D
Certificate serial:       18B88691677470069A5374507EE61239BD687730
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D001E0C683786F6071FF0B5D345A739882F8C3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1D001E0C683786F6071FF0B5D345A739882F8C3D.mft
Manifest number:          01
Signing time:             Mon 19 Aug 2024 15:19:51 +0000
Manifest this update:     Mon 19 Aug 2024 15:14:51 +0000
Manifest next update:     Tue 20 Aug 2024 16:44:51 +0000
Files and hashes:         1: 1D001E0C683786F6071FF0B5D345A739882F8C3D.crl (hash: L+2JGlKkPsFBZLiPKmzUVkGKKlxRPIZdBx2oSJhZ+uI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b8:86:91:67:74:70:06:9a:53:74:50:7e:e6:12:39:bd:68:77:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D001E0C683786F6071FF0B5D345A739882F8C3D
        Validity
            Not Before: Aug 19 15:14:51 2024 GMT
            Not After : Aug 20 16:44:51 2024 GMT
        Subject: CN=FDB82C70DDDC537785686E017CDF59652278B5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:1e:f9:78:77:13:26:59:b2:f2:13:78:9a:
                    e7:70:99:b9:03:15:d0:51:16:e0:a0:a1:7a:f5:55:
                    90:de:99:eb:8b:46:d4:a8:0d:d2:d4:56:41:ed:37:
                    85:e6:fe:2d:c2:51:e8:42:a5:b2:fc:1b:c0:46:18:
                    2c:35:48:0c:6d:c9:75:d3:86:33:18:12:b4:c4:73:
                    cf:60:6a:9c:ee:bb:63:5c:8c:54:d8:cb:61:10:ba:
                    96:f0:8b:6e:79:44:34:1f:a1:8c:e4:17:3f:24:9b:
                    a9:cb:14:15:f8:52:11:6b:0f:03:e9:76:24:02:d3:
                    16:a1:ad:c1:bc:d1:93:ef:ed:5d:44:41:49:0f:3d:
                    48:2a:bf:c8:bb:aa:f2:a2:53:19:82:57:8e:68:0f:
                    0e:25:9e:b6:da:ab:6b:19:d7:ed:a3:de:20:71:1d:
                    4e:d5:e9:f8:8d:05:fc:9f:da:51:a6:8e:10:93:8b:
                    07:99:dc:43:a1:d6:ae:99:40:67:74:f5:35:15:46:
                    56:ee:92:98:ba:91:80:fd:a7:2d:16:2d:3e:d6:f7:
                    1c:d3:16:b1:e6:1a:e1:8c:3b:96:5c:8a:44:30:c0:
                    46:b3:76:62:d2:a7:39:ef:b1:5d:6c:be:c3:1e:85:
                    d7:a6:dc:39:65:42:71:2a:a1:94:a1:d8:16:42:00:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B8:2C:70:DD:DC:53:77:85:68:6E:01:7C:DF:59:65:22:78:B5:A7
            X509v3 Authority Key Identifier:
                keyid:1D:00:1E:0C:68:37:86:F6:07:1F:F0:B5:D3:45:A7:39:88:2F:8C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1D001E0C683786F6071FF0B5D345A739882F8C3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D001E0C683786F6071FF0B5D345A739882F8C3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1D001E0C683786F6071FF0B5D345A739882F8C3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:22:74:9a:86:98:8f:2d:04:b7:f7:ce:7e:1e:a9:f9:47:7e:
         cf:b8:a0:31:6f:56:01:c5:78:cc:9f:88:6d:30:3e:41:15:be:
         11:79:ff:2f:1b:22:2f:6c:69:1f:1f:b3:e9:36:a3:01:74:a0:
         40:86:28:58:c1:fa:bb:d2:5b:ac:de:c5:cf:28:e2:2e:b6:cd:
         a8:ba:a4:ac:5f:fd:74:e7:11:76:87:34:ab:b7:d2:fb:ed:76:
         45:9a:f2:23:d5:64:74:b8:ff:56:44:da:41:64:a8:80:5d:55:
         7f:cb:54:dd:a6:7f:8e:c4:ad:e7:e2:80:14:8f:7c:3e:77:30:
         bf:0b:17:71:3c:24:44:41:ff:6a:4e:77:bc:74:41:93:fd:80:
         6e:8d:12:72:6c:a3:4b:0e:9e:63:8c:1a:d0:bc:ba:29:96:96:
         eb:af:08:9b:b2:ed:bb:4e:7b:73:fd:e0:8c:f3:53:89:3d:90:
         21:22:b6:c7:3c:dc:12:b5:25:26:8c:8b:cc:14:53:c5:1c:8f:
         a3:d3:4e:8f:d7:3e:75:4f:c0:17:89:d1:9f:69:66:f5:0d:54:
         3b:e6:e8:f1:76:5d:44:64:30:70:63:fe:0f:cc:b7:11:8d:41:
         5a:8a:df:f7:2e:15:13:a6:47:6c:fe:22:36:94:d3:6e:c6:fb:
         e5:28:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----