Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.mft
File:                     C0A7CA467EE94B94A1D063A15D315BD19A77A977.mft (raw, json)
Hash identifier:          nia2EiOHG97cKhv7fffKVRRtUGuI/4r8UmPcn8ecowQ=
Subject key identifier:   34:D6:8B:C3:F7:BD:07:2A:DD:D1:D3:17:D4:34:D0:DC:40:8D:C0:6D
Authority key identifier: C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77
Certificate issuer:       /CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
Certificate serial:       72E09644CDE3972FF3CA5761555B1A3373E5BEBE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.mft
Manifest number:          8F
Signing time:             Thu 18 Jul 2024 14:01:17 +0000
Manifest this update:     Thu 18 Jul 2024 13:56:17 +0000
Manifest next update:     Fri 19 Jul 2024 16:55:17 +0000
Files and hashes:         1: 34352e3233302e38342e302f32332d3234203d3e20323639333539.roa (hash: 1ugqAU6qG+WUBfMZk4Vm7QWMvpVOKbm+fPCvlKcK0pQ=)
                          2: 3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa (hash: c2wA9MOW00xMonDcD3MAyNV6gcW/zhVmNtynGK59D4I=)
                          3: 34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (hash: PNQDrBJU2ZWLMaj83lFOpeGmXK6VTOBglW+zGsCN83k=)
                          4: C0A7CA467EE94B94A1D063A15D315BD19A77A977.crl (hash: 0vfJnoqYBrl3sa1jhcKKG+JOPeS9YStp97yfISPxyzI=)
                          5: 323830343a363336383a3a2f33362d3336203d3e20323639333539.roa (hash: gsRRr4f7IuDHENF/Tga5S1b6kf8/WJiFFVmkAgyp/f4=)
                          6: 323830343a363336383a313030303a3a2f33362d3336203d3e20323639333539.roa (hash: tlgeJdRqPJd4aq7EK9wza9KpskmZMy25JL9K6vGpRgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e0:96:44:cd:e3:97:2f:f3:ca:57:61:55:5b:1a:33:73:e5:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
        Validity
            Not Before: Jul 18 13:56:17 2024 GMT
            Not After : Jul 19 16:55:17 2024 GMT
        Subject: CN=34D68BC3F7BD072ADDD1D317D434D0DC408DC06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:6f:15:b4:8e:79:b4:f6:66:95:34:52:e1:
                    3d:4a:bd:a1:b5:a2:97:15:83:b1:4f:6a:84:f3:04:
                    a3:ec:db:29:27:3c:0f:58:76:74:3e:3a:19:bc:7f:
                    fe:26:1f:14:3c:dc:87:db:e8:07:06:09:91:f1:6a:
                    85:0a:e3:48:1f:86:5a:ef:c1:be:ca:fb:1f:ee:25:
                    4c:16:40:11:08:59:a5:0a:2e:dd:f9:1b:d7:26:ce:
                    c2:1c:69:50:6e:fd:03:33:7e:52:1b:d8:cd:04:6f:
                    66:ce:84:ea:2c:6e:5a:5b:f7:22:37:df:ba:ba:b6:
                    ec:34:7b:70:10:e8:db:b8:84:c7:81:5b:1f:c7:c6:
                    f3:ec:ca:e0:8e:c7:e2:9c:77:d1:05:b4:90:06:f6:
                    24:ab:54:09:65:79:f0:47:d5:ae:81:cd:de:0d:d5:
                    eb:ae:fa:cb:15:31:fb:a9:df:dc:0e:e7:d9:0a:00:
                    cc:e5:1d:39:ce:6c:6f:6f:cd:40:bd:f6:17:3c:8c:
                    db:10:f5:d4:8f:73:e4:61:88:f6:89:5f:b1:ec:f5:
                    c0:eb:34:ab:b5:1e:38:16:4f:26:91:85:99:3b:06:
                    5f:92:aa:70:b2:91:bd:c0:43:cb:48:05:4b:93:46:
                    05:99:5d:cd:a5:6a:0d:d4:42:77:db:a9:6c:09:ed:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:8B:C3:F7:BD:07:2A:DD:D1:D3:17:D4:34:D0:DC:40:8D:C0:6D
            X509v3 Authority Key Identifier:
                keyid:C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e0:1b:55:32:2a:c3:d7:0c:08:d9:c6:5f:b1:0a:03:a0:19:
         6b:e7:ae:25:65:8e:40:2e:33:96:b2:1f:7e:e4:d4:da:f8:c5:
         48:0b:ff:a2:76:87:89:6c:0d:db:dd:38:03:7e:38:39:0c:a9:
         3f:c1:34:b8:42:41:2b:b9:2f:56:54:f7:3c:68:9a:b7:e7:f5:
         b6:25:f5:aa:f1:61:48:9d:93:00:19:4c:d7:5e:93:02:d0:42:
         6f:b5:66:22:3d:6f:66:26:29:44:de:3d:7f:f2:22:44:4d:9f:
         11:a6:cb:85:21:7f:06:ae:70:d7:dc:7b:51:52:51:7d:86:8d:
         fc:9b:fd:61:ec:ab:75:bd:d4:dc:d4:b2:d0:a4:e1:e8:3e:25:
         2a:6d:b6:92:d5:70:99:15:1b:ba:47:20:18:b3:ce:02:0a:a9:
         63:ce:81:7b:59:1d:53:91:ee:93:d8:9e:5a:c2:1d:4d:a1:10:
         44:8c:03:fb:46:af:8e:cf:4a:07:7d:4b:80:f6:09:37:34:98:
         cb:bc:5c:bd:3e:63:8e:4d:da:bd:ef:60:64:8b:2a:c8:76:bb:
         ea:92:2b:b4:a4:85:d9:e0:05:ca:96:b8:10:5a:65:f3:43:9b:
         c8:19:6c:fe:78:1b:bf:28:ca:eb:90:6e:40:96:17:43:14:0f:
         0b:2d:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----