Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft
File:                     D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft (raw, json)
Hash identifier:          KipsmYx2aUCO3pgMQsDK1MnFcrGYh4CinC5kB/M411s=
Subject key identifier:   EC:BB:77:56:99:24:02:1B:BF:63:E0:F3:61:41:FD:3C:92:25:7B:7C
Authority key identifier: D2:1C:3B:9B:01:00:AC:1E:3A:1B:7E:6A:2C:C3:0E:6A:52:DB:F6:90
Certificate issuer:       /CN=D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690
Certificate serial:       304ACB478EB57D38A4B70498FC2E50CCB596D50C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft
Manifest number:          09
Signing time:             Sat 10 Aug 2024 22:37:39 +0000
Manifest this update:     Sat 10 Aug 2024 22:32:39 +0000
Manifest next update:     Sun 11 Aug 2024 22:55:39 +0000
Files and hashes:         1: D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.crl (hash: xX/f3GbbgclwHTACiBKdyuDlUz2VjvFTXgA7vJGd4yw=)
                          2: 323830343a323534303a3a2f33322d313238203d3e20323634323638.roa (hash: lje7ReTMSmHA7XyVFgOvXEjOfYk7XrbNb71FMG4E9K0=)
                          3: 3133382e3131382e3137362e302f32322d3332203d3e20323634323638.roa (hash: TCmDutChysNtmEpTuvOozhmYSHTjEPy+KYRLKZAqj84=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:cb:47:8e:b5:7d:38:a4:b7:04:98:fc:2e:50:cc:b5:96:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690
        Validity
            Not Before: Aug 10 22:32:39 2024 GMT
            Not After : Aug 11 22:55:39 2024 GMT
        Subject: CN=ECBB77569924021BBF63E0F36141FD3C92257B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:7a:87:fe:a2:6c:e2:0f:f0:8b:51:fd:de:
                    6e:75:ac:e2:01:49:78:ec:47:af:a2:94:29:8c:d1:
                    b3:a6:31:56:90:38:51:67:b9:8c:e7:1d:31:12:56:
                    f3:03:a8:e0:c7:f1:32:77:19:33:65:09:59:0a:90:
                    bf:9d:37:fc:28:93:ed:52:8e:b5:5a:fa:2c:1a:2e:
                    bd:06:83:a5:b7:69:a4:19:78:37:41:d9:e3:42:54:
                    2a:21:60:3b:d5:33:e3:a3:6b:b8:4d:cc:a4:f1:7f:
                    4d:e0:72:35:91:41:42:a8:84:9c:57:b3:a9:66:66:
                    a7:8c:be:5b:5a:fa:d5:67:05:8f:76:06:8f:d1:9f:
                    00:fb:19:82:10:20:21:f7:7c:d9:51:7c:6a:79:04:
                    70:2a:94:81:64:c5:78:94:06:9e:2e:5c:2a:f7:e4:
                    4a:4f:f0:66:e2:6d:0b:e3:aa:41:7c:cf:83:b4:9e:
                    d2:d4:ff:f6:a2:ac:23:f5:6f:7a:1b:34:64:7d:ac:
                    4c:22:e3:b4:ae:7b:e9:47:cf:d0:ac:0d:f3:a7:02:
                    e5:10:38:e6:ea:c2:99:09:e7:ce:cf:b7:67:e4:ce:
                    b1:04:09:3e:e3:e0:2f:73:0b:c2:63:bc:6b:87:8b:
                    7a:4f:a3:f8:2c:b9:cd:0e:1e:e3:4c:3a:1b:92:78:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:77:56:99:24:02:1B:BF:63:E0:F3:61:41:FD:3C:92:25:7B:7C
            X509v3 Authority Key Identifier:
                keyid:D2:1C:3B:9B:01:00:AC:1E:3A:1B:7E:6A:2C:C3:0E:6A:52:DB:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/D21C3B9B0100AC1E3A1B7E6A2CC30E6A52DBF690.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9f:b5:49:cf:f0:e7:5c:02:ae:58:c7:81:5b:88:3e:d5:8f:
         27:72:78:01:ed:dd:76:2c:b9:b0:7e:5a:75:49:9b:86:5e:ed:
         0a:d3:ea:b2:2d:bd:a6:28:2f:cb:2b:de:89:ca:c1:99:08:e9:
         08:bb:03:e8:4d:08:d5:c0:57:01:f9:a7:cf:e9:d8:ea:ad:1b:
         e8:91:70:9f:99:f2:7a:52:a0:73:c5:4e:8e:b0:3f:f5:a1:9a:
         73:3e:65:ba:b5:1f:e5:63:2c:47:23:b0:be:67:3f:8a:83:84:
         7f:7c:c4:ce:99:1f:66:8d:e5:97:00:20:bd:15:b6:9e:23:a1:
         09:12:ba:8f:5a:b0:14:8d:46:97:d7:02:56:f0:55:90:83:26:
         fc:b4:40:a3:e8:43:40:db:72:a6:f8:73:f7:df:42:a5:10:ae:
         fc:c3:b2:fd:e2:ca:8d:c7:30:63:ca:eb:19:54:10:66:2b:83:
         48:0b:5b:c1:4e:30:d3:1c:f9:70:f4:b1:f4:f0:9b:39:b3:a9:
         51:7f:c8:ce:4b:7f:ab:7f:74:61:b7:34:3d:21:bb:45:b9:11:
         df:ee:97:73:32:5b:ba:75:cb:ac:4c:4e:6d:cb:37:a8:c6:cd:
         08:72:52:78:40:f3:76:18:44:4a:0b:d5:83:a3:12:e5:22:95:
         cf:0a:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----