Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.mft
File:                     838E68116DF7FA82100254E70121556A8E484E4B.mft (raw, json)
Hash identifier:          QTzNbJxLtcj7PnSaS9j2/UNTqKpj3JMbKGUU2ATYtas=
Subject key identifier:   0D:0B:A4:33:FD:FC:58:3C:25:EA:97:EF:D2:D2:0D:98:C0:AB:F9:7D
Authority key identifier: 83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B
Certificate issuer:       /CN=838E68116DF7FA82100254E70121556A8E484E4B
Certificate serial:       357DC691A573593BBA62CFFC214B8B38F1898021
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.mft
Manifest number:          026C
Signing time:             Thu 29 Jun 2023 00:46:53 +0000
Manifest this update:     Thu 29 Jun 2023 00:41:53 +0000
Manifest next update:     Fri 30 Jun 2023 03:41:53 +0000
Files and hashes:         1: 838E68116DF7FA82100254E70121556A8E484E4B.crl (hash: zYhDzOP0t+mZRCOen78zoGjwAC/xbMAlf9ckTh4yjPc=)
                          2: 323830343a363935633a3a2f33322d3336203d3e20323730323635.roa (hash: 4XgmenA/y+GUW5zQ/b6OAuS7THJ4OMq590L2WRx7kR0=)
                          3: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: E96/IFvKtupj6gXIjK8MIOrLQiTcg7DYidDmC8nomwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7d:c6:91:a5:73:59:3b:ba:62:cf:fc:21:4b:8b:38:f1:89:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E68116DF7FA82100254E70121556A8E484E4B
        Validity
            Not Before: Jun 29 00:41:53 2023 GMT
            Not After : Jun 30 03:41:53 2023 GMT
        Subject: CN=0D0BA433FDFC583C25EA97EFD2D20D98C0ABF97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:9c:69:0b:4a:4e:3e:1d:fe:28:e1:dc:8f:
                    0c:a0:b5:0b:e0:6a:bb:c6:69:1f:c9:a7:97:10:7a:
                    f1:38:e1:38:a3:db:b8:cf:c1:10:88:f5:7e:e1:41:
                    bf:3c:6b:2a:c8:0d:ab:0a:41:89:f7:f4:eb:c8:da:
                    3f:c6:37:4e:ee:9d:b6:1f:14:5a:11:3a:eb:4c:55:
                    0a:46:ba:65:1c:91:da:c1:87:6a:07:dc:7a:34:9c:
                    72:47:24:35:ee:61:59:60:37:e0:00:fc:94:a8:de:
                    e6:15:24:cc:06:74:e2:aa:66:6d:39:fe:82:5c:d2:
                    b4:ad:d8:54:33:ed:55:7d:1e:74:be:f3:60:a4:cd:
                    41:ff:49:1c:5a:46:6c:b3:39:ef:b8:9f:76:88:c3:
                    10:99:64:59:ad:73:b2:8e:3f:fe:ac:95:a9:51:50:
                    35:9f:19:6e:bb:e8:bf:62:cb:0e:55:64:28:38:95:
                    1b:68:c8:bc:d7:ac:07:f0:d8:ae:e4:a7:44:58:95:
                    23:c1:bb:68:87:9d:54:59:86:6d:5a:90:4f:06:6f:
                    88:bc:e3:eb:19:e2:20:06:33:9d:83:43:9e:9d:d6:
                    d5:76:b9:8c:c5:58:aa:b6:d8:48:21:1a:12:64:1b:
                    1c:ae:bb:fb:a5:58:a2:bf:d3:11:25:cd:a3:bd:6d:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:A4:33:FD:FC:58:3C:25:EA:97:EF:D2:D2:0D:98:C0:AB:F9:7D
            X509v3 Authority Key Identifier:
                keyid:83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:aa:50:15:74:ec:75:8c:9c:3b:4b:2b:ad:e2:6d:3a:8e:
         0b:63:a5:c1:12:ff:43:d0:45:6d:30:48:11:b3:4c:93:da:ba:
         08:53:15:cc:02:ad:0c:5e:b7:9f:21:1e:50:cc:2e:23:a0:8f:
         4f:ac:50:29:a1:0c:a2:a4:90:e0:3d:a1:c7:76:fa:4c:84:b0:
         bc:17:f3:55:32:93:3c:2d:d8:e5:1c:3c:d3:b3:1f:d6:95:d3:
         76:76:29:b2:25:96:f7:02:2d:b7:45:26:cb:b3:76:31:dc:83:
         a1:9c:ca:e6:c6:3f:a3:8e:ab:4e:0e:de:50:c0:19:10:1c:39:
         1e:5e:a3:a8:e8:48:bf:78:f2:3c:cc:9f:7d:7b:6b:04:46:ee:
         85:63:1e:a0:96:99:70:66:31:72:76:47:ca:a2:c3:9a:06:ed:
         d9:94:6a:34:b8:33:c3:b3:74:fa:a6:33:f4:57:d8:aa:ed:1b:
         bc:b8:d4:40:15:1b:63:f0:23:25:85:5b:e0:37:c6:fe:e1:85:
         dd:e6:e1:43:b1:56:80:51:71:4c:48:4d:7a:d3:b5:29:a1:81:
         51:f6:01:14:cb:02:19:e9:bd:b6:da:19:33:90:82:5d:8c:58:
         5c:7a:b6:c2:9f:f9:0c:e4:fb:07:f5:8c:8b:17:cc:e1:a0:39:
         6b:be:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----