Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/E59C6D0050D3103A899C5B0E91351A8FFDD280F4.mft
File:                     E59C6D0050D3103A899C5B0E91351A8FFDD280F4.mft (raw, json)
Hash identifier:          pY3N+s7gXFJ7rz5SMC7Ap7Vklrzt+3LUp6MCsilJXLc=
Subject key identifier:   6F:4A:14:81:EF:B5:97:45:17:A9:5C:BC:BB:6F:82:30:F9:2B:D7:E3
Authority key identifier: E5:9C:6D:00:50:D3:10:3A:89:9C:5B:0E:91:35:1A:8F:FD:D2:80:F4
Certificate issuer:       /CN=E59C6D0050D3103A899C5B0E91351A8FFDD280F4
Certificate serial:       06CA18D7113375275AC262F3AABE781BC157B8F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E59C6D0050D3103A899C5B0E91351A8FFDD280F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/E59C6D0050D3103A899C5B0E91351A8FFDD280F4.mft
Manifest number:          07
Signing time:             Sat 03 Dec 2022 02:23:02 +0000
Manifest this update:     Sat 03 Dec 2022 02:18:02 +0000
Manifest next update:     Sun 04 Dec 2022 05:57:02 +0000
Files and hashes:         1: E59C6D0050D3103A899C5B0E91351A8FFDD280F4.crl (hash: O5mZSv7MEoMfeE39bynD04h7UTcxf/1xMNJtqjMRfHo=)
                          2: 34352e3138322e31362e302f32322d3234203d3e20323639323631.roa (hash: y5SqhFS6sj51+bhfSuBTswStj78g7ZxbTFr1Ofv/SMM=)
                          3: 323830343a363164633a3a2f33322d3336203d3e20323639323631.roa (hash: sYI8Rk1D6taKoSX4FOmI66LAoydVSszq9qvWWFonfLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:18:d7:11:33:75:27:5a:c2:62:f3:aa:be:78:1b:c1:57:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59C6D0050D3103A899C5B0E91351A8FFDD280F4
        Validity
            Not Before: Dec  3 02:18:02 2022 GMT
            Not After : Dec  4 05:57:02 2022 GMT
        Subject: CN=6F4A1481EFB5974517A95CBCBB6F8230F92BD7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:02:c0:bc:95:26:70:e8:5e:a1:0b:7e:cf:
                    50:59:e1:05:7f:77:74:41:09:ae:12:ea:22:61:f2:
                    d7:04:fd:e2:0b:59:a4:3a:cc:dd:27:89:d3:ff:f4:
                    46:f6:f8:19:89:44:f1:b0:84:04:87:5b:49:09:55:
                    cc:01:18:e4:6c:e3:a8:90:91:b9:82:fa:09:99:49:
                    be:a2:7d:c9:68:8b:e3:a3:a2:3e:38:a0:e7:09:a5:
                    84:ad:19:dc:a0:95:0b:03:e4:cf:a3:68:23:d4:8d:
                    81:79:1f:34:a4:87:e6:33:e8:52:c6:b1:18:b4:ae:
                    ba:fb:0f:da:a5:bb:0a:1a:42:2c:70:c2:6a:d2:d6:
                    d1:d6:b0:d7:da:0e:a3:1b:0a:4b:30:86:db:ce:78:
                    ab:25:09:90:76:d7:fb:15:3a:2d:88:a2:5a:75:46:
                    34:56:d0:b5:8a:45:60:ea:b7:20:dd:7a:41:9c:6b:
                    a2:e1:ec:bf:a6:e7:1d:27:05:c5:2b:48:e4:3c:bc:
                    c9:2c:0e:e3:95:e6:a4:23:6e:d5:68:ab:99:24:02:
                    5d:a2:e1:0d:6a:5a:e3:0d:8b:e4:dd:72:0a:3d:9e:
                    ef:41:29:a7:21:b9:75:e2:96:eb:e6:9c:93:61:03:
                    fa:b6:5a:66:20:2a:f7:67:8b:2c:96:05:b0:08:e2:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4A:14:81:EF:B5:97:45:17:A9:5C:BC:BB:6F:82:30:F9:2B:D7:E3
            X509v3 Authority Key Identifier:
                keyid:E5:9C:6D:00:50:D3:10:3A:89:9C:5B:0E:91:35:1A:8F:FD:D2:80:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/E59C6D0050D3103A899C5B0E91351A8FFDD280F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E59C6D0050D3103A899C5B0E91351A8FFDD280F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/E59C6D0050D3103A899C5B0E91351A8FFDD280F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:09:3b:c1:3e:35:0e:1e:b1:cf:c3:4f:cd:56:56:0d:59:b8:
         22:64:ce:06:1f:14:9c:f9:22:a1:7b:42:7e:65:b4:b9:1d:90:
         ea:48:ce:23:80:49:fd:d4:81:d3:64:00:49:67:98:e0:1d:2d:
         67:41:94:32:35:57:33:2e:b0:70:34:88:54:d7:c0:98:2d:0f:
         07:6d:1f:11:9b:55:53:5e:28:17:2d:e1:3d:85:dc:c7:8c:a9:
         fd:f6:f6:4e:5f:06:02:5c:1c:97:40:38:3d:8c:c1:60:ae:9e:
         42:1d:0b:fd:34:02:ab:71:01:72:e1:d3:85:f5:6b:df:40:13:
         2d:8d:a4:5d:bf:2b:4a:07:b4:50:91:5a:bc:ad:f0:b2:40:80:
         06:df:3d:14:15:69:ff:d7:22:2b:c1:25:e8:21:1b:3e:16:4c:
         c1:e8:ff:f6:8e:56:ad:ea:8e:9e:ea:a5:d3:41:4d:29:68:a4:
         31:54:05:77:88:c2:67:58:d7:b4:ee:c5:42:f4:83:55:3e:fa:
         75:09:db:cf:f0:3c:70:eb:fa:88:00:fc:c2:46:9c:9f:37:e6:
         6a:b4:8c:40:80:98:89:b3:e7:cc:ac:bc:f3:93:68:7d:e9:a3:
         34:be:45:5b:97:ff:4f:de:5a:ed:56:d1:a2:95:14:d4:c5:24:
         d8:5a:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----