Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.mft
File:                     9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.mft (raw, json)
Hash identifier:          Q70rl+poMNSCq0LU5TMFbAm/4daZw1cb0THu9hL//qQ=
Subject key identifier:   34:FF:17:1B:7D:14:58:CE:15:BD:77:79:E8:45:85:C5:FE:08:F1:6A
Authority key identifier: 9B:39:9E:BA:CF:83:98:BE:48:81:B8:A2:BA:EE:BD:AF:EC:C7:35:01
Certificate issuer:       /CN=9B399EBACF8398BE4881B8A2BAEEBDAFECC73501
Certificate serial:       31C1E92B8435BF85F6B161B30C8A34D6F32DA39B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.mft
Manifest number:          1B
Signing time:             Sun 28 Aug 2022 04:27:29 +0000
Manifest this update:     Sun 28 Aug 2022 04:22:29 +0000
Manifest next update:     Mon 29 Aug 2022 06:19:29 +0000
Files and hashes:         1: 3136382e3139372e35322e302f32322d3234203d3e20323632383830.roa (hash: w+jSKOo2o7LEioEemMtcm4mTydjWpJWgtG5VIu76KwY=)
                          2: 9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.crl (hash: neDMK501AXs31qIFnueBN47Y4tKjb/cIgASY2qr0o5w=)
                          3: 3137372e31302e3233322e302f32312d3235203d3e20323632383830.roa (hash: rbgffI8p/AXU8wJ+NAMYwJI0RBbHxX8vTrj220i9fB4=)
                          4: 3136382e3232372e32382e302f32322d3234203d3e20323632383830.roa (hash: F+yfgBA6l4zt5dab6g7ApP/ebI8SkpGAlDhhYSxob5E=)
                          5: 323830343a326565383a3a2f33322d3334203d3e20323632383830.roa (hash: YyY7AsNFEU9FApnFw69XEsVcznz0Nfb+pU0/PwX03gU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:e9:2b:84:35:bf:85:f6:b1:61:b3:0c:8a:34:d6:f3:2d:a3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B399EBACF8398BE4881B8A2BAEEBDAFECC73501
        Validity
            Not Before: Aug 28 04:22:29 2022 GMT
            Not After : Aug 29 06:19:29 2022 GMT
        Subject: CN=34FF171B7D1458CE15BD7779E84585C5FE08F16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:c9:4f:44:4f:98:b4:9c:8d:4d:4e:e6:23:
                    b4:1d:de:5b:b7:cd:b1:a7:f0:ad:02:18:11:3c:81:
                    c9:02:fc:92:77:5f:96:31:1a:28:be:1e:ad:64:f5:
                    92:b3:81:00:43:bf:88:1e:f7:26:f4:fd:2a:a2:08:
                    1e:6e:9e:e7:ba:22:47:ac:5b:d6:eb:1a:0f:7d:4f:
                    a3:85:47:42:7c:71:84:1f:4d:67:2a:6a:7a:a9:ba:
                    35:ab:87:5a:ae:c6:dc:d3:20:de:13:11:5d:8e:f2:
                    ea:65:a6:7e:b6:e0:c2:40:94:ae:18:db:59:5c:83:
                    c2:63:f5:cc:0b:72:d6:54:47:79:9b:80:d1:fd:4c:
                    2e:7c:2d:ca:de:a2:36:71:92:d6:b0:37:f8:96:ae:
                    5e:64:b6:f9:a6:d8:cd:79:bd:5f:88:b1:10:65:df:
                    ab:60:93:cc:d4:a4:09:0c:ea:6d:9a:a7:82:df:b5:
                    07:a2:cd:e4:d8:5e:28:d6:b1:9d:69:a3:fd:89:a4:
                    3d:55:88:e9:f1:53:9f:10:23:1c:02:9a:59:d1:79:
                    06:ca:92:c9:8d:2f:a4:f4:4c:55:46:81:6a:9c:82:
                    73:67:d4:52:86:89:42:ef:68:b0:5e:51:07:b7:92:
                    59:b5:69:30:96:fa:af:e4:d9:86:e2:fa:0b:c7:83:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:17:1B:7D:14:58:CE:15:BD:77:79:E8:45:85:C5:FE:08:F1:6A
            X509v3 Authority Key Identifier:
                keyid:9B:39:9E:BA:CF:83:98:BE:48:81:B8:A2:BA:EE:BD:AF:EC:C7:35:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/0/9B399EBACF8398BE4881B8A2BAEEBDAFECC73501.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:3c:5a:7d:b0:e4:b8:ae:ad:7d:2d:43:43:86:7a:c0:21:
         12:99:3f:01:24:7e:ce:97:80:c9:28:da:26:bc:93:e7:0d:e7:
         90:da:00:fc:4b:a8:ea:aa:b9:ff:fa:8a:2c:5e:89:2e:2c:6d:
         69:82:81:fc:e6:ce:13:c5:42:4b:c1:0e:63:64:2c:08:52:ea:
         2c:99:e8:e2:d3:6d:d6:78:29:65:ac:d0:50:08:c9:36:26:a1:
         37:68:f4:a3:48:28:ab:9c:2c:c1:64:70:af:29:6d:0a:b8:41:
         fd:fa:7e:17:6f:1b:da:16:1d:74:f3:7d:26:c9:fd:c8:05:62:
         64:c4:8a:ba:36:b4:09:c7:b4:51:f7:58:bb:a1:42:6e:56:0f:
         83:cc:f3:6e:b0:18:cc:a9:68:8a:0e:9d:d4:ed:4d:44:c2:f6:
         f8:e9:49:ab:7a:b6:8b:10:81:c5:50:f7:fd:77:83:53:62:2d:
         49:73:84:40:b8:dc:8a:41:76:04:3b:04:6d:cc:0f:29:39:3d:
         c5:e6:e7:23:bf:8f:e4:dc:8f:ca:36:4c:97:e2:d7:c9:fc:d6:
         a4:cd:42:34:53:70:82:0f:d8:f9:8a:2d:2f:7a:47:36:a2:03:
         dc:79:b2:52:4a:a4:c7:dc:50:0b:ff:8a:6a:28:80:b2:60:dc:
         93:14:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----