Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.mft
File:                     ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.mft (raw, json)
Hash identifier:          gwSKPkqQY1uO4kqS3gsokyrdNp3DTkAvsnqSKkas2go=
Subject key identifier:   6F:6D:B1:3C:72:03:0C:63:D2:F0:02:1A:1B:B7:26:2E:77:95:44:E2
Authority key identifier: AC:E2:A3:13:71:8C:29:FB:FA:09:1B:0D:CF:F5:0D:AA:23:EE:EE:64
Certificate issuer:       /CN=ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64
Certificate serial:       79F299C604EDF69AB63F71C070FBE9ED2C16CA02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.mft
Manifest number:          04
Signing time:             Thu 06 Jul 2023 09:12:22 +0000
Manifest this update:     Thu 06 Jul 2023 09:07:22 +0000
Manifest next update:     Fri 07 Jul 2023 11:49:22 +0000
Files and hashes:         1: ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.crl (hash: FMlj+9L5GkDjUBgTqZB6Y8s9jw2DS8o7yRfll1nxqLs=)
                          2: 34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (hash: QAtt7Ee/9Y+jKBMGn/VM0S6sWXIYO4khE1MJKX/OjZY=)
                          3: 323830343a353139633a3a2f33322d313238203d3e20323638343635.roa (hash: 76yHNKJwCudEJE8PwGHmPUGhAAZj+cp9bMwbuxQNkx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f2:99:c6:04:ed:f6:9a:b6:3f:71:c0:70:fb:e9:ed:2c:16:ca:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64
        Validity
            Not Before: Jul  6 09:07:22 2023 GMT
            Not After : Jul  7 11:49:22 2023 GMT
        Subject: CN=6F6DB13C72030C63D2F0021A1BB7262E779544E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:f3:db:90:52:fd:02:59:c5:61:35:22:9b:
                    af:63:c6:04:33:32:32:b3:1d:5c:ba:3a:1c:e1:1c:
                    2b:b7:b6:f2:12:3a:ff:90:1e:b8:37:ba:ae:c2:40:
                    db:0c:dd:87:d5:ee:10:e1:7d:87:98:c1:ec:5a:f7:
                    76:d7:83:b3:8d:d7:de:2c:79:09:c1:c1:70:60:f8:
                    1d:30:7b:06:d3:c6:07:81:75:f2:5a:e3:15:0b:00:
                    e3:eb:84:e0:97:95:ca:40:de:dc:17:47:01:ad:26:
                    45:74:62:0c:56:fb:50:92:e7:b9:3d:69:18:d7:df:
                    e8:a4:85:38:08:c3:1e:8a:41:b8:3b:82:6e:3f:fc:
                    da:df:dc:3b:7d:84:47:97:ce:5c:5d:ef:d3:93:8f:
                    b6:94:0c:b6:f1:66:a3:66:70:8d:f7:02:ef:74:15:
                    ff:b0:a1:ad:21:ae:20:1d:ac:0c:a5:d3:7a:67:bd:
                    fc:89:b6:03:a1:3b:31:56:55:cf:74:9d:87:3d:56:
                    03:d7:da:7b:27:83:de:57:19:67:e3:4b:30:c0:fe:
                    c9:24:95:e0:89:b1:6b:6f:36:bf:55:3b:4a:5b:3c:
                    03:ba:3a:24:c8:90:ea:07:8d:91:43:e0:7c:c3:ec:
                    a5:12:f4:d6:71:e8:e6:03:b0:e8:70:94:bf:68:e1:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6D:B1:3C:72:03:0C:63:D2:F0:02:1A:1B:B7:26:2E:77:95:44:E2
            X509v3 Authority Key Identifier:
                keyid:AC:E2:A3:13:71:8C:29:FB:FA:09:1B:0D:CF:F5:0D:AA:23:EE:EE:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/ACE2A313718C29FBFA091B0DCFF50DAA23EEEE64.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:95:48:5f:ee:1d:f4:21:34:f0:26:d7:a0:b6:d8:4d:28:
         f9:e8:ad:57:82:d6:81:bd:66:66:33:31:61:23:0c:05:bb:52:
         3d:ef:12:f2:fe:77:4b:a5:e2:2c:e8:e5:e9:3e:49:37:f3:59:
         54:01:70:33:a9:d1:f6:ec:30:2b:bd:fe:2d:8a:7c:0c:31:b7:
         9e:3f:e2:3d:06:16:6b:13:d6:bc:95:88:29:4c:18:94:3f:a9:
         37:5c:bc:ba:f1:7e:49:8b:28:4e:46:44:15:01:58:eb:42:58:
         40:29:14:f1:7f:6a:3c:ed:53:54:2e:9a:4d:d7:2d:76:f8:6a:
         44:de:56:f5:3e:e0:f8:f8:d1:5b:90:48:34:84:c4:f1:cd:7e:
         33:64:1d:c8:4f:b4:80:35:4e:3f:3f:25:4c:d1:5d:40:dc:39:
         01:8e:ea:04:e1:48:bd:c8:26:8a:c5:10:79:ff:9d:e0:36:97:
         3c:00:2c:d7:3e:99:0d:00:21:de:8d:c8:43:f0:42:9e:24:75:
         5e:34:a8:3d:12:44:68:7b:5e:2a:77:0f:4d:d1:f9:1f:40:d5:
         55:a6:75:6d:0d:c6:df:e0:96:a1:7c:7f:71:e4:a4:ce:7d:72:
         55:72:77:94:09:de:a1:ad:62:ab:83:a1:ba:2e:48:0a:01:a7:
         6d:f9:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----