Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/511B355769823307034985B2E114AB98901BC8A3.mft
File:                     511B355769823307034985B2E114AB98901BC8A3.mft (raw, json)
Hash identifier:          xe9YHizXD0JoUSfkqE9NgS/bTmxhjoi0Uv0kmimD5bw=
Subject key identifier:   6D:12:71:92:69:A4:FC:C8:E6:3E:A0:D3:60:FC:66:F1:0B:F5:E0:2A
Authority key identifier: 51:1B:35:57:69:82:33:07:03:49:85:B2:E1:14:AB:98:90:1B:C8:A3
Certificate issuer:       /CN=511B355769823307034985B2E114AB98901BC8A3
Certificate serial:       4DD6D084968FBF659352736F9DF731313FB4A312
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/511B355769823307034985B2E114AB98901BC8A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/511B355769823307034985B2E114AB98901BC8A3.mft
Manifest number:          0175
Signing time:             Wed 22 Feb 2023 04:57:16 +0000
Manifest this update:     Wed 22 Feb 2023 04:52:16 +0000
Manifest next update:     Thu 23 Feb 2023 08:28:16 +0000
Files and hashes:         1: 3137372e33382e382e302f32312d3234203d3e20323632383933.roa (hash: 4a4exwb3+hevZEiifV0fChQex8jwrbw0N48/Lnazkh0=)
                          2: 511B355769823307034985B2E114AB98901BC8A3.crl (hash: ii9hUE3ynuus0IYen4UQGvYrSDxbZNyOj2Qi9K6pxkU=)
                          3: 3137372e32332e3131322e302f32312d3234203d3e20323632383933.roa (hash: tmWAkftsNHE8K9dlLUYIg15rWPaxcM7SyJAGqw9wmxI=)
                          4: 323830343a3663343a393030303a3a2f33362d3430203d3e20323632383933.roa (hash: wORyJD/JIr1F19F3Gfp5nX74Wk9xTpNwz4QzWx5M3S4=)
                          5: 323830343a3663343a3a2f33362d3430203d3e20323632383933.roa (hash: 1ODoqF0FGwnTPPExnQtUmFf9hjqdU5vuKE09n5L1kZM=)
                          6: 34352e3233302e32342e302f32322d3234203d3e20323632383933.roa (hash: XsWaoWpUld0Aa1eJdPsh0iu5ZI4tuzvI8AlyTuyAIpA=)
                          7: 3136382e3132312e3139362e302f32322d3234203d3e20323632383933.roa (hash: EzLlkJ3TjGKR7jA7w38dcoRO2HoxMreYaW/4D90A6OM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d6:d0:84:96:8f:bf:65:93:52:73:6f:9d:f7:31:31:3f:b4:a3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511B355769823307034985B2E114AB98901BC8A3
        Validity
            Not Before: Feb 22 04:52:16 2023 GMT
            Not After : Feb 23 08:28:16 2023 GMT
        Subject: CN=6D12719269A4FCC8E63EA0D360FC66F10BF5E02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:eb:4a:c2:30:79:01:19:bf:ca:cb:10:fb:
                    90:7a:a2:13:9f:65:ca:fe:a5:65:63:66:c3:b4:b6:
                    54:c9:69:eb:fa:aa:4f:e6:be:e7:fc:8c:bd:ab:08:
                    59:0c:7e:8e:d2:54:1d:52:7f:40:8f:55:09:04:a2:
                    ef:49:01:d4:6f:69:bb:0d:76:70:b4:95:f1:24:4b:
                    b8:38:4a:ef:10:bf:1e:e2:6a:fb:60:15:63:38:f3:
                    8e:d4:2a:01:f8:b4:3d:dd:ff:3c:e9:7b:5e:12:b9:
                    16:bb:b3:66:ca:4a:c8:b9:21:9c:ed:a4:88:fb:f5:
                    e5:e2:d7:8a:5c:a6:f1:c0:4a:3c:42:a4:ca:d1:83:
                    6f:55:94:eb:63:f6:c5:bb:92:70:b0:6c:10:0a:82:
                    90:3f:42:5c:15:9d:b4:f5:6d:6a:26:64:b6:9b:f5:
                    23:0c:c0:f9:b5:d2:d1:c1:8d:76:43:ec:34:48:95:
                    0c:a2:f7:d7:cb:28:7d:3d:5b:29:0d:dd:fa:fb:89:
                    7a:7f:b3:72:ad:6c:76:66:29:68:30:80:1c:cf:88:
                    d7:8c:06:1d:b2:94:21:2d:16:72:43:df:f1:f5:f0:
                    48:92:cd:43:94:71:40:0c:12:6c:55:ef:17:86:7a:
                    65:48:9d:c3:d6:85:37:c8:39:fe:d4:cc:b4:f6:0c:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:71:92:69:A4:FC:C8:E6:3E:A0:D3:60:FC:66:F1:0B:F5:E0:2A
            X509v3 Authority Key Identifier:
                keyid:51:1B:35:57:69:82:33:07:03:49:85:B2:E1:14:AB:98:90:1B:C8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/511B355769823307034985B2E114AB98901BC8A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/511B355769823307034985B2E114AB98901BC8A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/511B355769823307034985B2E114AB98901BC8A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:c0:98:da:19:f0:b5:56:89:1a:74:37:d1:97:a2:87:99:
         cc:fc:a1:6f:01:31:c5:15:21:25:af:d6:b3:7a:f2:fd:6e:5a:
         78:2d:37:9c:aa:61:bc:03:76:9a:ae:d9:e8:0a:6a:b3:c5:9e:
         96:de:33:47:cb:2d:09:a4:d3:1a:7a:e5:71:2e:97:37:73:e4:
         32:62:ba:7f:92:a5:59:8e:b3:e7:6a:1c:74:d3:66:a2:ab:1e:
         c4:a4:db:03:62:aa:f3:fa:1c:3e:55:7b:54:f9:48:1f:43:71:
         1c:88:9e:60:71:97:42:f4:dc:83:e7:fa:e7:b5:a6:f0:e6:e1:
         ea:a9:06:38:91:13:88:dd:8b:6a:73:21:3f:be:3b:08:21:ce:
         d0:fd:3a:ac:6e:62:1c:47:91:39:34:52:c6:2e:eb:70:42:d7:
         8d:9d:d9:df:ea:f1:19:2f:62:63:a7:d2:ce:e4:3e:98:2b:82:
         83:42:e5:c9:02:38:f5:06:fa:39:7e:60:ac:1d:57:71:fd:a3:
         10:8e:93:26:98:af:15:69:98:d1:5c:de:0b:a2:f7:01:e6:4c:
         3a:1d:01:fe:8c:8d:56:e4:d7:99:78:ac:db:83:36:30:9b:10:
         7f:df:5b:be:3d:20:4f:1e:22:03:1e:0a:3c:8a:41:37:d8:d7:
         00:5a:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----