Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.mft
File:                     3F7AF10210F724DD9B28A89A927CB9923D7A3C52.mft (raw, json)
Hash identifier:          CtXRzAmqUYWlB5/2dCPy6fEHHbuoDaWdgJ5Rl2Rtv5k=
Subject key identifier:   54:8B:92:E0:F3:CF:BA:8A:B8:60:D1:4B:2C:1D:D2:7A:70:CB:3B:AA
Authority key identifier: 3F:7A:F1:02:10:F7:24:DD:9B:28:A8:9A:92:7C:B9:92:3D:7A:3C:52
Certificate issuer:       /CN=3F7AF10210F724DD9B28A89A927CB9923D7A3C52
Certificate serial:       5F87F77AC46BE6C450482206840F28BADFCCBB0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.mft
Manifest number:          19
Signing time:             Wed 08 Mar 2023 20:28:11 +0000
Manifest this update:     Wed 08 Mar 2023 20:23:11 +0000
Manifest next update:     Thu 09 Mar 2023 20:45:11 +0000
Files and hashes:         1: 3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (hash: ogVRoKpHSzu5NFpMUJ74NawSrjMLSvz/FjSDQlpwJUc=)
                          2: 323830343a366533343a3a2f33322d3438203d3e20323730353832.roa (hash: uiEGTXPnKIvwyBqCwr7himWWT3+5WZ/8rnko/vtHXrc=)
                          3: 3F7AF10210F724DD9B28A89A927CB9923D7A3C52.crl (hash: t8I2dAEmqKnTfMsaCcjzOuEAdYzs0O2Pf2dLst7pXoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:87:f7:7a:c4:6b:e6:c4:50:48:22:06:84:0f:28:ba:df:cc:bb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7AF10210F724DD9B28A89A927CB9923D7A3C52
        Validity
            Not Before: Mar  8 20:23:11 2023 GMT
            Not After : Mar  9 20:45:11 2023 GMT
        Subject: CN=548B92E0F3CFBA8AB860D14B2C1DD27A70CB3BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:c5:80:17:ea:fd:06:44:79:51:0d:0a:31:
                    60:94:0d:79:b1:dd:f8:cf:c0:20:61:20:50:2c:41:
                    6f:85:7f:25:a9:16:e0:21:8c:c4:e3:a5:a9:bb:02:
                    bc:ce:8b:ef:92:e5:2a:68:39:02:e6:d9:64:d3:ab:
                    9f:bb:e6:51:e9:07:54:bb:2e:0e:27:e9:a8:7c:04:
                    31:6b:2a:07:58:e4:37:36:80:7e:8c:be:47:63:c1:
                    f9:be:c2:cd:67:36:7a:71:dd:13:2d:1e:e3:c5:80:
                    00:bb:2e:5c:1a:bb:d1:15:66:8f:53:60:dc:3b:51:
                    24:14:07:aa:33:23:2b:37:4e:74:3e:d7:98:53:5f:
                    32:42:9d:17:94:40:53:ae:b8:ed:95:22:1d:db:16:
                    28:99:f5:66:d2:85:e9:33:53:d1:cf:49:9d:8e:74:
                    a2:6c:3f:54:02:b8:c9:2b:68:22:be:d0:c4:b2:82:
                    ed:ed:fd:c5:ed:30:6a:a6:9e:da:4b:68:f4:e6:06:
                    39:41:a0:11:1d:b7:e2:7e:26:8a:d1:e2:3a:d8:62:
                    06:eb:79:e1:dd:85:ff:44:7c:b0:82:d3:5e:27:01:
                    6b:85:cf:b5:d0:b3:bf:82:f9:23:8c:75:2b:72:90:
                    e6:ce:f5:fe:2f:e6:70:07:10:6c:75:c2:26:8d:a5:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:92:E0:F3:CF:BA:8A:B8:60:D1:4B:2C:1D:D2:7A:70:CB:3B:AA
            X509v3 Authority Key Identifier:
                keyid:3F:7A:F1:02:10:F7:24:DD:9B:28:A8:9A:92:7C:B9:92:3D:7A:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/3F7AF10210F724DD9B28A89A927CB9923D7A3C52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b9:d5:6b:cc:bb:72:60:72:7b:d6:32:ea:67:b4:48:18:9e:
         b8:78:5b:22:41:92:82:1f:4b:fe:0c:1b:c0:0c:e4:d3:d8:d1:
         ee:0e:2f:2e:14:fc:95:ed:1b:8e:40:e0:41:c6:1b:44:9b:b0:
         46:6a:8a:4d:95:fd:56:09:92:10:c0:8c:46:58:d1:73:18:d1:
         1b:4a:c7:d9:66:30:7c:e0:16:5d:96:85:28:4b:fc:8e:12:5a:
         8a:54:11:2d:ca:de:4d:fc:b2:6a:a8:45:83:aa:59:4c:e5:ab:
         8f:8f:7a:e4:42:5e:0d:25:8c:a4:61:57:e3:19:e0:90:92:78:
         fb:be:17:15:a7:12:68:d3:b1:1b:c3:44:3e:d9:ee:00:22:68:
         63:13:1f:9b:bf:3a:46:6f:8f:62:10:cc:bf:e5:b2:2c:00:34:
         3f:58:86:ef:c4:ac:02:9b:30:a3:8d:e6:8a:24:78:66:a2:dc:
         cb:3d:9b:4e:a8:a5:1b:76:72:87:5e:9f:e0:86:49:b3:e8:18:
         15:7c:cf:d8:db:26:a0:2a:06:6d:9e:09:0b:b8:c9:05:e4:d8:
         34:37:0c:8c:b0:68:6b:20:0c:17:68:24:7b:45:8c:e2:8c:11:
         39:8e:e4:77:24:e3:e8:39:fa:2a:5f:ea:ab:cf:98:f1:6a:ad:
         84:83:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----