Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/0392FC78F8463EEB74033469370094C1EFD3857D.mft
File:                     0392FC78F8463EEB74033469370094C1EFD3857D.mft (raw, json)
Hash identifier:          oKX3lOnq6TcO1Hd9VLJzuee8zxJfFrohkFkUP9FxU5Y=
Subject key identifier:   1D:06:08:A2:E5:B5:E6:3B:90:E1:E6:B8:EB:1A:D1:12:D0:75:A4:77
Authority key identifier: 03:92:FC:78:F8:46:3E:EB:74:03:34:69:37:00:94:C1:EF:D3:85:7D
Certificate issuer:       /CN=0392FC78F8463EEB74033469370094C1EFD3857D
Certificate serial:       72B8010EE7A52788BCA83636DBBBE3310F5785CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0392FC78F8463EEB74033469370094C1EFD3857D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/0392FC78F8463EEB74033469370094C1EFD3857D.mft
Manifest number:          AB
Signing time:             Tue 09 Jan 2024 12:50:26 +0000
Manifest this update:     Tue 09 Jan 2024 12:45:26 +0000
Manifest next update:     Wed 10 Jan 2024 16:04:26 +0000
Files and hashes:         1: 323830343a386361633a3a2f33322d3438203d3e20323733383134.roa (hash: oqik44qMvWYsE4eijpPpPvlZc2hmrX3AoxJrq9zjQZs=)
                          2: 0392FC78F8463EEB74033469370094C1EFD3857D.crl (hash: vOBzbA2MicygWmiXcTT17A8vxRu6NByZ++sqC6JjUjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b8:01:0e:e7:a5:27:88:bc:a8:36:36:db:bb:e3:31:0f:57:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0392FC78F8463EEB74033469370094C1EFD3857D
        Validity
            Not Before: Jan  9 12:45:26 2024 GMT
            Not After : Jan 10 16:04:26 2024 GMT
        Subject: CN=1D0608A2E5B5E63B90E1E6B8EB1AD112D075A477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:1a:52:51:e6:c8:bf:b8:ac:10:7a:cf:5f:
                    c7:13:40:88:b7:d5:22:6a:c1:88:0f:7c:3e:b8:84:
                    e2:08:79:1f:5d:1d:14:7f:18:89:17:eb:7a:e9:af:
                    fb:85:15:21:df:fa:6b:a8:4b:72:57:d1:78:c5:d5:
                    08:81:95:fe:3b:ec:e9:68:ef:86:b4:44:5e:ab:02:
                    3f:0d:2a:2d:a1:1f:a8:71:22:28:a1:80:cd:0e:53:
                    e6:b7:3f:30:f8:f2:f8:83:ec:06:26:5d:3e:bc:0e:
                    1a:7c:bb:25:67:23:5d:86:54:fc:33:fa:93:e5:55:
                    5b:b5:f1:b6:6c:24:b2:06:46:a5:ee:14:06:3a:93:
                    20:fb:8f:d1:f3:e4:d2:3c:82:57:54:9b:7d:40:f9:
                    80:16:a7:b9:59:18:0c:a4:c7:9c:09:c8:19:cf:51:
                    bf:19:f9:b0:bc:e8:0f:1f:e3:45:10:4f:96:b2:55:
                    89:cf:c1:f8:43:46:da:10:62:56:3a:b5:cc:e7:f9:
                    dc:e2:65:cc:d1:d4:59:c3:02:3c:95:4f:ea:06:54:
                    b0:1b:52:47:d7:6c:d5:38:06:65:6d:38:93:c0:a4:
                    63:94:84:e0:c5:85:58:cb:e3:f6:c4:e0:0b:b9:98:
                    9b:8b:60:ef:76:54:10:5f:d0:e4:81:37:2f:c0:69:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:08:A2:E5:B5:E6:3B:90:E1:E6:B8:EB:1A:D1:12:D0:75:A4:77
            X509v3 Authority Key Identifier:
                keyid:03:92:FC:78:F8:46:3E:EB:74:03:34:69:37:00:94:C1:EF:D3:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/0392FC78F8463EEB74033469370094C1EFD3857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0392FC78F8463EEB74033469370094C1EFD3857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/0/0392FC78F8463EEB74033469370094C1EFD3857D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:03:7d:1b:09:5f:fd:33:21:1e:03:94:8d:63:99:40:92:6e:
         13:6a:34:48:fa:69:66:13:4d:79:3c:2d:01:8d:45:82:74:44:
         08:1d:19:4c:f8:47:5a:4d:93:73:60:f3:47:53:18:ed:d5:7d:
         1e:48:22:56:15:11:e6:1d:88:fb:23:11:76:de:85:d0:8f:c9:
         26:30:94:9a:c1:e6:cc:7d:c6:3b:36:c7:96:e2:d5:89:8e:41:
         ec:d0:fc:35:c1:c5:6f:4d:52:71:39:90:1f:15:25:cb:f6:5e:
         a4:ff:f2:d1:cf:de:94:7e:58:d8:72:63:97:e8:35:cf:25:06:
         6c:3a:68:07:69:a1:a4:4b:1b:85:71:4b:d1:09:b4:f4:18:5a:
         4b:87:59:c1:73:fb:59:57:b2:9e:bf:a7:27:52:37:08:c5:58:
         f1:2e:33:5e:b6:29:9c:ed:96:d1:7b:f3:ad:90:cb:be:84:f8:
         e2:1b:8d:cb:b0:d5:61:f5:c5:50:c9:2c:92:e9:f9:6c:1b:99:
         0c:d4:b6:65:90:07:82:2a:47:b6:f0:51:66:3c:de:37:2a:79:
         64:e5:70:de:d5:e9:90:95:a5:63:d2:b4:ca:9c:bf:aa:0b:4c:
         8e:d9:f5:7f:9f:31:43:f4:1a:46:76:74:3a:a7:fd:d2:2f:dc:
         e3:4f:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----