Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.mft
File:                     82F104AF0446BD6AA6137DBEB898D516D0B92989.mft (raw, json)
Hash identifier:          ROj+Kz1GGHhV36Jp7Bw3QY4xt7MWEiAgWCNQwKN6vts=
Subject key identifier:   DA:8D:AE:90:C9:B3:44:E8:F8:6B:0B:1A:06:49:7D:E0:32:84:64:64
Authority key identifier: 82:F1:04:AF:04:46:BD:6A:A6:13:7D:BE:B8:98:D5:16:D0:B9:29:89
Certificate issuer:       /CN=82F104AF0446BD6AA6137DBEB898D516D0B92989
Certificate serial:       1204B6B8E0EFE0CE521983EED3787D6BCF4817FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.mft
Manifest number:          34
Signing time:             Tue 13 Dec 2022 15:58:35 +0000
Manifest this update:     Tue 13 Dec 2022 15:53:35 +0000
Manifest next update:     Wed 14 Dec 2022 19:40:35 +0000
Files and hashes:         1: 323830343a373266633a3a2f33332d313238203d3e20323730383838.roa (hash: yhqXH2+xJkLoYS1hp1C8p4mo5zBvzFaP07zPC7w9C7w=)
                          2: 3137372e3132392e3234302e302f32332d3332203d3e20323730383838.roa (hash: ARTJNwhmh+jsr/wg42+Fh5NXvD8l4EsveOUQx8prEhg=)
                          3: 82F104AF0446BD6AA6137DBEB898D516D0B92989.crl (hash: nQi2bEka1xSpHPhezTLkFnKpykLCMv6/yeAgVtWCObs=)
                          4: 3137372e3132392e3234322e302f32332d3332203d3e20323730383838.roa (hash: 4GqXxDYph82tZoz4pIREeKcbQguL51DvblDsuEblJ8I=)
                          5: 323830343a373266633a383030303a3a2f33332d313238203d3e20323730383838.roa (hash: vrJUp9umtV8J91MykDah+O+f0A3lToaRFuCxxQVjBfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:04:b6:b8:e0:ef:e0:ce:52:19:83:ee:d3:78:7d:6b:cf:48:17:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82F104AF0446BD6AA6137DBEB898D516D0B92989
        Validity
            Not Before: Dec 13 15:53:35 2022 GMT
            Not After : Dec 14 19:40:35 2022 GMT
        Subject: CN=DA8DAE90C9B344E8F86B0B1A06497DE032846464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:51:a7:8b:4c:a0:bb:9e:82:55:25:e1:42:
                    03:18:b9:87:55:8d:81:5d:30:63:09:6e:ce:e9:5d:
                    b7:8b:9f:1d:84:4a:85:bf:8e:48:3b:42:d2:57:b0:
                    5c:24:23:5a:19:26:19:ec:50:e0:3b:f4:26:bc:97:
                    ae:56:80:1d:17:c1:fb:32:c3:0c:e7:24:b4:fd:4f:
                    6f:c5:5f:c2:76:14:f0:6d:a2:31:d1:4a:97:90:7e:
                    1c:9b:7b:04:db:b4:88:06:bb:e7:ed:3c:91:61:0c:
                    05:bb:47:d6:36:b3:0a:96:26:31:45:62:ae:94:8b:
                    a5:36:26:f1:4b:58:16:76:24:88:66:29:3d:9b:d9:
                    d5:78:12:5b:bf:0d:41:56:42:4a:96:46:86:0e:32:
                    ed:ab:d7:5a:44:c1:2e:51:4f:58:c4:73:c9:13:91:
                    78:74:86:1e:16:28:7f:4f:f5:44:b0:68:3f:b1:eb:
                    63:3e:6b:c5:db:f3:5e:a4:62:f2:55:75:74:81:b3:
                    a5:2b:f1:53:09:b4:cf:12:72:f6:7f:d1:90:88:ed:
                    5f:f3:9f:26:b4:7d:95:1e:9b:25:84:4f:7f:36:85:
                    e2:82:10:24:c5:ad:0f:90:b4:07:4c:5b:6b:9c:90:
                    20:fa:76:82:51:0d:d9:77:54:60:ba:a4:05:c7:09:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:AE:90:C9:B3:44:E8:F8:6B:0B:1A:06:49:7D:E0:32:84:64:64
            X509v3 Authority Key Identifier:
                keyid:82:F1:04:AF:04:46:BD:6A:A6:13:7D:BE:B8:98:D5:16:D0:B9:29:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/82F104AF0446BD6AA6137DBEB898D516D0B92989.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:77:60:88:30:a2:f0:17:2e:d6:96:34:28:90:48:25:81:e6:
         a1:e2:b8:3a:3c:06:31:80:56:d6:c2:29:5f:79:35:05:a2:09:
         43:71:cb:21:71:0d:e0:67:be:39:a5:5f:78:7f:8b:cd:e9:a5:
         61:62:9c:0b:3c:5f:fd:b1:e3:c6:e6:b3:59:92:c8:f0:0c:2d:
         ee:d5:63:46:2f:7d:61:07:47:c8:a3:a5:7c:5c:1d:85:82:72:
         e2:c7:a1:e9:fd:17:c1:b9:ff:af:7e:4e:fd:4e:b2:fc:9c:11:
         5f:1d:18:74:86:67:63:34:c8:45:4d:4b:12:c3:7d:7d:fa:60:
         38:56:02:e1:48:3b:9d:06:b7:46:7e:fd:2e:54:57:44:9c:60:
         5e:9f:5d:34:b2:94:c4:93:b7:9e:af:58:7e:1b:94:c2:72:d4:
         4a:0e:7f:3d:bb:04:e3:a4:ed:43:b8:06:9d:de:1b:1a:ca:92:
         18:46:3c:25:c0:fb:cf:19:f7:fc:90:c9:f7:42:1d:11:8e:17:
         84:fc:1b:0d:5c:47:59:71:ba:3a:07:54:49:ca:08:99:ff:9e:
         8c:20:f3:21:7a:ab:22:f3:a1:cc:24:b3:3e:9b:d0:a8:dc:ce:
         33:16:fa:10:8a:ed:c1:05:c0:ac:d9:69:c8:6d:61:42:2a:a8:
         b7:92:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----