Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.mft
File:                     F091C1A6583F3DDBFAC5985B080404CE378B2A98.mft (raw, json)
Hash identifier:          IONGk4uUKRAJoRxRFeRwy+M+6oc+uluxCwWux2St1rs=
Subject key identifier:   44:03:23:C3:CE:97:D5:99:17:98:15:64:66:91:8F:4A:B3:1C:9A:DD
Authority key identifier: F0:91:C1:A6:58:3F:3D:DB:FA:C5:98:5B:08:04:04:CE:37:8B:2A:98
Certificate issuer:       /CN=F091C1A6583F3DDBFAC5985B080404CE378B2A98
Certificate serial:       37D36CC95DB32B37FADBF02D0CE4883763E50C3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.mft
Manifest number:          4F
Signing time:             Mon 15 May 2023 07:12:17 +0000
Manifest this update:     Mon 15 May 2023 07:07:17 +0000
Manifest next update:     Tue 16 May 2023 09:13:17 +0000
Files and hashes:         1: 3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa (hash: QGm/yvZ992bqWJ3UIKDTbUyD3NqdbbkrgrnNZ2GKfzE=)
                          2: 3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa (hash: 3y1zctdqA1VNUD6tF5l2w5m9VvONIiAQPty/OvzZFbc=)
                          3: 3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa (hash: j5Vre1RCRo9OiYkUcgHfmZT8nrBnwgsrLvyy8U/YUMg=)
                          4: 3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa (hash: Ye+cEx5qbrPftr0pzNZWfNpft9mmWkIgFZLxAHy4Ky4=)
                          5: 323830343a373864303a3a2f33322d3332203d3e20323731323637.roa (hash: 1yPOzeoPpxtfrQwSilrq9WXqTfTb4ec1t+7YJBltsIs=)
                          6: F091C1A6583F3DDBFAC5985B080404CE378B2A98.crl (hash: SXK9XSNv1vpkLu1oIeeHzfq+KQ3xjwuzDNv3p/UWYBY=)
                          7: 3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa (hash: pNsBruu7Dyn4QhcaLcfT4sNxC8bpMDfg407kAB/oQP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d3:6c:c9:5d:b3:2b:37:fa:db:f0:2d:0c:e4:88:37:63:e5:0c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F091C1A6583F3DDBFAC5985B080404CE378B2A98
        Validity
            Not Before: May 15 07:07:17 2023 GMT
            Not After : May 16 09:13:17 2023 GMT
        Subject: CN=440323C3CE97D5991798156466918F4AB31C9ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:ee:78:07:bc:2f:a5:1f:21:76:d4:9a:53:
                    27:d7:48:f1:e9:4c:f1:d8:8a:d4:70:8b:bd:82:f9:
                    bc:9b:f4:2f:1d:5e:05:c5:31:45:79:ed:c2:c9:28:
                    18:4c:a5:1f:5e:43:ab:53:e9:ea:09:b1:46:eb:95:
                    6c:9c:c7:83:ca:70:0a:8f:33:a6:a7:6b:4e:fb:45:
                    1f:31:4d:3e:87:98:cf:09:e4:37:7a:4d:c4:0b:74:
                    11:b8:0e:a7:bb:67:93:9c:3d:d5:38:ea:a3:34:a6:
                    3d:b6:e8:00:0d:c0:7d:87:cf:6c:05:82:43:27:ab:
                    4a:bb:5a:5b:7b:e7:96:24:55:a9:89:e6:a3:31:29:
                    2e:b2:a0:d6:ce:f7:83:82:32:3d:78:62:e4:f2:b6:
                    ed:d7:50:23:2e:a7:69:48:15:37:10:75:33:0c:e2:
                    50:14:0e:3e:fb:6c:13:17:5a:7a:fc:16:d1:fd:c3:
                    8f:71:ef:c0:ac:53:ed:71:da:5f:61:5a:81:8a:c1:
                    ee:cc:7c:09:0d:e0:c4:9c:a4:d8:3f:cc:35:fb:89:
                    3c:10:7c:45:8b:ed:d5:89:bc:88:58:cd:56:8c:e3:
                    32:40:e7:71:d4:9a:55:80:1e:75:63:5d:eb:a8:94:
                    84:ce:83:dd:22:00:6a:07:b7:23:8d:e9:32:d0:dd:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:23:C3:CE:97:D5:99:17:98:15:64:66:91:8F:4A:B3:1C:9A:DD
            X509v3 Authority Key Identifier:
                keyid:F0:91:C1:A6:58:3F:3D:DB:FA:C5:98:5B:08:04:04:CE:37:8B:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/F091C1A6583F3DDBFAC5985B080404CE378B2A98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:92:7c:88:94:38:72:78:a8:e3:32:aa:ab:60:5e:6c:97:14:
         ce:b5:c0:b9:a5:bf:62:96:17:97:1e:7d:63:3f:d1:f7:36:a5:
         35:12:fa:23:d8:8d:66:5d:a2:39:21:2e:88:cd:7c:b1:17:b1:
         2f:d2:e7:53:9c:2f:c5:65:8b:5c:b8:1e:1c:85:52:9c:53:09:
         3d:07:b8:87:ac:42:b1:16:a8:5f:a3:10:2d:09:7d:68:e0:c6:
         0f:04:b2:09:a9:b1:23:1c:3e:dd:1a:e1:42:02:8c:b2:41:05:
         00:1e:92:2c:e9:c8:0c:a5:bc:ff:b5:7b:5f:53:66:48:e7:8d:
         2c:f7:36:76:3d:67:d3:6c:d3:96:0c:9e:79:c8:29:a6:cf:47:
         78:6a:38:65:89:ac:78:65:2f:54:cf:5d:7b:f5:64:39:9d:03:
         67:0c:bd:5f:03:65:6f:7c:de:25:bc:f3:b2:41:ab:10:f1:73:
         27:a8:b2:54:89:dd:34:3b:0b:09:72:59:0f:05:bd:a2:97:4e:
         0a:6f:a3:fb:76:1d:e8:3e:ce:b9:fa:68:52:d8:8d:25:0a:b7:
         6f:90:df:83:d7:ce:b5:40:ec:1d:69:c8:d0:61:85:1c:d1:3d:
         d2:3b:6c:39:89:1c:94:9b:34:7b:37:64:e3:90:02:d3:a3:c1:
         88:31:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----