Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.mft
File:                     96F1D02F451D1A1561711A9E6C09A2168371C08F.mft (raw, json)
Hash identifier:          4zWE7WRSixt/xzlYQgScQEarpfPSvnAcz+tX2lcclWI=
Subject key identifier:   A1:8E:3D:67:79:44:31:F8:B3:F8:97:58:11:5D:FE:A8:AE:06:C3:BF
Authority key identifier: 96:F1:D0:2F:45:1D:1A:15:61:71:1A:9E:6C:09:A2:16:83:71:C0:8F
Certificate issuer:       /CN=96F1D02F451D1A1561711A9E6C09A2168371C08F
Certificate serial:       29365AADFC2D946AA57C35D1D43CACFFEFDBDD7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.mft
Manifest number:          33
Signing time:             Thu 10 Nov 2022 13:30:04 +0000
Manifest this update:     Thu 10 Nov 2022 13:25:04 +0000
Manifest next update:     Fri 11 Nov 2022 15:10:04 +0000
Files and hashes:         1: 34352e3137382e3132382e302f32322d3234203d3e20323639303235.roa (hash: 5ugMKLK77KAT9D+yK3kuluzfHIaaZewX2Ak5tpK/wbQ=)
                          2: 96F1D02F451D1A1561711A9E6C09A2168371C08F.crl (hash: h0s88dC8bWWEAZwqEyZzwQkQdZnXsufrCsGKRFgJvmc=)
                          3: 323830343a356535303a3a2f33322d3438203d3e20323639303235.roa (hash: Tk1mhL32aVyPD2BIFcQOP2zM0b9r19NJYT1X3KyFbzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:36:5a:ad:fc:2d:94:6a:a5:7c:35:d1:d4:3c:ac:ff:ef:db:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F1D02F451D1A1561711A9E6C09A2168371C08F
        Validity
            Not Before: Nov 10 13:25:04 2022 GMT
            Not After : Nov 11 15:10:04 2022 GMT
        Subject: CN=A18E3D67794431F8B3F89758115DFEA8AE06C3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:97:ec:7b:17:6a:da:4e:30:89:76:1c:7f:
                    28:b3:b7:f9:da:8d:af:3d:4f:51:fb:87:f9:8a:ab:
                    2c:b6:fa:16:df:f1:33:6e:9c:29:9a:17:47:47:47:
                    3f:7a:21:1b:56:69:ad:38:aa:80:0e:7f:18:40:b6:
                    d9:2f:0d:f6:28:15:f9:18:bb:e7:43:64:e2:28:cf:
                    f2:ab:ed:74:c4:9a:b0:b2:a4:47:bc:37:50:91:4e:
                    6a:3b:90:99:b4:6b:d6:b0:86:fa:d5:69:c7:5d:ce:
                    90:0a:5e:46:f0:9c:ce:d3:21:55:f3:e5:46:5c:cc:
                    61:4f:f5:4b:90:77:ed:0a:8d:9f:aa:92:70:cb:03:
                    9f:29:15:8c:40:7e:97:dd:66:03:a2:61:2e:74:b1:
                    39:f4:da:4e:bc:82:c9:28:f2:31:a7:00:29:09:ee:
                    06:b1:25:33:99:e7:49:34:61:1a:e9:7a:38:fb:b8:
                    d5:ae:91:a0:53:00:39:4c:ec:f3:4c:25:6b:7c:1f:
                    8f:1d:db:c1:96:1c:d2:48:b5:14:93:ea:89:c0:07:
                    ef:bd:29:c2:db:57:0f:4b:06:f0:18:da:af:ad:eb:
                    75:31:d5:b6:fe:5e:87:bd:88:8f:66:0b:aa:de:e0:
                    f8:e9:2d:65:a0:d3:34:44:18:f0:b3:c5:38:0d:3e:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:3D:67:79:44:31:F8:B3:F8:97:58:11:5D:FE:A8:AE:06:C3:BF
            X509v3 Authority Key Identifier:
                keyid:96:F1:D0:2F:45:1D:1A:15:61:71:1A:9E:6C:09:A2:16:83:71:C0:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/96F1D02F451D1A1561711A9E6C09A2168371C08F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:87:d1:39:0b:d0:e7:7e:9b:c7:d1:bd:1e:57:f9:2f:1c:6c:
         bf:d2:c3:72:74:bf:1a:e1:3a:8b:90:c7:0f:44:93:a6:9a:80:
         69:cf:e6:36:0e:dd:fc:26:44:53:bf:4e:da:be:ba:9e:ed:5d:
         c9:35:1a:9d:29:9f:12:a6:5f:6f:84:55:f0:29:10:46:a4:1f:
         00:07:98:88:aa:2e:16:79:60:83:6f:f3:57:44:eb:1e:fa:95:
         22:2e:be:c0:1a:2f:8a:f6:e8:91:9b:96:16:cd:21:0b:9b:cd:
         de:4a:97:88:47:f1:23:56:8e:9c:a5:3e:cc:7f:06:0b:ef:0d:
         6f:5f:64:3e:cc:0b:a8:1e:ad:83:2a:b0:8d:4f:69:f7:bc:b5:
         fa:81:86:1a:b7:bf:48:14:e9:af:e4:af:e7:a2:ea:ac:4d:6d:
         f3:4d:70:c4:23:f9:78:bc:3d:59:0e:cf:6d:16:82:15:3a:7b:
         cc:0d:e8:66:55:76:67:d8:b4:2b:bf:4d:38:49:75:91:e3:8d:
         28:75:54:32:9c:58:79:e7:e1:70:ba:e4:f6:d4:24:da:bc:c7:
         c1:73:29:8c:a3:60:18:e8:24:a2:87:cd:fd:24:85:aa:4c:77:
         ad:ac:43:df:b0:a4:b8:60:27:d6:10:fd:fd:63:1f:06:7d:94:
         af:e1:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----