Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.mft
File:                     D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.mft (raw, json)
Hash identifier:          hgJ/TcsLMfPzpBz+5fWkZNfKIde0qtPbnLBnrR26cvc=
Subject key identifier:   18:51:D4:BA:15:17:2D:57:6E:00:3C:64:97:F9:7D:97:DA:91:08:B5
Authority key identifier: D7:BD:D2:51:4B:8B:6F:4B:87:FF:A6:0C:8E:59:A3:37:AA:56:B3:5E
Certificate issuer:       /CN=D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E
Certificate serial:       4D01C3CF0C22B2C1C97A0D8EF2129A5EF4229A0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.mft
Manifest number:          1A
Signing time:             Tue 28 Jun 2022 11:22:02 +0000
Manifest this update:     Tue 28 Jun 2022 11:17:02 +0000
Manifest next update:     Wed 29 Jun 2022 11:34:02 +0000
Files and hashes:         1: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: t2lr0izSE2RpA4YwSeFbIjeTijAsauze6LSncb8eY2k=)
                          2: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: Ket5O7olszJdzZBrRsaPJdz0uBMMkBT5UU2daTR4Rr0=)
                          3: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: gQn5iQG//UPRT4NoVecE/FTuZ0rVOcAddZe7+ZR8GIQ=)
                          4: 323830343a356338343a3a2f33322d3332203d3e20323638393133.roa (hash: 0Gx8gm3gTXVq0Ocxxe4LmS9vxqS+HXxuFbRKNnLuOXU=)
                          5: D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.crl (hash: nKX3nzEO7RhqtQIV753pNdKtu1j0VFr6TDchgWz8+Gw=)
                          6: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: hrCrVI/HMtLUbIAA/JYAHG92pWf9cMGouCR7qm3sntg=)
                          7: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: bzFUUrxRF104bAWNtj+mlQ0TE7u6D04j7qHjcSWZ5Hw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:01:c3:cf:0c:22:b2:c1:c9:7a:0d:8e:f2:12:9a:5e:f4:22:9a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E
        Validity
            Not Before: Jun 28 11:17:02 2022 GMT
            Not After : Jun 29 11:34:02 2022 GMT
        Subject: CN=1851D4BA15172D576E003C6497F97D97DA9108B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:7a:f9:6f:5c:ae:4d:1e:8e:5c:10:0c:9a:
                    c7:fd:c8:09:d1:99:a8:a4:dd:19:a8:88:22:e3:8b:
                    65:fa:2e:e6:5e:bb:89:64:c0:71:84:2a:1d:4a:50:
                    8d:ff:92:a0:a4:0d:4a:40:53:59:b7:29:c6:e1:a6:
                    a0:c9:0e:26:c0:2c:45:c7:c7:00:c8:3f:d9:4b:a2:
                    27:eb:2b:87:d3:1b:95:62:94:d2:7d:00:a2:88:da:
                    1a:56:01:b1:98:11:30:fe:6c:a3:9d:2b:96:ba:e1:
                    5e:f7:41:b1:79:16:04:d9:cc:35:fb:77:25:71:25:
                    33:4a:48:b4:f2:38:4a:2e:54:71:10:40:29:d2:3e:
                    19:67:04:84:44:06:c3:fb:07:c8:7e:7d:83:02:00:
                    99:ce:00:35:a3:e4:38:28:e7:71:c6:9a:ab:45:2c:
                    e4:f0:6c:ff:b0:8e:3d:c9:3c:7d:71:b1:51:e2:5b:
                    84:0e:42:3e:f0:84:7f:7d:f3:17:40:34:9a:ef:55:
                    7b:c8:dd:35:f6:47:fa:d0:48:fb:f7:72:a8:b6:c5:
                    d4:30:35:44:8f:c1:e9:f2:0c:87:0a:bd:12:7a:bc:
                    56:7a:e0:1e:50:9c:88:91:c7:d3:f3:0e:e5:c5:1d:
                    1e:cf:d7:40:62:06:1d:6c:d0:12:34:01:78:06:01:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:D4:BA:15:17:2D:57:6E:00:3C:64:97:F9:7D:97:DA:91:08:B5
            X509v3 Authority Key Identifier:
                keyid:D7:BD:D2:51:4B:8B:6F:4B:87:FF:A6:0C:8E:59:A3:37:AA:56:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/D7BDD2514B8B6F4B87FFA60C8E59A337AA56B35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:c2:c9:25:2d:b1:73:9d:66:c1:12:96:25:cc:d9:40:22:
         be:08:e7:9a:44:92:47:22:b7:eb:73:ce:e6:4d:7f:0b:66:ed:
         eb:12:5a:08:97:8e:7b:6b:bd:19:5c:68:8e:b0:b7:9f:e6:5e:
         7d:22:8e:44:4f:28:03:c3:dc:b8:e3:5e:21:72:a1:05:57:2b:
         f5:b4:37:fe:05:4c:9b:24:ec:79:3e:d1:83:0b:1e:d7:39:89:
         77:5d:1f:1f:26:37:4f:0b:33:f8:6b:7f:9a:70:3d:b2:cc:12:
         4a:22:f5:01:37:bb:99:68:c6:a5:96:35:81:1d:42:2b:79:42:
         92:b4:0c:e3:fd:db:a7:b7:fe:c8:23:1b:bc:83:d7:00:e7:86:
         d9:70:33:b3:32:fe:42:ec:f2:98:ed:83:a3:27:0b:89:77:56:
         b4:dd:61:b9:fb:b4:78:ca:15:e8:81:e3:6d:c1:7e:8c:03:86:
         ac:ed:14:16:9b:d3:da:74:43:ad:52:d2:32:14:a4:eb:70:9a:
         25:ce:df:7c:cc:8a:af:48:20:e5:bc:dc:3d:88:1e:28:86:27:
         f8:4b:bb:46:40:32:5a:e9:7d:d5:d7:b9:6e:e9:89:bd:0c:db:
         32:88:ad:df:d8:11:ce:db:30:45:18:fa:23:dc:ff:40:74:57:
         15:03:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----