Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.mft
File:                     64D986FF30B7B19A93980CFBB2C7E7E22D35605D.mft (raw, json)
Hash identifier:          UhocIhVW9PJiTwxloAAkBL8ihgM2SsdAJ/EvltkeRFc=
Subject key identifier:   20:D7:AC:97:C1:B2:EC:73:1E:B3:F1:27:6D:C4:64:D3:9A:C6:EB:6E
Authority key identifier: 64:D9:86:FF:30:B7:B1:9A:93:98:0C:FB:B2:C7:E7:E2:2D:35:60:5D
Certificate issuer:       /CN=64D986FF30B7B19A93980CFBB2C7E7E22D35605D
Certificate serial:       26B7295378135372719FE4D3FB59F0B3A6899171
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.mft
Manifest number:          04
Signing time:             Sat 04 Feb 2023 10:18:49 +0000
Manifest this update:     Sat 04 Feb 2023 10:13:49 +0000
Manifest next update:     Sun 05 Feb 2023 12:12:49 +0000
Files and hashes:         1: 34352e3137392e34362e302f32332d3233203d3e20323639303737.roa (hash: hOpb4skPzK16dGB9b0nP81o4ZO/y1qvYB0dnYuG29cE=)
                          2: 323830343a356631633a3a2f33322d3332203d3e20323639303737.roa (hash: f/fcDS2NTJjbg4+/MTWg1WFf3J8+SmjaF9ApVuJMc74=)
                          3: 34352e3137392e34342e302f32322d3332203d3e20323639303737.roa (hash: JqQU/3rRAv65NBz8NU3JwvnYsglvrk6egx4dwXLDf0g=)
                          4: 64D986FF30B7B19A93980CFBB2C7E7E22D35605D.crl (hash: 8uDWt2RrD3FPGrHCcdTehMvFlUsGKaAjyfdXLGmLTpI=)
                          5: 323830343a356631633a3a2f33332d3333203d3e20323639303737.roa (hash: KP8OpvR5DqZJdwA4UL+hcFnh8vVI0zuTy2EC/mzOZKw=)
                          6: 323830343a356631633a383030303a3a2f33332d3333203d3e20323639303737.roa (hash: AKvatDEQtzKTv0Ob9u3akkxI+w7srmrXYTObiy7NDgo=)
                          7: 34352e3137392e34342e302f32322d3232203d3e20323639303737.roa (hash: Kudl7fd/3/48Noi205g2p9OCglvjLZNvEttFA6vas8I=)
                          8: 34352e3137392e34342e302f32332d3233203d3e20323639303737.roa (hash: Cpi9NVAfE1E+aVwEUhLrGGYy/cuPOq0kX10RCFaIYk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b7:29:53:78:13:53:72:71:9f:e4:d3:fb:59:f0:b3:a6:89:91:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64D986FF30B7B19A93980CFBB2C7E7E22D35605D
        Validity
            Not Before: Feb  4 10:13:49 2023 GMT
            Not After : Feb  5 12:12:49 2023 GMT
        Subject: CN=20D7AC97C1B2EC731EB3F1276DC464D39AC6EB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:6b:79:6a:72:da:98:c0:f2:77:b3:21:b2:
                    13:9b:36:13:ac:34:9a:05:59:7c:ea:2b:f6:ec:86:
                    5e:eb:16:71:3e:72:bc:fa:02:43:b1:e4:27:2f:fa:
                    5a:5f:88:f5:f7:07:93:5e:46:ff:0e:ce:00:4f:42:
                    d8:8e:88:71:f8:e1:fe:0c:bd:b2:8f:54:6a:11:eb:
                    bf:6e:34:a0:ca:99:18:1c:d1:a0:04:88:51:24:b0:
                    64:32:52:fa:ad:68:90:82:00:4f:39:23:5a:4c:9c:
                    50:61:bb:51:a0:54:3a:9e:14:3c:7d:b3:d0:34:95:
                    b1:4b:29:20:c8:0f:6d:2a:c0:57:03:28:3e:21:27:
                    b2:ba:3a:ac:95:e2:b3:ca:40:a6:90:aa:9c:a3:aa:
                    43:eb:1c:bf:b9:33:03:cc:ec:27:da:3d:28:01:ba:
                    0e:f2:87:09:c1:ec:88:05:db:dc:12:b8:25:c8:27:
                    67:34:8f:b2:5a:19:db:cc:c4:32:5a:4b:ce:c8:e9:
                    3d:37:a1:66:12:47:a9:a0:8b:93:e6:0c:f5:5f:4e:
                    75:db:ef:69:4d:60:9d:43:89:c3:e7:af:d5:65:96:
                    dd:d1:ce:17:92:7b:bd:13:5f:c5:22:62:e1:d7:ca:
                    3d:fa:73:30:b3:ba:32:df:65:2a:c8:34:c9:a2:30:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D7:AC:97:C1:B2:EC:73:1E:B3:F1:27:6D:C4:64:D3:9A:C6:EB:6E
            X509v3 Authority Key Identifier:
                keyid:64:D9:86:FF:30:B7:B1:9A:93:98:0C:FB:B2:C7:E7:E2:2D:35:60:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/0/64D986FF30B7B19A93980CFBB2C7E7E22D35605D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9c:88:b0:23:b6:7f:15:59:ff:34:a8:45:9b:65:87:d4:df:
         df:41:14:25:13:cf:bf:61:d9:3d:8a:bc:50:d7:9d:2f:e7:ed:
         73:39:fc:f4:c3:83:58:57:cd:99:11:cf:b8:b0:b9:37:46:40:
         e1:c8:4b:2f:2e:a1:8a:5e:02:ab:6a:f9:00:fc:87:04:ce:0e:
         6b:6f:bc:af:fc:9a:76:f5:27:e5:14:7f:23:73:04:fd:7c:72:
         1b:82:dc:df:ed:89:d8:1f:58:37:34:a6:73:a7:23:24:fc:2e:
         f5:60:7c:f4:5e:cc:51:ef:f5:49:8f:3b:4b:ef:6e:f2:5b:e6:
         f1:06:e3:2a:3b:92:d6:1b:2c:2b:37:be:fe:92:5f:42:c0:36:
         f9:c1:34:92:3b:61:be:ee:5d:29:f7:20:b0:04:43:72:f7:ac:
         a9:e0:12:b0:b1:e0:af:11:79:d6:56:62:68:e9:ff:98:47:21:
         d3:21:fa:80:1e:a8:da:e6:47:54:bc:7f:2a:1c:96:91:7f:06:
         3a:a3:02:45:d1:4e:5e:2e:f2:45:95:1d:45:78:3b:d3:0a:c6:
         89:be:ee:77:94:9c:fd:77:3e:39:5f:e2:db:4f:29:17:d5:cf:
         f8:a0:a5:0c:8c:81:c5:f3:04:37:41:19:52:d1:54:da:ae:e6:
         1f:2c:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----