Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/B50DAD5033AA3946A39C0AD7650E8478E70A77C6.mft
File:                     B50DAD5033AA3946A39C0AD7650E8478E70A77C6.mft (raw, json)
Hash identifier:          PJGy6/iP16r3gSnSPn616D7+2hGkYmNHbAqESvbXPws=
Subject key identifier:   50:5D:2A:21:6A:91:49:34:D3:F4:3D:69:39:F4:FD:E1:68:EA:0D:21
Authority key identifier: B5:0D:AD:50:33:AA:39:46:A3:9C:0A:D7:65:0E:84:78:E7:0A:77:C6
Certificate issuer:       /CN=B50DAD5033AA3946A39C0AD7650E8478E70A77C6
Certificate serial:       49B0F2C62700C2A4877BFB740F0E8015380083CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B50DAD5033AA3946A39C0AD7650E8478E70A77C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/B50DAD5033AA3946A39C0AD7650E8478E70A77C6.mft
Manifest number:          03FA
Signing time:             Fri 02 Dec 2022 16:44:08 +0000
Manifest this update:     Fri 02 Dec 2022 16:39:08 +0000
Manifest next update:     Sat 03 Dec 2022 18:43:08 +0000
Files and hashes:         1: 323830343a323939633a3a2f33322d3438203d3e20323634303235.roa (hash: Vc1SzPmw/i6XUCDkYKQT8n+x+BsvvXt1sU2Wa/gXWRI=)
                          2: 3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa (hash: eWA9it43VsxbXbjk0pu6wt6U0xZEYtyN50nVw+S9aAE=)
                          3: 3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa (hash: gqJGmnWS5GzG67D95OsY9n4xvztGuaKjIf87J7cKo20=)
                          4: B50DAD5033AA3946A39C0AD7650E8478E70A77C6.crl (hash: gIlWiaegdaeggHgtHxuot7vkIMaOADmO/ss9MZ/lXuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b0:f2:c6:27:00:c2:a4:87:7b:fb:74:0f:0e:80:15:38:00:83:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50DAD5033AA3946A39C0AD7650E8478E70A77C6
        Validity
            Not Before: Dec  2 16:39:08 2022 GMT
            Not After : Dec  3 18:43:08 2022 GMT
        Subject: CN=505D2A216A914934D3F43D6939F4FDE168EA0D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:18:df:e7:80:c8:3f:9e:e1:61:18:03:06:
                    50:9f:e1:1b:75:33:fa:56:0e:1c:8f:42:5f:cb:54:
                    31:11:a1:4d:2b:cc:23:28:ff:2a:45:da:f8:a9:48:
                    51:f5:2e:6b:52:05:ed:27:71:da:ad:8a:85:46:30:
                    0c:ae:67:e6:4b:be:2f:86:7c:6d:e9:60:cf:be:0a:
                    d2:cb:c9:15:9e:4f:e3:6f:98:31:c2:05:16:c4:e3:
                    a5:00:a8:bf:e0:3a:6e:d2:db:f8:51:3f:5a:64:6e:
                    1e:a3:b4:d6:39:33:3c:4a:57:0c:19:dd:5d:45:d2:
                    4a:c5:1d:6c:71:fa:97:c1:ba:65:ba:48:47:3e:c7:
                    ef:5e:52:3d:e5:27:56:ab:cd:12:d4:50:90:fd:74:
                    c2:56:77:12:6a:60:f1:a1:91:a3:2b:68:28:1c:84:
                    36:a1:6b:bb:2d:64:b3:29:f1:8b:3c:a8:fe:8e:84:
                    8d:7d:ed:31:b2:be:1d:ff:ed:0f:c4:eb:38:61:b1:
                    ae:7e:fe:d1:90:60:59:dc:0c:19:71:1c:2a:dd:a9:
                    d9:64:87:8e:a7:cd:8e:ba:ed:f6:d7:ea:41:3d:cf:
                    98:2b:4c:98:26:cc:7d:eb:40:a9:f6:c8:4f:81:75:
                    28:62:32:e8:15:cb:da:9d:e3:de:71:e9:43:2f:b6:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:2A:21:6A:91:49:34:D3:F4:3D:69:39:F4:FD:E1:68:EA:0D:21
            X509v3 Authority Key Identifier:
                keyid:B5:0D:AD:50:33:AA:39:46:A3:9C:0A:D7:65:0E:84:78:E7:0A:77:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/B50DAD5033AA3946A39C0AD7650E8478E70A77C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B50DAD5033AA3946A39C0AD7650E8478E70A77C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/B50DAD5033AA3946A39C0AD7650E8478E70A77C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:d1:ee:58:53:4f:51:40:73:f8:37:75:7e:df:24:64:1d:
         fd:b6:dd:37:42:c4:a4:5c:d2:a3:de:4e:00:84:28:bc:30:27:
         a3:a6:9d:8f:7f:60:a9:69:51:5d:90:4b:e3:b1:26:a1:66:fb:
         01:3b:b4:ac:f0:41:e9:fc:46:3a:46:9d:ef:03:fd:41:61:16:
         bc:13:23:47:1d:6d:16:59:cf:f4:13:e5:89:4d:f5:70:24:b6:
         2c:a7:90:4f:72:a5:a9:c7:de:2c:bc:43:82:f8:44:75:fe:32:
         37:4b:90:b0:77:a2:5b:84:12:0b:2d:c4:e4:29:82:24:35:5a:
         83:6d:27:3f:b8:fc:49:2d:d3:4f:21:19:46:0f:49:c5:2c:61:
         da:ca:75:c6:39:df:13:88:00:f8:27:28:01:ec:07:77:40:e9:
         92:a7:dd:9e:65:42:b2:69:e2:3e:6b:b2:f1:af:dc:15:15:a6:
         bc:4a:6d:16:f2:9e:c1:55:f4:be:82:42:22:b3:f3:14:76:7d:
         c5:97:19:6d:b5:64:3d:6d:ff:55:58:28:32:03:be:2b:8c:a9:
         ab:d5:54:1f:ff:c7:7c:33:73:c4:7c:b0:da:d0:51:b5:17:77:
         22:44:9a:9d:ea:3a:b1:c0:47:96:ce:64:84:19:e5:56:c0:22:
         fe:ed:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----