Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/03ED5C7D19DC5AF26488E9CEF8BED558178700E4.mft
File:                     03ED5C7D19DC5AF26488E9CEF8BED558178700E4.mft (raw, json)
Hash identifier:          K+0TcEew7znmCPpY9XlLGm84EYfYa9h/HuwRKNx4Kbc=
Subject key identifier:   47:DC:9F:6A:A1:DD:0B:0A:15:23:F5:AE:31:00:90:F9:FA:91:8A:11
Authority key identifier: 03:ED:5C:7D:19:DC:5A:F2:64:88:E9:CE:F8:BE:D5:58:17:87:00:E4
Certificate issuer:       /CN=03ED5C7D19DC5AF26488E9CEF8BED558178700E4
Certificate serial:       0F3133A9029886DC8C95EE8F1A461ED34E289C73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03ED5C7D19DC5AF26488E9CEF8BED558178700E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/03ED5C7D19DC5AF26488E9CEF8BED558178700E4.mft
Manifest number:          13
Signing time:             Mon 23 Oct 2023 16:36:57 +0000
Manifest this update:     Mon 23 Oct 2023 16:31:57 +0000
Manifest next update:     Tue 24 Oct 2023 19:31:57 +0000
Files and hashes:         1: 323830343a363661383a3a2f33322d3335203d3e20323639353734.roa (hash: lmHQLzMR2SMXZpdxNAGCpKJN/hw+lod+Tmmj6xEyBu0=)
                          2: 03ED5C7D19DC5AF26488E9CEF8BED558178700E4.crl (hash: QgYB+kI5sMHN5roP13KfYRVurhyUudp/KTRBWKHQPHM=)
                          3: 34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (hash: +jHZznoOhybY/hRCVIH5wbhJnX5ak6NEJ4rh0fwnFA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:31:33:a9:02:98:86:dc:8c:95:ee:8f:1a:46:1e:d3:4e:28:9c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ED5C7D19DC5AF26488E9CEF8BED558178700E4
        Validity
            Not Before: Oct 23 16:31:57 2023 GMT
            Not After : Oct 24 19:31:57 2023 GMT
        Subject: CN=47DC9F6AA1DD0B0A1523F5AE310090F9FA918A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:44:5b:7a:ad:db:24:8f:09:78:1f:18:d1:
                    ab:a4:2c:fb:7f:34:e0:81:6d:12:b4:66:33:7d:d6:
                    61:ff:90:2e:eb:42:28:8b:e3:01:08:39:8d:ba:b7:
                    a2:2e:97:fd:54:fd:46:89:82:14:c0:25:a2:f3:62:
                    74:b0:5c:c9:88:c6:e8:32:df:f7:6f:b9:a9:ab:b1:
                    23:6b:e9:68:be:22:3f:d4:95:c5:d9:95:2d:99:e3:
                    68:5b:b2:d7:8d:51:3c:fc:5b:51:0b:7e:74:ce:76:
                    1e:86:67:c3:a2:e1:26:b8:26:7c:87:29:47:4a:07:
                    79:28:85:11:2a:ba:b4:f2:f7:67:26:0b:e0:82:66:
                    cb:48:34:c1:5c:17:9e:73:3f:e7:c7:1f:cb:27:27:
                    6e:83:ab:83:35:eb:32:0f:2c:2e:2b:22:a4:33:c1:
                    2b:21:21:1c:e3:b6:6c:45:1c:5c:68:04:2b:61:e8:
                    36:19:a0:a2:04:2d:ba:38:c2:b6:d3:4d:db:f2:cc:
                    90:52:c2:db:7d:50:dd:d1:df:75:ba:e3:5a:db:1e:
                    0a:bb:e7:03:4c:f6:01:62:e4:96:38:33:0e:0c:b2:
                    27:33:b2:6a:20:51:7b:e7:7a:ac:d5:28:e7:dd:9b:
                    32:14:0f:df:35:91:6e:21:95:eb:5a:1c:61:e5:a5:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DC:9F:6A:A1:DD:0B:0A:15:23:F5:AE:31:00:90:F9:FA:91:8A:11
            X509v3 Authority Key Identifier:
                keyid:03:ED:5C:7D:19:DC:5A:F2:64:88:E9:CE:F8:BE:D5:58:17:87:00:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/03ED5C7D19DC5AF26488E9CEF8BED558178700E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03ED5C7D19DC5AF26488E9CEF8BED558178700E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/03ED5C7D19DC5AF26488E9CEF8BED558178700E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:c3:2a:d5:3f:79:fd:33:36:50:a0:9c:78:b5:0e:37:61:
         a4:d6:0d:6d:59:ce:75:65:0f:59:a2:13:a1:21:91:de:cf:7e:
         3e:98:96:06:07:3f:64:11:97:b0:73:53:a7:bf:0d:dd:34:72:
         cc:35:89:04:54:59:c5:f6:bb:68:d3:9c:f8:89:bc:cd:a6:95:
         c6:ae:d9:32:1b:5c:6d:1c:f8:89:42:ce:fa:82:05:50:df:4e:
         39:54:47:3c:85:f9:89:2c:f3:00:9e:5a:b0:4c:5d:62:32:7d:
         34:b4:0d:9d:f0:a6:11:a9:36:87:91:7c:a0:cd:da:51:64:c3:
         01:97:69:bc:cd:3e:44:e6:73:56:ea:25:a8:a4:97:c3:e1:b0:
         29:a1:45:48:20:b7:43:15:cc:36:04:31:73:56:8f:63:79:78:
         7a:98:e5:9a:58:25:aa:00:95:81:18:4a:8b:a7:ce:73:88:41:
         37:96:55:76:d3:2c:1d:af:b0:86:26:60:e2:9b:53:08:51:e8:
         82:09:04:42:92:65:d4:16:9d:46:94:e9:ca:77:13:a7:78:2a:
         93:cf:7f:5b:fc:cf:81:05:9d:2e:25:5e:3a:cc:eb:9c:b7:2c:
         63:05:e7:0c:9f:7a:60:36:a7:85:3a:1b:a0:4c:51:21:32:55:
         dc:2f:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----