Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.mft
File:                     43F654E25706FCC2EFE6604E797E21855D4A890A.mft (raw, json)
Hash identifier:          YxTRmRG0PltNcFFL4vdp/LRHqMdPnhKA2rjCgb1vleI=
Subject key identifier:   CC:43:09:9A:A6:5A:11:C1:C3:CC:30:F2:56:FB:77:D7:3F:82:75:58
Authority key identifier: 43:F6:54:E2:57:06:FC:C2:EF:E6:60:4E:79:7E:21:85:5D:4A:89:0A
Certificate issuer:       /CN=43F654E25706FCC2EFE6604E797E21855D4A890A
Certificate serial:       0B37777897CF62B14B133E23D5E1534A9CC1776A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F654E25706FCC2EFE6604E797E21855D4A890A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.mft
Manifest number:          B8
Signing time:             Fri 16 Dec 2022 02:39:03 +0000
Manifest this update:     Fri 16 Dec 2022 02:34:03 +0000
Manifest next update:     Sat 17 Dec 2022 04:15:03 +0000
Files and hashes:         1: 43F654E25706FCC2EFE6604E797E21855D4A890A.crl (hash: c9gl97GYCh2Soz1lyGvozJasUr5WrkmtoIpAvGeSRVw=)
                          2: 3138312e3139312e3139362e302f32322d3234203d3e20323637343339.roa (hash: mWfvnDXRDAzr7piv0e64J3k9Ru6/WXFuVQj8EqVyB28=)
                          3: 323830343a343138383a3a2f33322d3333203d3e20323637343339.roa (hash: vVfqwxrZ1pa3CcZKsJxcRGwzvuQfg+HXWvG6drADyhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:37:77:78:97:cf:62:b1:4b:13:3e:23:d5:e1:53:4a:9c:c1:77:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F654E25706FCC2EFE6604E797E21855D4A890A
        Validity
            Not Before: Dec 16 02:34:03 2022 GMT
            Not After : Dec 17 04:15:03 2022 GMT
        Subject: CN=CC43099AA65A11C1C3CC30F256FB77D73F827558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:8a:95:1c:b4:16:24:01:da:23:1e:e8:00:
                    54:50:b5:39:e7:fd:62:cd:5b:c7:08:f6:cb:94:d6:
                    98:7b:ed:0f:05:29:50:88:f3:75:79:c3:65:c1:d3:
                    a8:16:9c:37:de:7b:a2:50:32:90:60:7c:e3:16:e4:
                    13:ed:44:5d:cc:df:9e:11:fb:86:b6:30:64:7b:a5:
                    40:ef:81:eb:fa:ba:15:51:8d:30:42:07:b3:a8:70:
                    ef:24:21:3e:a9:bc:f6:cc:b0:ca:4f:ba:ea:25:e0:
                    32:ab:cb:b6:37:39:11:2a:a2:59:69:34:6f:87:83:
                    fe:01:8d:68:8a:d2:38:90:f2:4c:e5:b9:95:94:e9:
                    8a:4a:92:0a:db:6c:42:5f:f3:5b:24:c1:21:92:35:
                    86:d9:c8:62:05:62:5e:c8:27:3c:1f:a7:fc:76:e4:
                    a1:5f:bc:c1:5e:36:a1:76:5d:77:65:23:bc:8b:b2:
                    d6:b6:df:94:83:13:b5:2f:c3:ab:00:16:d6:c9:6c:
                    41:3f:54:50:bb:86:5e:2f:e0:57:36:df:11:79:2f:
                    6b:c6:20:d9:7f:79:b4:0f:a5:ed:df:d0:a8:42:5c:
                    24:1b:1b:42:3f:0d:57:01:77:d0:d6:0b:d0:fc:ea:
                    10:4b:46:4a:3d:b3:aa:9e:6e:62:5b:cf:64:70:50:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:43:09:9A:A6:5A:11:C1:C3:CC:30:F2:56:FB:77:D7:3F:82:75:58
            X509v3 Authority Key Identifier:
                keyid:43:F6:54:E2:57:06:FC:C2:EF:E6:60:4E:79:7E:21:85:5D:4A:89:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F654E25706FCC2EFE6604E797E21855D4A890A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:1a:95:be:46:a5:65:53:08:e1:0e:94:63:04:99:9d:9f:9a:
         85:dd:67:90:9c:4a:1e:ae:1e:a3:3b:42:c6:59:91:e9:bf:1e:
         d0:31:dc:3d:d3:2f:4f:bb:47:46:00:d1:ee:c8:c4:57:c5:ec:
         08:de:1b:03:77:96:40:74:2c:cd:05:b0:23:a2:0e:ec:00:95:
         46:78:e3:b3:65:e2:79:e1:14:3a:df:b7:93:ef:fe:82:71:ea:
         18:02:91:d2:ea:56:00:08:1b:3a:04:a3:69:af:7a:29:fe:c1:
         3f:2b:b3:16:70:1b:d1:9f:18:d1:b1:80:71:91:c3:41:a1:ac:
         23:d5:38:63:7f:28:b8:57:23:dc:f4:ed:f4:33:ea:f5:89:e2:
         1c:11:61:98:81:55:81:5a:ac:a8:09:f6:55:8c:9f:af:f2:d1:
         31:26:b1:85:fb:27:4b:b4:cb:cf:c7:2a:7e:40:00:75:00:a0:
         33:a8:5a:23:9e:cc:57:52:52:50:36:4f:38:e7:82:02:5f:19:
         71:20:ce:74:ee:30:f3:e3:49:d9:e1:38:ff:fa:fa:32:90:02:
         50:8e:49:98:20:7d:84:98:47:90:0b:16:f6:b9:db:8e:10:3c:
         df:7d:7d:81:19:18:0b:35:07:18:d0:96:ac:f4:e2:39:27:f9:
         44:54:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----