Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.mft
File:                     7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.mft (raw, json)
Hash identifier:          DmTkaz9CZzESpjgv+7jrkIrGVdWT9kxOZKH3NUc4Aqw=
Subject key identifier:   BC:E1:5B:02:43:6E:C0:DB:2B:F7:69:6D:6D:B1:1E:A8:B9:7F:66:C0
Authority key identifier: 7A:B9:7A:29:F4:5D:71:7B:90:53:DA:4E:0B:23:40:F9:3B:6A:7F:B8
Certificate issuer:       /CN=7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8
Certificate serial:       2F26C2F84E817DE8E02D0C333AE779C72F0396FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.mft
Manifest number:          17
Signing time:             Thu 13 Jul 2023 17:30:32 +0000
Manifest this update:     Thu 13 Jul 2023 17:25:32 +0000
Manifest next update:     Fri 14 Jul 2023 17:51:32 +0000
Files and hashes:         1: 7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.crl (hash: IYtyB0SEef7tp920rNbxrHKyRjTa7JAhEQip5geg3Kk=)
                          2: 323830343a383065303a3a2f33322d3336203d3e20323732343138.roa (hash: 1uNstlRsbWuW4WfiPEfYfSN6Dl9LIElgHdRVIwlwK7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:c2:f8:4e:81:7d:e8:e0:2d:0c:33:3a:e7:79:c7:2f:03:96:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8
        Validity
            Not Before: Jul 13 17:25:32 2023 GMT
            Not After : Jul 14 17:51:32 2023 GMT
        Subject: CN=BCE15B02436EC0DB2BF7696D6DB11EA8B97F66C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:81:fe:64:a5:f6:40:32:26:4b:0f:1c:11:
                    e1:ea:67:bb:50:97:b9:b5:9e:62:a1:c9:c9:19:8c:
                    c3:ee:42:3c:6a:55:5b:3a:7b:8f:ad:53:ed:ac:c5:
                    48:3c:5a:b0:f1:04:2e:a5:aa:8c:8c:08:d8:96:5e:
                    b7:c2:40:9b:ea:6c:ed:61:68:9f:e3:43:b3:69:35:
                    c6:86:00:ed:f6:ca:90:9b:d8:4f:16:46:f6:2b:87:
                    31:ab:95:aa:b0:de:b4:9f:2f:73:73:8e:c1:67:0a:
                    16:dc:28:9e:0f:5f:ef:82:8b:0e:3c:2c:82:a2:6c:
                    3d:3b:3e:ef:11:76:bb:04:ff:39:65:0d:69:c2:72:
                    d5:1d:71:b1:b8:a6:38:ea:c0:07:b6:c0:a5:28:83:
                    90:10:9c:e1:5b:f1:66:cb:e7:3f:78:a0:ef:94:38:
                    86:b5:e8:18:9c:88:e9:2f:e2:da:19:02:ca:45:18:
                    db:48:2d:ee:f6:d0:cf:0a:60:06:7a:56:58:5b:29:
                    0f:1d:2c:f5:66:84:c1:dd:72:6e:eb:eb:bf:11:d0:
                    2f:2a:2d:99:e7:51:a1:dd:6c:75:cd:4d:ed:33:eb:
                    bf:97:f9:3d:a7:de:d5:5c:99:61:a1:be:1f:f8:77:
                    d1:b4:8d:ee:86:ea:e0:74:09:c4:61:0c:98:3f:64:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:5B:02:43:6E:C0:DB:2B:F7:69:6D:6D:B1:1E:A8:B9:7F:66:C0
            X509v3 Authority Key Identifier:
                keyid:7A:B9:7A:29:F4:5D:71:7B:90:53:DA:4E:0B:23:40:F9:3B:6A:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/7AB97A29F45D717B9053DA4E0B2340F93B6A7FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2f:78:22:b9:4d:f9:23:5e:46:59:a4:89:eb:bf:1f:b8:a5:
         a8:42:fd:d9:16:6a:09:25:28:fe:0b:78:ce:6a:70:bb:5b:dc:
         64:2d:79:a9:1a:26:64:3c:f7:f2:27:ed:6e:e2:bf:bb:a2:5d:
         77:62:5b:b3:6f:23:67:5e:8f:c6:9e:63:8d:f3:be:66:1f:5a:
         59:fa:af:73:e8:a1:26:4f:5b:16:5e:61:c8:e9:94:7f:e0:03:
         4b:7a:db:09:2b:27:18:17:d7:ee:05:a3:fe:a9:cb:07:16:dd:
         18:85:ea:dd:be:8f:4e:69:5a:3b:9c:aa:2f:c9:6a:fc:25:6a:
         3a:d7:e0:28:ba:76:7c:27:a3:6a:ba:1b:52:5e:de:dd:28:d4:
         51:23:4b:fd:9d:46:fb:63:3c:f6:d6:e9:48:86:7b:da:96:ef:
         d2:d7:60:d5:78:1b:3d:76:42:64:a4:d7:a8:8b:01:f6:3a:9c:
         2e:34:d9:54:07:ac:9a:1d:79:b0:c5:aa:e4:a9:e7:2d:d7:5d:
         8d:a7:7c:d4:c0:be:91:89:3c:dc:e3:2c:12:ae:eb:cb:c8:61:
         24:b8:98:d9:36:04:8c:25:66:cb:a4:1a:1a:f1:10:4a:2d:0e:
         ec:45:0d:04:8b:05:aa:f2:0c:e1:18:b7:8c:f8:a3:ef:50:a4:
         45:39:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----