Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/C6E3B25A87A261683004AF163D2E6F266660F44B.mft
File:                     C6E3B25A87A261683004AF163D2E6F266660F44B.mft (raw, json)
Hash identifier:          H+STfA+sumi4S0Jamk6v/u7V7NvkOcUxoG2r+ClZW6E=
Subject key identifier:   B9:E8:1D:40:FA:C6:90:70:13:23:B7:59:93:08:00:14:29:63:FC:BC
Authority key identifier: C6:E3:B2:5A:87:A2:61:68:30:04:AF:16:3D:2E:6F:26:66:60:F4:4B
Certificate issuer:       /CN=C6E3B25A87A261683004AF163D2E6F266660F44B
Certificate serial:       38330CE575EEF96AD36E8ED04A35FF0D4E394F7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E3B25A87A261683004AF163D2E6F266660F44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/C6E3B25A87A261683004AF163D2E6F266660F44B.mft
Manifest number:          03
Signing time:             Mon 15 May 2023 19:38:07 +0000
Manifest this update:     Mon 15 May 2023 19:33:07 +0000
Manifest next update:     Tue 16 May 2023 19:58:07 +0000
Files and hashes:         1: 323830343a353339633a3a2f33322d313238203d3e20323638353935.roa (hash: GQExft/drEuMTH+9QoVQt13zi5nuYR3iZM3r6Ijl0zI=)
                          2: C6E3B25A87A261683004AF163D2E6F266660F44B.crl (hash: OFa8UoboazrraLTlG+vUg61sJJ8VnPkSXtY1OjgHohY=)
                          3: 34352e3136332e3130302e302f32322d3332203d3e20323638353935.roa (hash: XyoL3aVUipf0w6vuTov8m0uO8dlMCEZyOwWNWxWYGJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:33:0c:e5:75:ee:f9:6a:d3:6e:8e:d0:4a:35:ff:0d:4e:39:4f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E3B25A87A261683004AF163D2E6F266660F44B
        Validity
            Not Before: May 15 19:33:07 2023 GMT
            Not After : May 16 19:58:07 2023 GMT
        Subject: CN=B9E81D40FAC690701323B759930800142963FCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:ef:16:b4:ac:97:d9:ca:c2:68:6a:fe:1f:
                    81:a7:20:c7:ca:1c:52:74:c2:63:41:73:78:ad:b6:
                    e8:4d:af:ee:d7:3e:a3:fc:c5:dd:6e:5d:b1:9c:ca:
                    cc:32:b2:f0:c2:6c:84:db:79:b5:5d:05:20:ef:8f:
                    00:8f:3a:47:13:e6:78:92:8d:81:e5:3a:95:3c:65:
                    9e:9f:5d:ae:15:17:4f:7a:81:31:07:30:5c:20:3e:
                    e9:2e:e5:31:a2:6d:57:e4:85:49:ab:b1:62:e2:90:
                    56:85:12:d7:23:b0:8c:af:6f:b3:25:8d:e7:47:c4:
                    57:fd:cf:8a:6e:05:b9:1e:7b:5d:72:a5:df:d6:6c:
                    e2:3e:83:e3:41:0d:3b:e3:79:88:85:e8:c3:ae:f8:
                    dd:82:8b:d6:62:61:18:04:c3:97:b7:af:54:42:2c:
                    6e:b9:1f:a1:7b:2f:20:9a:d8:c9:11:e5:9c:fc:26:
                    a7:f2:fc:d9:95:ee:e1:17:83:35:d0:82:1b:31:aa:
                    9b:1d:a6:27:17:d4:59:05:e7:c6:e9:b6:9e:2f:07:
                    93:11:ea:26:41:09:a2:2d:d3:0c:a9:ab:09:42:4e:
                    77:b0:7c:38:15:a7:8f:7f:64:86:38:bd:39:3f:b4:
                    f9:b3:8d:3c:7e:b3:7e:c3:59:45:7f:29:70:13:ae:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:1D:40:FA:C6:90:70:13:23:B7:59:93:08:00:14:29:63:FC:BC
            X509v3 Authority Key Identifier:
                keyid:C6:E3:B2:5A:87:A2:61:68:30:04:AF:16:3D:2E:6F:26:66:60:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/C6E3B25A87A261683004AF163D2E6F266660F44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6E3B25A87A261683004AF163D2E6F266660F44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/C6E3B25A87A261683004AF163D2E6F266660F44B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:3a:b0:07:5b:ea:bd:63:8c:ba:14:69:55:df:e9:7b:c0:
         e9:7c:24:94:8b:be:4b:4f:7e:33:ca:51:6c:30:18:a6:98:c0:
         4e:b7:69:fd:ac:30:e7:24:83:97:4e:f6:8c:77:30:72:08:a5:
         9c:4d:47:97:89:15:8e:07:4c:1d:b4:2a:79:d6:a5:a8:7a:44:
         69:1b:70:3d:3b:54:bb:de:2d:c0:f6:f3:65:f7:d1:97:31:b0:
         11:90:a0:5d:57:d6:cc:9d:ee:ca:60:aa:ad:2d:20:3c:47:92:
         58:ed:ea:da:98:31:50:af:43:11:b0:47:50:4a:25:3e:60:19:
         ae:c4:35:e5:d4:99:b1:d8:e9:53:c9:f2:7e:63:c0:89:1d:22:
         0b:11:c6:d7:f7:f7:36:c4:e9:5b:79:7d:b6:4a:d3:23:c8:3a:
         55:d7:ac:70:97:a6:d8:21:a8:31:a9:d0:85:e2:97:cc:e8:ac:
         9a:2f:24:c2:bf:df:8d:e6:b3:fe:9e:84:85:00:c2:45:02:3e:
         66:6b:d0:62:04:5f:cc:b2:4d:0c:bf:53:28:c5:1e:5d:15:7f:
         0d:61:76:1c:32:03:d0:86:51:e8:fa:3a:6d:eb:77:3f:af:48:
         ce:26:94:d0:e6:ef:fe:16:c9:e6:79:db:79:26:ed:47:57:fa:
         62:e8:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----