Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.mft
File:                     DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.mft (raw, json)
Hash identifier:          BQ5K7/1+JicZOqDYNyIkmjQbc0oatJp8+1afLa4NN8U=
Subject key identifier:   55:F9:BB:32:FC:CC:6E:75:0F:B0:15:C7:D8:4F:D7:A0:D2:03:D6:71
Authority key identifier: DD:C8:BA:D7:F9:67:E4:A5:2C:00:D4:ED:05:6D:1B:A3:AF:71:93:5C
Certificate issuer:       /CN=DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C
Certificate serial:       30F408D388E8BD2E252EB39CFE340BD9D164B9FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.mft
Manifest number:          0151
Signing time:             Sat 11 Mar 2023 09:17:23 +0000
Manifest this update:     Sat 11 Mar 2023 09:12:23 +0000
Manifest next update:     Sun 12 Mar 2023 09:19:23 +0000
Files and hashes:         1: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: JuVCTe5aDIje1LwF3qrUB+flGXgWTpsFLC/T+RQoLu8=)
                          2: DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.crl (hash: sG22PRwhID2bR2JTbQBMEBSgmmUuemysaewTUKBfSZ8=)
                          3: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: s3T/NAx+zouoHRX+Olz7iwl2bj0i/lIjHRGOjxIFZ90=)
                          4: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: Fm4e00zOe+rqSaGqdj1LchmAo5zgZ9hrFQIJsPlJqRk=)
                          5: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: r7pt+upI6SUyuKMa5LLijBPwTgKpOzNwQoVhTJm0afk=)
                          6: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: 1CIPbHJxKlczGgD/V4nynIqGVmppNxONtpR4H+FbFT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f4:08:d3:88:e8:bd:2e:25:2e:b3:9c:fe:34:0b:d9:d1:64:b9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C
        Validity
            Not Before: Mar 11 09:12:23 2023 GMT
            Not After : Mar 12 09:19:23 2023 GMT
        Subject: CN=55F9BB32FCCC6E750FB015C7D84FD7A0D203D671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:19:0b:97:7e:a3:c8:c2:1e:91:d5:95:72:
                    9c:58:fe:e6:a0:bf:91:84:3b:29:f8:6e:07:05:35:
                    4b:e1:b1:ab:8f:d4:37:0f:24:34:d8:22:6c:56:40:
                    b9:90:04:b3:75:66:53:ff:e0:d6:e8:da:eb:7d:25:
                    63:9d:91:3e:d7:c7:59:76:08:2a:89:b9:76:ee:85:
                    1e:e9:de:d3:9b:f3:74:e4:ad:57:72:d8:b6:01:c0:
                    7c:44:f5:8f:80:34:89:d4:bd:dd:db:bb:60:6f:be:
                    95:6f:74:58:e5:3b:37:2f:de:6f:dd:c6:34:76:b1:
                    fd:d4:d9:bf:f5:fb:a2:0a:6f:63:08:e2:e3:c0:84:
                    03:ce:d2:bc:7c:7f:7b:36:d3:b6:83:ad:8b:25:12:
                    47:29:2a:37:39:87:c6:c3:e0:e2:ac:02:af:19:ae:
                    cc:01:cb:d3:2c:ca:60:94:60:d9:d8:23:ee:f1:90:
                    67:5b:74:fe:04:07:4c:38:6d:21:1d:65:94:e8:f0:
                    0f:99:27:ff:27:13:31:ee:a8:e6:d6:83:29:be:43:
                    dd:7e:dd:f6:cd:a3:44:47:6a:65:78:e7:8f:53:ac:
                    a2:67:d6:16:d5:fa:72:12:bf:7b:5c:7f:1d:65:71:
                    8a:38:ef:a4:b7:00:86:46:b6:a2:7c:46:b4:2d:1d:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:BB:32:FC:CC:6E:75:0F:B0:15:C7:D8:4F:D7:A0:D2:03:D6:71
            X509v3 Authority Key Identifier:
                keyid:DD:C8:BA:D7:F9:67:E4:A5:2C:00:D4:ED:05:6D:1B:A3:AF:71:93:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/DDC8BAD7F967E4A52C00D4ED056D1BA3AF71935C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:7c:f4:24:e6:f9:6f:29:69:8f:f1:39:f0:30:c3:15:79:
         54:e0:fa:84:10:ca:b9:63:81:cb:07:9d:db:1c:b7:30:10:b0:
         41:bc:ec:58:97:88:36:4e:07:51:ea:f5:78:d1:98:1e:20:3e:
         61:ba:8c:73:8e:16:63:36:2d:44:51:8b:bb:99:1f:bf:ad:71:
         6f:21:de:a1:50:d7:b0:02:5c:b1:a2:d6:f9:c1:a7:1e:9a:42:
         59:b5:ca:92:e1:ee:0a:d5:cf:6a:3c:7c:f0:cd:6d:88:bc:0a:
         a0:1d:4e:6b:84:5c:1c:35:86:40:5b:6b:22:cc:88:2d:82:be:
         da:54:67:26:29:d4:ed:b4:c1:99:46:4e:9d:d2:9a:16:e7:37:
         e0:40:f5:21:a5:c3:11:54:5f:42:60:0d:52:da:c1:1c:7a:8d:
         bd:7b:4c:98:3b:bc:0d:83:ac:6b:a3:e6:ae:96:8a:03:23:68:
         94:ca:b6:24:01:d6:d9:ea:c6:b0:b8:f6:b9:4e:2a:01:26:4f:
         a6:97:1a:c0:f4:b8:f6:cf:19:fd:a1:6f:d5:27:ab:a3:21:10:
         92:5d:7c:2e:63:8e:b7:71:24:a3:a7:51:d5:3d:20:9c:5e:de:
         27:3d:ca:ac:1f:3f:72:a7:e2:d7:5b:d9:86:8d:03:3d:2e:f9:
         3b:21:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----