Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.mft
File:                     42F558F853DE46F55030097C19294E709CC04ECD.mft (raw, json)
Hash identifier:          wVd4napF+cIkqGqNTRCTxfQ/7FRy6jLnmj+8jIFB6UQ=
Subject key identifier:   26:34:A3:DD:B7:0B:A3:A7:30:46:13:58:21:FA:59:BA:AA:D6:3E:EB
Authority key identifier: 42:F5:58:F8:53:DE:46:F5:50:30:09:7C:19:29:4E:70:9C:C0:4E:CD
Certificate issuer:       /CN=42F558F853DE46F55030097C19294E709CC04ECD
Certificate serial:       3A4B20A76C8F842CCDB41C8CC60BB92B1CEAE869
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42F558F853DE46F55030097C19294E709CC04ECD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.mft
Manifest number:          4A
Signing time:             Wed 20 Jul 2022 11:38:02 +0000
Manifest this update:     Wed 20 Jul 2022 11:33:02 +0000
Manifest next update:     Thu 21 Jul 2022 14:21:02 +0000
Files and hashes:         1: 323830343a316138383a3a2f33322d3438203d3e203631383634.roa (hash: c5X7A2xgBpkwZHonkOINJpp4E80Vvdl70P30Pkgsk+w=)
                          2: 3230312e3134382e3136302e302f32322d3234203d3e203631383634.roa (hash: mtvwwg5Y8rZKDkF3BTD9R18o/94mcmxbOU0RS+h0na4=)
                          3: 42F558F853DE46F55030097C19294E709CC04ECD.crl (hash: /HtNZXN2k0DWDp/ZgdKVom7nphdZtwyHFmDh4sPQBTs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4b:20:a7:6c:8f:84:2c:cd:b4:1c:8c:c6:0b:b9:2b:1c:ea:e8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42F558F853DE46F55030097C19294E709CC04ECD
        Validity
            Not Before: Jul 20 11:33:02 2022 GMT
            Not After : Jul 21 14:21:02 2022 GMT
        Subject: CN=2634A3DDB70BA3A73046135821FA59BAAAD63EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:ec:92:bf:49:14:7a:f1:3b:db:fb:67:72:
                    58:6f:0c:87:da:95:e4:b0:e1:ba:00:ea:d0:a6:f1:
                    f2:b5:81:fa:05:f9:b4:d9:9c:c1:8e:ae:48:79:70:
                    a5:88:f4:e6:c0:95:79:0e:7a:59:f2:8e:03:c0:29:
                    fe:5f:10:5b:e1:92:97:e1:01:d7:4c:ff:b5:89:f2:
                    d9:5e:43:9c:06:75:46:99:a2:41:bb:e4:5a:68:44:
                    e9:32:15:c6:f5:c6:e5:b9:cc:d8:75:76:a9:2b:97:
                    a7:02:1e:0c:02:f3:87:d6:3a:fc:57:cf:d5:d4:97:
                    e0:0f:5a:3d:5c:06:99:03:69:88:7e:e1:90:68:f0:
                    d7:2e:80:6b:1c:4a:aa:9e:cc:b4:17:df:21:f8:6c:
                    33:07:b2:d5:bc:3e:dd:95:cc:f6:4a:f2:41:36:4f:
                    e1:32:14:06:16:08:2e:a9:97:ed:c4:49:da:37:80:
                    c0:14:9b:a5:95:7f:88:9c:6f:6c:a1:9f:ff:2b:b9:
                    af:20:ff:1f:86:01:bd:e1:cb:03:d4:b8:7d:15:cb:
                    68:c8:ae:ff:80:a9:12:a6:1f:a6:dd:6d:0b:d8:e6:
                    3a:c2:08:f0:36:7e:8d:5e:9b:e0:5a:50:93:e0:9d:
                    84:66:94:a5:c4:1b:a3:bf:a9:f2:16:90:5d:fc:20:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:A3:DD:B7:0B:A3:A7:30:46:13:58:21:FA:59:BA:AA:D6:3E:EB
            X509v3 Authority Key Identifier:
                keyid:42:F5:58:F8:53:DE:46:F5:50:30:09:7C:19:29:4E:70:9C:C0:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42F558F853DE46F55030097C19294E709CC04ECD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:39:18:c2:a6:4a:a7:f0:85:aa:96:7c:29:aa:f6:e2:6f:
         a7:b3:95:de:46:fc:6d:09:e3:bf:7e:f9:84:52:f4:ed:48:e3:
         2b:e6:71:55:1f:ab:cb:0a:60:6b:40:72:f3:11:e2:47:27:26:
         96:7f:bb:eb:3c:d0:88:06:ee:eb:79:a2:67:da:1b:bc:87:d4:
         e4:39:bf:3b:84:bc:0e:b9:fb:e5:90:83:66:cf:f3:7b:2b:0e:
         0a:64:f9:dc:2f:0a:5e:1f:9d:3e:ef:0e:e6:57:68:e0:a8:c4:
         bf:96:c9:62:e6:39:c4:2f:2e:f6:60:f9:92:86:c6:a3:6a:9e:
         a7:83:3a:84:a9:64:b6:4c:23:f6:2d:aa:89:f4:c5:eb:89:e4:
         5b:9f:41:07:25:6e:10:9b:12:4f:40:1e:bc:d5:ab:e5:be:bb:
         ef:a4:c0:91:5c:6b:30:37:61:68:6b:aa:75:a5:67:28:8e:b5:
         27:84:95:54:14:16:ca:cc:a8:ac:4b:fb:7d:15:22:cb:cb:fb:
         1e:7c:d7:b0:45:f8:e0:a0:88:ce:76:f2:de:63:c9:7d:33:80:
         e7:27:80:c3:f9:df:d4:52:fc:ed:a0:67:49:5c:95:1b:44:3a:
         c8:3c:11:9f:e6:b2:d9:d1:1a:32:bf:8f:69:63:f1:52:ab:20:
         e1:51:a4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----