Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/E1A7A3140392AABA8B370CC56622186B716AEB86.mft
File:                     E1A7A3140392AABA8B370CC56622186B716AEB86.mft (raw, json)
Hash identifier:          24twN8RqofzqEgOMbQFqvyaeD3z1mQHzleRdOp1rxT4=
Subject key identifier:   38:83:0B:AF:3E:C4:CF:16:4A:FB:59:DB:88:7A:B2:BF:D4:8E:E4:42
Authority key identifier: E1:A7:A3:14:03:92:AA:BA:8B:37:0C:C5:66:22:18:6B:71:6A:EB:86
Certificate issuer:       /CN=E1A7A3140392AABA8B370CC56622186B716AEB86
Certificate serial:       54D24A97095EDFF6E83F721891A666251828B96C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1A7A3140392AABA8B370CC56622186B716AEB86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/E1A7A3140392AABA8B370CC56622186B716AEB86.mft
Manifest number:          0449
Signing time:             Tue 27 Sep 2022 06:21:37 +0000
Manifest this update:     Tue 27 Sep 2022 06:16:37 +0000
Manifest next update:     Wed 28 Sep 2022 07:45:37 +0000
Files and hashes:         1: E1A7A3140392AABA8B370CC56622186B716AEB86.crl (hash: W9siDvuqpANPELiDgRAf0qDNb5cVCojtM/QdgUHXMqc=)
                          2: 323830343a333736383a3a2f33322d3334203d3e20323636343130.roa (hash: gPwjgk+BMfSBstS8haLYD5XEdicj3roZV06fN3Eu34g=)
                          3: 3137302e38302e38302e302f32322d3234203d3e20323636343130.roa (hash: 5OCAUNBgGCDAx5wa4gsMDqhKq8dUS6a4lzfUX3vUdBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d2:4a:97:09:5e:df:f6:e8:3f:72:18:91:a6:66:25:18:28:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A7A3140392AABA8B370CC56622186B716AEB86
        Validity
            Not Before: Sep 27 06:16:37 2022 GMT
            Not After : Sep 28 07:45:37 2022 GMT
        Subject: CN=38830BAF3EC4CF164AFB59DB887AB2BFD48EE442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:9d:45:60:18:e9:48:9e:31:87:9d:62:3a:
                    0a:15:13:16:aa:d6:d2:79:04:b1:91:13:16:be:53:
                    54:6a:59:43:e4:1b:1a:c5:aa:53:76:e0:67:47:d4:
                    a9:df:bf:98:13:c3:d5:81:bd:89:dc:c5:f3:60:5e:
                    a1:cf:63:ba:8e:4b:38:0f:58:11:41:33:8f:94:8c:
                    a8:95:c6:03:c6:94:5a:71:0f:f6:90:5f:8c:55:3f:
                    44:84:f9:b5:c7:01:9c:dc:1e:f4:fe:88:c0:ed:f9:
                    0e:56:57:93:c3:93:b9:71:5b:95:0f:29:e9:bf:b3:
                    bb:5c:f3:64:cc:71:3f:de:77:39:53:5e:6b:1a:3c:
                    7c:2b:66:50:7c:d6:f9:cc:4c:94:2a:bd:f2:49:48:
                    b1:7d:4c:f6:51:66:2a:73:c1:c3:24:75:b0:fc:37:
                    1a:30:66:49:37:06:fa:72:5f:fa:aa:45:f2:73:c6:
                    ba:be:30:11:88:30:39:10:c8:40:ab:b5:cf:64:8d:
                    24:f2:79:aa:27:bf:8c:54:3c:1b:6e:2f:2a:4d:ba:
                    85:68:8d:27:23:ec:16:29:78:62:82:77:12:a3:87:
                    a2:a3:80:b3:63:54:b0:48:50:9e:ca:62:3a:e0:cd:
                    98:cb:69:c6:64:08:1a:5e:cd:0f:7c:b4:36:57:ca:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:83:0B:AF:3E:C4:CF:16:4A:FB:59:DB:88:7A:B2:BF:D4:8E:E4:42
            X509v3 Authority Key Identifier:
                keyid:E1:A7:A3:14:03:92:AA:BA:8B:37:0C:C5:66:22:18:6B:71:6A:EB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/E1A7A3140392AABA8B370CC56622186B716AEB86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1A7A3140392AABA8B370CC56622186B716AEB86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/E1A7A3140392AABA8B370CC56622186B716AEB86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:ed:ee:db:5b:41:f6:b8:40:53:a4:19:cb:ae:44:95:c6:
         15:32:fc:ec:83:88:fa:f2:8a:f4:9f:b5:0b:38:b3:03:6a:2c:
         43:bd:c4:ab:22:6b:d4:0d:20:81:fc:f1:49:68:24:f0:67:85:
         fb:dc:a2:6e:57:9a:d0:64:32:5c:3d:55:38:88:47:68:99:68:
         e9:18:b0:c1:d5:99:56:73:2b:1d:68:7e:15:54:c6:3a:64:2b:
         e7:d5:f2:19:5c:e2:64:98:96:2d:ee:c3:29:d8:05:81:ac:25:
         0a:5c:cf:51:06:74:03:d9:75:76:27:36:23:df:e4:82:45:f2:
         59:0d:ad:e2:64:4a:73:b9:8b:4e:29:4d:c6:64:11:ec:52:99:
         28:0c:f5:33:0c:d4:20:71:3a:36:32:c0:a9:db:19:6d:ff:21:
         6d:ff:60:98:bd:e9:4c:7b:c0:6d:35:c1:13:8e:87:3e:b9:8c:
         aa:4b:ba:ca:5b:a8:0a:69:b5:18:29:8b:b1:84:10:2a:ee:c8:
         fe:37:b3:21:22:65:b6:2b:b5:e5:80:37:b5:21:67:3e:7e:ab:
         61:02:fe:f5:0a:bb:f9:87:4c:ef:af:30:94:b1:a4:77:8c:af:
         83:ab:ef:31:7a:a9:5e:14:b6:ae:34:2c:06:7e:69:e5:1d:98:
         f4:40:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----