Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/638993B01814A951CED1B1D993C6A07C5CCF0F85.mft
File:                     638993B01814A951CED1B1D993C6A07C5CCF0F85.mft (raw, json)
Hash identifier:          7NtSoFNbQJC8aEENOhnRqVZkkdI8LlvAg8Nkps86jMY=
Subject key identifier:   C8:09:71:D5:4D:0B:EE:76:6A:30:97:E1:37:9D:1B:F0:CB:B2:ED:E5
Authority key identifier: 63:89:93:B0:18:14:A9:51:CE:D1:B1:D9:93:C6:A0:7C:5C:CF:0F:85
Certificate issuer:       /CN=638993B01814A951CED1B1D993C6A07C5CCF0F85
Certificate serial:       1A8576FCE7EDBCA9E43659EC815C9D8061C4D235
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/638993B01814A951CED1B1D993C6A07C5CCF0F85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/638993B01814A951CED1B1D993C6A07C5CCF0F85.mft
Manifest number:          88
Signing time:             Mon 11 Dec 2023 15:05:29 +0000
Manifest this update:     Mon 11 Dec 2023 15:00:29 +0000
Manifest next update:     Tue 12 Dec 2023 16:03:29 +0000
Files and hashes:         1: 638993B01814A951CED1B1D993C6A07C5CCF0F85.crl (hash: lOG1HVtdHZGIDZSPz4eMIzX5MezzELhJu1MMEJWg2O0=)
                          2: 34352e3138312e3231322e302f32322d3332203d3e20323639323032.roa (hash: NAi/N0easMRPxQOzS+KirqK51ogo53C46MUCxbM0pcA=)
                          3: 323830343a363066343a3a2f33322d313238203d3e20323639323032.roa (hash: EpsmIu1o4d+JQo6HzxEmttQP/eLxpJeQOBKLM3n8RCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:85:76:fc:e7:ed:bc:a9:e4:36:59:ec:81:5c:9d:80:61:c4:d2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638993B01814A951CED1B1D993C6A07C5CCF0F85
        Validity
            Not Before: Dec 11 15:00:29 2023 GMT
            Not After : Dec 12 16:03:29 2023 GMT
        Subject: CN=C80971D54D0BEE766A3097E1379D1BF0CBB2EDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:b4:92:a5:b8:f7:2b:18:3e:dc:22:05:4a:
                    58:47:a4:43:fb:05:9f:d0:b7:06:34:43:5e:1f:60:
                    f1:ac:7f:9e:78:5c:dd:7c:bf:51:72:66:a2:4d:43:
                    4d:d4:64:b5:87:0d:4c:2a:69:06:f0:65:a9:0a:0a:
                    d3:8d:e2:dc:f6:46:16:88:9e:90:a5:34:91:81:b5:
                    6c:29:f7:48:3f:d6:c0:5b:52:7f:8f:50:95:42:71:
                    50:db:a4:12:a0:4e:05:75:63:70:f6:c6:44:9a:e1:
                    b0:e7:cf:14:3e:cd:ca:d2:60:f1:15:c4:5e:47:02:
                    23:f7:ad:98:a3:66:46:7a:33:c8:b5:5d:31:ba:1d:
                    2e:b8:37:2c:f3:04:69:db:23:41:76:23:20:6b:27:
                    d3:fe:a1:b7:d3:2c:78:10:51:58:17:cf:82:b2:c7:
                    02:96:ab:09:72:99:ec:e5:0c:f4:8c:01:97:e4:89:
                    9b:45:05:b2:14:1d:95:37:0a:5a:a0:1d:86:5b:6e:
                    8d:45:d0:98:d5:44:00:b9:ab:75:26:59:10:ce:49:
                    53:30:06:e1:b4:dc:94:9e:bb:f1:68:19:3b:06:b4:
                    a6:14:99:e1:2b:87:37:83:37:49:a7:fe:24:9f:be:
                    1b:65:27:d4:7f:a2:1b:9a:62:81:15:da:40:2f:3f:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:71:D5:4D:0B:EE:76:6A:30:97:E1:37:9D:1B:F0:CB:B2:ED:E5
            X509v3 Authority Key Identifier:
                keyid:63:89:93:B0:18:14:A9:51:CE:D1:B1:D9:93:C6:A0:7C:5C:CF:0F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/638993B01814A951CED1B1D993C6A07C5CCF0F85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/638993B01814A951CED1B1D993C6A07C5CCF0F85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/638993B01814A951CED1B1D993C6A07C5CCF0F85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:30:fa:ed:a4:12:0a:e2:ab:54:a6:97:7d:a0:4d:da:4c:d0:
         f0:a5:6d:bc:4c:d9:bb:bf:af:b2:9b:b2:1d:73:b7:ab:21:77:
         6e:98:8b:49:4c:f7:a0:3b:7b:00:e4:29:37:11:4e:54:82:eb:
         ad:8a:5f:25:97:6b:a9:d5:de:ca:1f:ce:f9:1e:66:d8:3b:3d:
         0e:4d:9a:36:8d:65:6a:01:06:e7:eb:75:66:6c:a2:93:3b:25:
         aa:a8:77:28:11:1d:15:4d:63:a8:03:7e:1e:c6:5d:10:27:26:
         67:d9:6e:d8:44:07:97:19:54:c8:d2:23:f3:2e:f3:a9:15:52:
         2f:0c:4f:96:29:14:79:95:64:5d:2c:fb:e2:95:af:89:14:ef:
         53:9c:f1:9e:66:ab:23:de:7c:b8:aa:e0:e5:3f:6b:73:40:7e:
         62:77:6c:ae:c7:8c:5f:f9:5b:dd:4e:43:b6:88:e5:d4:6c:24:
         03:e9:87:e7:65:14:04:da:0d:0e:d4:9c:92:e8:1c:d1:6f:5a:
         61:dc:aa:c5:ee:ff:60:4e:9f:d4:c5:48:75:a9:3f:55:a1:7d:
         75:c6:2c:0b:23:8f:d5:35:6a:73:3f:ce:53:62:3f:d4:bd:93:
         c9:61:d4:d5:ed:b3:91:a3:85:d0:e2:02:f0:c1:52:4e:5c:b2:
         43:22:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----