Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.mft
File:                     CF86A656A890F8E1243ABE2030F880B7CE08C91F.mft (raw, json)
Hash identifier:          0C2Hkzgquw5A91m6tvnfHFRLQsKrUZhfNmx20WKOxRs=
Subject key identifier:   80:AE:70:31:74:24:77:DC:25:01:B1:49:CE:CD:BC:81:2D:5E:29:54
Authority key identifier: CF:86:A6:56:A8:90:F8:E1:24:3A:BE:20:30:F8:80:B7:CE:08:C9:1F
Certificate issuer:       /CN=CF86A656A890F8E1243ABE2030F880B7CE08C91F
Certificate serial:       5C660BF6E514E2C35D4909B32E13D96FD2C63C1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.mft
Manifest number:          28
Signing time:             Fri 17 Nov 2023 14:29:46 +0000
Manifest this update:     Fri 17 Nov 2023 14:24:46 +0000
Manifest next update:     Sat 18 Nov 2023 16:39:46 +0000
Files and hashes:         1: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: 1eda6DCkjE3lt0Y/RT6vdekI/ARNz/1De9riEahD5O0=)
                          2: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: g/AHALa2HRR03j7r77gcDEaOU6y3r4GGBueTIyKoM+w=)
                          3: CF86A656A890F8E1243ABE2030F880B7CE08C91F.crl (hash: FYpoRgqn5Mj2813grEpW56OjTUdthMQO3sIA+Vn3+9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:66:0b:f6:e5:14:e2:c3:5d:49:09:b3:2e:13:d9:6f:d2:c6:3c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF86A656A890F8E1243ABE2030F880B7CE08C91F
        Validity
            Not Before: Nov 17 14:24:46 2023 GMT
            Not After : Nov 18 16:39:46 2023 GMT
        Subject: CN=80AE7031742477DC2501B149CECDBC812D5E2954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:ef:8e:34:00:d8:8e:3a:c5:22:0b:64:02:
                    38:f7:86:4c:f1:d0:75:2e:eb:c8:34:c0:b9:b0:6e:
                    61:3a:d8:eb:bb:92:4d:86:6d:90:4d:c4:90:b5:0b:
                    31:5d:17:38:08:3e:5e:f9:07:53:15:1f:34:f8:b5:
                    7f:1f:ed:86:cb:16:62:8c:d8:09:bb:bc:c0:02:8c:
                    18:91:25:e1:10:f8:10:f0:cd:b3:b2:ac:05:ef:08:
                    74:7b:0d:6e:ac:f7:c7:ac:2d:e2:d7:dc:fe:77:79:
                    16:45:55:4e:cd:ac:58:e6:21:c7:c7:dc:27:07:05:
                    2a:5b:b8:37:61:5e:c3:1d:96:21:fc:80:b5:8c:02:
                    e7:28:43:23:d7:5e:7b:40:aa:c8:4f:a8:8b:a9:bb:
                    7e:a3:11:14:1e:c3:6c:3d:8f:60:dd:fa:23:8a:12:
                    b0:7b:5b:03:ca:ed:83:be:6a:17:5d:dd:2e:53:58:
                    cb:66:04:4b:51:eb:a2:ff:69:ad:17:23:f2:9a:47:
                    37:c7:25:fc:a8:ab:7e:61:c8:2e:cd:2a:65:cd:78:
                    44:3f:65:56:93:86:3b:d3:cb:a4:cd:a7:53:d7:18:
                    90:34:5f:8e:06:3e:d5:4e:6c:7c:cb:b4:cf:bd:bd:
                    ce:69:04:5f:67:cf:3b:b7:aa:91:1f:06:f0:e6:ab:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AE:70:31:74:24:77:DC:25:01:B1:49:CE:CD:BC:81:2D:5E:29:54
            X509v3 Authority Key Identifier:
                keyid:CF:86:A6:56:A8:90:F8:E1:24:3A:BE:20:30:F8:80:B7:CE:08:C9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/CF86A656A890F8E1243ABE2030F880B7CE08C91F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:26:a2:c1:c6:b1:72:4a:20:41:53:f5:5d:56:a5:b8:7c:
         a2:c6:bd:53:78:72:af:7c:49:12:80:45:f0:08:af:0b:1c:39:
         b6:c2:28:d4:47:0d:df:db:3b:2b:b0:bd:42:e2:3c:5f:e8:b5:
         b5:34:2a:58:5e:c4:56:0d:42:e6:5d:97:d2:92:a8:e5:8b:e9:
         ae:90:4f:6f:68:b6:53:de:7e:5f:56:23:ef:6c:42:c2:a0:25:
         27:c6:a2:90:f0:f8:41:83:d2:05:94:8d:f6:0e:ca:87:df:5d:
         6c:01:12:af:0d:46:f0:e7:c4:40:eb:d4:1d:5e:1f:ec:bc:c8:
         e6:73:35:fe:9d:1c:ca:17:ee:b6:22:a3:ac:8a:81:b7:0d:ba:
         00:02:1a:d9:46:44:0e:1f:62:45:61:43:7c:61:e2:79:3d:5f:
         c7:24:d5:d6:39:d0:c9:57:31:02:71:0d:f4:15:49:3a:1f:7d:
         61:0d:16:0b:40:bc:47:f2:d0:10:5b:d9:b8:6e:1a:75:f0:7c:
         0a:83:34:23:99:cc:50:69:65:85:43:dd:c9:20:59:e3:54:d0:
         dc:05:00:52:a4:33:c8:fe:fd:64:3a:ef:ed:69:a3:4e:be:8f:
         01:01:bd:02:3b:c8:8c:a3:09:38:df:75:a6:a2:3c:23:68:09:
         72:f5:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----