Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/190AEE00552D0ADD23FC4427B61219E3AC7AF85E.mft
File:                     190AEE00552D0ADD23FC4427B61219E3AC7AF85E.mft (raw, json)
Hash identifier:          dYZLv3SXvGkjQvq7IBs4uv69USL2gxwGrIzSa9ctyWU=
Subject key identifier:   73:79:B0:18:3B:21:30:2E:09:9B:C2:86:E1:C3:00:B9:20:D7:5A:F7
Authority key identifier: 19:0A:EE:00:55:2D:0A:DD:23:FC:44:27:B6:12:19:E3:AC:7A:F8:5E
Certificate issuer:       /CN=190AEE00552D0ADD23FC4427B61219E3AC7AF85E
Certificate serial:       277C8862D03BB16BE7EE1D449A6C279318CC5D82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/190AEE00552D0ADD23FC4427B61219E3AC7AF85E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/190AEE00552D0ADD23FC4427B61219E3AC7AF85E.mft
Manifest number:          09
Signing time:             Sun 27 Aug 2023 09:21:16 +0000
Manifest this update:     Sun 27 Aug 2023 09:16:16 +0000
Manifest next update:     Mon 28 Aug 2023 12:05:16 +0000
Files and hashes:         1: 3133382e3230342e3232342e302f32322d3234203d3e20323633393135.roa (hash: uQ1Af4C0/or6TXuJYkdqMn1mPSIznSZGOsCo4Itnvw4=)
                          2: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (hash: n0QEioH7PzTb94hOBDrkM/fO3G+JYbtcGB3tx3ChuJs=)
                          3: 190AEE00552D0ADD23FC4427B61219E3AC7AF85E.crl (hash: UhtLmowQHY/4RcO8q3+3lP/s7SUu73a/F5fe6PUp/XY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7c:88:62:d0:3b:b1:6b:e7:ee:1d:44:9a:6c:27:93:18:cc:5d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190AEE00552D0ADD23FC4427B61219E3AC7AF85E
        Validity
            Not Before: Aug 27 09:16:16 2023 GMT
            Not After : Aug 28 12:05:16 2023 GMT
        Subject: CN=7379B0183B21302E099BC286E1C300B920D75AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:0a:45:36:b2:10:97:82:86:c0:03:e1:8b:
                    e7:22:a2:65:66:61:72:0a:4f:5c:4b:59:bf:a5:bd:
                    03:40:3e:d7:0f:fa:6f:f6:fd:b9:03:6a:f3:5f:66:
                    e9:40:31:47:40:cc:e4:00:d4:45:24:0e:ce:c9:ec:
                    fe:fd:5d:bc:75:7d:4f:88:73:fe:f6:ac:6a:e2:8a:
                    23:0e:86:e4:cb:0b:97:09:a8:74:51:83:fc:09:31:
                    88:2e:90:88:02:3b:68:75:09:9f:18:93:aa:a3:3a:
                    62:b8:f7:04:b6:f5:62:35:a0:28:8c:89:49:04:5a:
                    1e:24:f8:e0:70:4d:49:92:36:7f:96:87:a2:96:cb:
                    17:67:7b:86:f3:d1:6e:f0:86:f2:38:87:f0:3f:8f:
                    a4:52:cb:8e:a6:41:aa:e9:79:2f:4f:9c:d0:11:1e:
                    db:d8:0f:43:ac:6c:41:4a:dd:6c:bc:79:d9:ca:0b:
                    c9:0f:37:55:b7:7c:82:af:da:b1:0f:c8:c9:10:e2:
                    d2:11:cc:49:3f:d9:65:95:b2:d7:03:7a:4d:06:40:
                    f5:3d:ba:bd:dc:69:46:60:47:09:ad:e5:84:e8:47:
                    5d:3e:ec:c6:e2:5a:34:50:7e:dc:10:e6:95:e5:7d:
                    ea:7c:65:0c:4c:32:d3:49:a5:47:7e:9b:be:46:04:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:B0:18:3B:21:30:2E:09:9B:C2:86:E1:C3:00:B9:20:D7:5A:F7
            X509v3 Authority Key Identifier:
                keyid:19:0A:EE:00:55:2D:0A:DD:23:FC:44:27:B6:12:19:E3:AC:7A:F8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/190AEE00552D0ADD23FC4427B61219E3AC7AF85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/190AEE00552D0ADD23FC4427B61219E3AC7AF85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/190AEE00552D0ADD23FC4427B61219E3AC7AF85E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:45:4d:5b:42:04:ff:98:db:2c:8e:63:ce:23:3a:84:c6:6c:
         84:63:56:b4:58:ab:9d:9f:0a:6b:d6:89:60:80:73:f1:9e:f5:
         2a:17:4c:e3:a8:ad:ae:80:c9:2e:e3:50:37:af:1f:4a:ef:d3:
         64:9d:07:0f:39:00:db:b2:bb:a7:4c:e4:15:73:ce:1e:5a:5d:
         ef:da:5f:83:04:ac:99:c3:d0:17:b8:7a:3b:50:56:43:63:ef:
         72:51:18:ef:28:78:1d:b2:af:0f:74:42:b0:c9:c3:cc:76:9d:
         7d:30:64:38:65:28:60:33:2d:94:14:61:d3:d4:ee:6e:07:6c:
         cd:eb:ef:6f:46:c2:7f:c4:03:00:27:c7:1e:a8:ad:15:7f:66:
         a5:c7:73:0e:58:f1:53:e0:23:65:68:27:25:77:e9:16:d9:2d:
         88:7a:62:1c:57:9b:c2:1a:56:bd:38:f2:6f:e7:79:ad:bc:37:
         d9:84:24:85:eb:0d:59:65:0f:49:d8:16:76:7c:cf:6b:ea:6a:
         52:b6:87:a6:f8:7c:ea:20:9a:41:7d:a9:fa:da:43:d9:2f:29:
         59:7e:48:a0:26:dd:67:65:d1:ba:52:01:ae:87:f0:be:c6:d7:
         b2:95:0e:a5:ed:e3:a7:58:e2:43:0f:97:34:78:d6:10:3e:77:
         33:72:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----