Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.mft
File:                     100D641D9246825DB5F200B9152379E6B866AE90.mft (raw, json)
Hash identifier:          FqGbW3EjG77+9LjqFxUGNhK/BvNHDKCkzov6v0eS3zs=
Subject key identifier:   F4:BC:42:B8:85:E5:B4:6F:43:2E:5B:65:DE:61:10:06:E1:8D:F9:9A
Authority key identifier: 10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90
Certificate issuer:       /CN=100D641D9246825DB5F200B9152379E6B866AE90
Certificate serial:       1B73C9AF9D10787AA21F99A609E2230CE07EDEAD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.mft
Manifest number:          010A
Signing time:             Wed 15 Nov 2023 02:21:33 +0000
Manifest this update:     Wed 15 Nov 2023 02:16:33 +0000
Manifest next update:     Thu 16 Nov 2023 04:10:33 +0000
Files and hashes:         1: 100D641D9246825DB5F200B9152379E6B866AE90.crl (hash: oEQNS6gfawU1bMo7EoyuvY+ZezzCiQWa6OCRvJKf5cw=)
                          2: 3136382e3232372e3131362e302f32322d3234203d3e20323634393130.roa (hash: aaEfSmTNkDIv323RXx3UCRoX+pwVEiRXhqTejRRcQb0=)
                          3: 323830343a326663303a3a2f33322d3338203d3e20323634393130.roa (hash: ji40Kz4jvfrrvRVRR+ltKnosPMVntwhHOMxqQ83YRhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:73:c9:af:9d:10:78:7a:a2:1f:99:a6:09:e2:23:0c:e0:7e:de:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100D641D9246825DB5F200B9152379E6B866AE90
        Validity
            Not Before: Nov 15 02:16:33 2023 GMT
            Not After : Nov 16 04:10:33 2023 GMT
        Subject: CN=F4BC42B885E5B46F432E5B65DE611006E18DF99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:7d:c9:1a:27:61:1b:d6:ca:e6:2e:53:9d:
                    80:16:1d:c6:5c:16:f9:a6:f9:09:80:f5:51:e4:59:
                    7e:f8:c3:34:a3:21:54:b7:a9:38:7d:7c:61:f8:f8:
                    b0:5d:1e:9c:63:cf:e3:57:1b:fe:0c:70:63:7c:ac:
                    bd:34:39:a1:57:0f:a4:71:c3:91:28:83:2f:e6:0f:
                    b6:ca:54:bb:8e:38:ff:f2:d0:4c:99:d5:b8:c3:56:
                    61:fe:84:e5:94:e1:6b:0f:aa:ee:1f:e3:54:9c:9a:
                    1b:de:29:d4:f8:1a:9c:34:8c:b7:a0:e1:40:76:91:
                    91:e8:44:65:cf:b5:43:56:19:a7:52:7a:af:e5:2e:
                    b1:bf:8f:e7:df:bc:a8:59:c3:cd:ac:24:ae:af:4d:
                    61:8d:45:0a:5f:b3:e6:90:e5:5d:18:09:4f:6b:f3:
                    16:ba:86:18:c6:a9:88:96:36:91:52:2e:95:37:eb:
                    1f:c7:ce:15:b8:19:d2:42:52:57:c0:f7:60:a2:cd:
                    df:34:2d:dc:6a:34:20:8a:8a:1a:4d:3d:8e:7f:98:
                    91:72:77:b9:dc:70:9f:3c:f6:cf:9e:2e:ba:ac:ff:
                    41:60:c0:4e:5d:2c:4a:5e:36:50:52:0c:de:96:d0:
                    73:a7:c7:ad:69:15:d6:01:8d:4e:31:32:30:3a:f0:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:42:B8:85:E5:B4:6F:43:2E:5B:65:DE:61:10:06:E1:8D:F9:9A
            X509v3 Authority Key Identifier:
                keyid:10:0D:64:1D:92:46:82:5D:B5:F2:00:B9:15:23:79:E6:B8:66:AE:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100D641D9246825DB5F200B9152379E6B866AE90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/100D641D9246825DB5F200B9152379E6B866AE90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2c:6c:d8:58:cf:60:dd:8f:4f:5b:5e:16:90:cc:0c:63:2c:
         33:54:ec:e2:3b:90:1b:01:20:cc:43:b4:54:75:1a:c9:bc:92:
         7b:c2:4c:de:11:92:fc:9a:78:e8:92:3b:81:e9:c0:ea:e4:cb:
         2a:f5:72:aa:93:c6:17:1b:d5:fd:4a:57:84:42:bc:df:9a:fd:
         de:3f:2b:52:9b:01:0d:34:fa:d3:ee:1f:72:42:41:b3:84:27:
         2e:77:9c:d4:06:95:e1:19:6d:9b:3a:7d:cc:4a:c9:c8:3b:a2:
         be:e2:ff:35:0f:b4:34:65:1d:f3:8b:0d:30:b2:93:16:2f:17:
         09:13:b4:e5:6f:39:05:61:92:e7:3e:db:21:3e:a2:40:5f:04:
         bc:80:6d:a4:2c:0a:d1:22:25:8e:24:e2:a4:96:e1:ae:ec:e8:
         f9:98:82:4c:c5:7d:e8:82:d1:90:51:4f:38:28:34:d0:b0:4d:
         37:9e:09:ff:d6:a2:34:d6:1a:ac:03:ea:11:7a:19:e5:dd:63:
         fd:30:ce:b8:76:9a:96:47:c0:1f:75:9b:01:77:f5:26:1b:99:
         e2:5f:ad:fe:9d:87:9b:13:63:f1:5a:db:ab:52:ab:c9:a2:38:
         9f:2e:65:3c:da:35:52:04:52:fb:67:91:9f:a4:92:74:5a:52:
         0c:ca:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----