Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.mft
File:                     8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.mft (raw, json)
Hash identifier:          BS8t63qnp2Z+8OETyM4ZNELACTZp0JJzWuYfnD+YgU4=
Subject key identifier:   57:BF:53:C6:2D:42:9D:87:C3:50:B4:E9:DB:95:01:31:F3:AA:B9:99
Authority key identifier: 8B:79:AA:6F:D6:32:DE:CA:56:BC:F4:02:EC:CF:E6:04:A7:D6:F1:D6
Certificate issuer:       /CN=8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6
Certificate serial:       5707D7871C01181EBB4300E0449322373B8286
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.mft
Manifest number:          04
Signing time:             Sun 10 Apr 2022 09:20:00 +0000
Manifest this update:     Sun 10 Apr 2022 09:15:00 +0000
Manifest next update:     Mon 11 Apr 2022 10:04:00 +0000
Files and hashes:         1: 8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.crl (hash: kwFB/5/nzosa9a8GDry1S9MsnfefrndBJm+RwgiqkuA=)
                          2: 3137392e39372e33322e302f32302d3234203d3e20323632373430.roa (hash: Assmak9hMCZWMsRsoCAbXRAcmfY+uAVPvwKRw9yLosU=)
                          3: 3138362e3230382e36342e302f32302d3234203d3e20323632373430.roa (hash: ccBr6ZcvyFAzSy+N8UjOH5hHcj0UvIJzph4Ltqld+VU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:07:d7:87:1c:01:18:1e:bb:43:00:e0:44:93:22:37:3b:82:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6
        Validity
            Not Before: Apr 10 09:15:00 2022 GMT
            Not After : Apr 11 10:04:00 2022 GMT
        Subject: CN=57BF53C62D429D87C350B4E9DB950131F3AAB999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:21:66:28:48:2f:49:eb:60:fe:71:75:50:
                    23:5f:cd:5f:c0:1e:fd:7e:ff:7c:1f:34:f3:2c:b0:
                    72:28:6a:66:32:ca:6e:df:cf:01:2d:f3:b3:cc:e9:
                    a4:e1:e3:cd:1b:93:4c:66:4b:24:ba:8c:31:4b:18:
                    17:c1:94:68:3a:02:95:86:93:db:59:33:35:a6:44:
                    eb:e8:f1:58:03:23:8b:0d:ff:02:c3:5a:b0:07:69:
                    eb:04:96:01:c1:02:66:fd:35:e5:fd:7b:b7:b0:c6:
                    f7:e0:fc:b3:10:6c:eb:52:f1:d3:1d:46:56:2e:4b:
                    90:1e:93:6a:e5:ae:9a:8b:4b:17:6f:9c:54:c0:e0:
                    29:62:58:c9:a8:da:0b:3b:ba:6e:4a:ec:34:07:cf:
                    ac:4f:58:ab:39:96:75:95:2e:28:ba:39:93:53:cb:
                    ab:b4:c5:75:bc:bc:71:d2:1b:60:cc:db:51:bd:be:
                    28:0e:e5:e8:e7:53:28:1f:85:09:d4:41:51:9b:a8:
                    cf:51:b2:29:2d:ea:df:60:f9:61:8a:2f:8f:a3:7f:
                    d6:a7:e6:83:ff:86:05:0e:a4:9c:df:35:bb:73:94:
                    b5:96:95:c0:c0:cb:7e:a4:a8:46:6d:7e:72:48:1f:
                    07:5b:46:9f:32:34:2d:6b:76:55:94:94:66:92:33:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:53:C6:2D:42:9D:87:C3:50:B4:E9:DB:95:01:31:F3:AA:B9:99
            X509v3 Authority Key Identifier:
                keyid:8B:79:AA:6F:D6:32:DE:CA:56:BC:F4:02:EC:CF:E6:04:A7:D6:F1:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/8B79AA6FD632DECA56BCF402ECCFE604A7D6F1D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:32:7a:bc:d4:e6:11:32:76:41:38:27:93:f5:e7:cd:1f:62:
         69:a5:1d:f8:b7:2b:ea:6d:dc:10:63:54:a7:54:04:40:3f:04:
         d3:22:71:cb:cb:0f:95:2d:61:be:ac:ab:b6:81:b3:f6:b0:78:
         e6:eb:3e:5b:40:d5:f5:0b:f1:35:f1:95:00:61:3a:5b:8e:f4:
         dd:ea:8d:ad:fc:9a:e3:46:4a:84:72:a9:8d:aa:9b:43:a3:b1:
         ee:07:97:0f:fb:2f:91:c7:6c:24:97:a7:8c:9f:54:84:b6:af:
         28:95:b7:00:da:30:52:a7:8f:78:6f:5e:b8:06:f5:ed:2a:7c:
         1c:06:7a:62:1f:91:af:e8:8c:88:49:c9:7e:fa:77:72:dd:d8:
         be:36:d7:96:8c:52:43:df:41:bd:52:57:a8:96:ce:f5:cd:f9:
         10:48:62:9b:40:3f:8b:63:c5:c5:75:9d:a7:1e:35:b7:bd:0e:
         de:da:55:c3:c6:22:0b:97:97:b6:cf:55:c5:74:29:cb:db:33:
         44:48:f0:f6:d2:97:05:08:1b:ed:3c:e1:e8:3a:d7:59:09:4b:
         87:67:39:ba:92:53:4e:6c:f1:f0:cb:0c:f9:1e:21:9e:8c:7d:
         95:57:69:3e:6b:6c:34:4e:df:41:a3:52:67:e1:d3:17:57:ec:
         b6:16:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----