Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.mft
File:                     C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.mft (raw, json)
Hash identifier:          UbHw1+UQUNTDOVC74bUMFSw97LPlKjTD2Urw0ap8DM0=
Subject key identifier:   F4:43:21:88:F8:A1:41:84:B7:4A:50:F3:90:08:45:C4:8E:B8:8A:A3
Authority key identifier: C2:59:FF:7D:5E:9B:7C:75:72:06:8F:38:AB:6E:AA:70:10:5F:A2:9D
Certificate issuer:       /CN=C259FF7D5E9B7C7572068F38AB6EAA70105FA29D
Certificate serial:       78146F0CACB741EE7D62B61B91E13A078D8FF32A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.mft
Manifest number:          1D
Signing time:             Sat 18 Nov 2023 20:46:37 +0000
Manifest this update:     Sat 18 Nov 2023 20:41:37 +0000
Manifest next update:     Sun 19 Nov 2023 23:10:37 +0000
Files and hashes:         1: 3132382e3230312e3133362e302f32322d3234203d3e20323636363330.roa (hash: IzvLsoI5DhwCC0+hT7aOYFTuCNhcT62jlGz3B5V5Skk=)
                          2: C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.crl (hash: +vPFCDbB78hOh9fCUfoJrf4s90IUL/krl9rBLZy94qk=)
                          3: 323830343a336566303a3a2f33322d313238203d3e20323636363330.roa (hash: 2cQoJIoPgnmENAXOBx+Mk0ctBxC4/ax3P0mi4qFOzQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:14:6f:0c:ac:b7:41:ee:7d:62:b6:1b:91:e1:3a:07:8d:8f:f3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C259FF7D5E9B7C7572068F38AB6EAA70105FA29D
        Validity
            Not Before: Nov 18 20:41:37 2023 GMT
            Not After : Nov 19 23:10:37 2023 GMT
        Subject: CN=F4432188F8A14184B74A50F3900845C48EB88AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:4b:8a:da:09:6a:5d:bb:90:d2:2f:9d:ed:
                    24:81:c3:5c:60:50:91:4b:98:b0:09:d4:74:1a:ca:
                    c4:24:48:bb:23:cd:4d:4a:61:d3:ae:72:da:15:dc:
                    9e:6a:f9:6a:12:4d:b0:d6:70:9b:98:09:e3:a6:06:
                    04:76:8f:e5:06:1b:20:d0:e3:cf:12:9b:87:c3:b6:
                    e2:73:1a:aa:5a:dd:c9:0b:4f:59:3f:b1:8f:6f:d5:
                    ef:73:1c:39:71:93:e0:0e:de:17:d1:91:ad:f4:05:
                    39:24:2b:08:93:e7:d4:c7:f1:e7:a1:d8:ed:3d:6a:
                    4e:de:43:3f:89:88:ad:b5:49:f2:ad:99:81:96:b1:
                    75:ac:db:be:d5:10:53:46:14:70:fd:ee:70:0a:da:
                    24:46:8c:2f:1d:17:ad:2b:7f:8b:39:61:72:8d:cb:
                    9c:04:2f:f9:8d:4d:a3:c7:3a:fc:60:7b:22:25:7f:
                    e2:17:0d:4b:8a:1a:bf:a8:0d:76:1c:0a:fe:41:cc:
                    35:d1:4c:57:ea:95:04:ad:d3:e9:18:34:05:dc:9d:
                    b2:38:37:8c:0d:26:8a:77:58:fd:ec:93:11:10:90:
                    ad:05:97:d3:af:db:fd:67:f9:26:b1:b0:88:9a:7b:
                    c3:3b:40:a9:e7:44:8a:83:d6:c3:c5:d3:78:53:96:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:21:88:F8:A1:41:84:B7:4A:50:F3:90:08:45:C4:8E:B8:8A:A3
            X509v3 Authority Key Identifier:
                keyid:C2:59:FF:7D:5E:9B:7C:75:72:06:8F:38:AB:6E:AA:70:10:5F:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/1/C259FF7D5E9B7C7572068F38AB6EAA70105FA29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:c9:53:1e:15:60:95:dd:9b:16:5e:55:79:33:36:86:07:
         8d:1e:b8:dd:b7:79:8c:e5:5c:c6:3b:ce:42:a6:d6:9d:6a:29:
         36:3f:92:62:3f:62:44:f4:94:bf:a1:5f:cc:4d:34:40:dc:28:
         87:d5:fd:bc:24:02:67:8e:bd:d3:bb:90:06:2b:eb:36:8b:2e:
         20:d0:ee:60:94:e8:00:d9:96:48:5b:c1:23:7a:e9:1d:8c:39:
         a2:c3:4d:71:51:d4:ff:d4:d7:8e:5f:1e:79:d5:ec:67:25:72:
         63:c4:a1:04:f5:20:a8:00:d8:23:b2:70:d9:8b:ea:3c:6d:2e:
         a3:4b:86:e3:d0:f8:a0:a0:5b:d4:a6:0c:4f:48:e4:d8:64:ec:
         e1:68:c0:76:2a:57:61:67:6b:f6:ca:d8:62:e5:86:85:0f:33:
         de:13:fa:ae:27:ab:43:fa:be:9d:e2:44:52:36:93:77:99:93:
         30:61:10:4d:83:43:52:29:78:f1:88:28:d5:d2:f6:e4:db:d8:
         6e:ae:b7:b5:ed:1f:74:0c:02:d1:1c:d4:4d:2c:eb:a7:ff:08:
         3a:4b:58:29:07:9d:e2:77:ac:b3:06:95:ef:3b:83:b0:29:41:
         e5:42:76:79:1d:5f:8b:b6:14:88:d8:db:f5:2d:c7:08:1a:4d:
         1d:11:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----