Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.mft
File:                     851AE993A8C9FB95FFC90A307B454F18C398DCEA.mft (raw, json)
Hash identifier:          cWRwKUAvse1sV7oM7Vkbdt/ZjeXMVAk/1OjB2pxAVXw=
Subject key identifier:   D4:39:A2:22:47:93:F3:51:24:F7:84:F9:93:26:75:5A:03:D2:6C:0C
Authority key identifier: 85:1A:E9:93:A8:C9:FB:95:FF:C9:0A:30:7B:45:4F:18:C3:98:DC:EA
Certificate issuer:       /CN=851AE993A8C9FB95FFC90A307B454F18C398DCEA
Certificate serial:       2E01826135DDF83791E8CABA968106EDF521A2BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.mft
Manifest number:          0345
Signing time:             Tue 27 Jun 2023 14:01:08 +0000
Manifest this update:     Tue 27 Jun 2023 13:56:08 +0000
Manifest next update:     Wed 28 Jun 2023 15:01:08 +0000
Files and hashes:         1: 323830343a373961383a3a2f33322d3336203d3e20323731333139.roa (hash: npIJyMakCo0B8nto0lhVZ1ucwRkfoMkv5OkiCSt5BYM=)
                          2: 3137392e302e36382e302f32322d3234203d3e20323731333139.roa (hash: enBbej8dV4+2Y1NNIHo+7o9Mi/3VAnieFj5dt87AbjA=)
                          3: 851AE993A8C9FB95FFC90A307B454F18C398DCEA.crl (hash: kJvNBTLJDuezE1Hw6tdozLwZjLRE15ciN1qnqpbvco0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:01:82:61:35:dd:f8:37:91:e8:ca:ba:96:81:06:ed:f5:21:a2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851AE993A8C9FB95FFC90A307B454F18C398DCEA
        Validity
            Not Before: Jun 27 13:56:08 2023 GMT
            Not After : Jun 28 15:01:08 2023 GMT
        Subject: CN=D439A2224793F35124F784F99326755A03D26C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6a:75:b0:8b:ac:46:7f:f8:54:74:14:eb:fd:
                    3e:e4:51:88:0b:29:05:12:1a:23:d5:6a:07:fd:e6:
                    dc:c4:a3:8d:ba:0d:41:5c:9d:8b:c0:02:a1:73:1d:
                    f6:47:1f:e5:75:87:3c:b5:fc:d8:6e:b1:97:f2:db:
                    4c:11:34:0d:58:bb:b6:58:91:38:35:71:a8:f6:fb:
                    29:09:9a:16:93:af:76:a1:a1:ea:90:1b:ae:82:7f:
                    d1:9d:9e:7d:b1:01:09:a9:88:7f:1e:5d:03:13:63:
                    57:1b:a2:d8:ea:de:40:46:8c:bd:2e:53:00:91:9d:
                    80:82:80:ee:1c:db:84:b5:75:0a:d5:3d:0e:99:31:
                    8e:ca:90:d9:53:87:73:fd:c1:69:ae:3e:ce:fe:56:
                    ce:e8:58:c2:59:84:68:44:03:de:d5:c4:6d:a9:fc:
                    a2:0b:08:f4:10:87:75:8a:c0:51:fd:df:f8:6f:b1:
                    e6:b6:70:ef:9e:a4:fe:4a:94:68:9b:32:00:18:a9:
                    c3:17:c1:4a:94:64:f0:01:ea:d2:b3:4a:32:53:df:
                    ea:3e:7a:63:53:4f:20:7a:49:9b:12:ee:93:9f:66:
                    23:0d:fd:fe:25:e7:4e:50:6a:e6:94:08:47:02:a0:
                    4c:c9:a8:63:86:23:00:29:c0:15:8f:b4:2c:43:3e:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:A2:22:47:93:F3:51:24:F7:84:F9:93:26:75:5A:03:D2:6C:0C
            X509v3 Authority Key Identifier:
                keyid:85:1A:E9:93:A8:C9:FB:95:FF:C9:0A:30:7B:45:4F:18:C3:98:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:2f:8c:fc:7b:7b:b8:82:c1:07:1f:b4:b6:24:6e:b4:0c:
         4b:03:e4:bc:c6:2a:89:a6:36:39:9a:80:2d:a2:ec:9d:85:e0:
         72:ff:7f:4b:65:fa:2c:77:a4:c3:99:b2:bc:ca:01:ce:9a:ca:
         f3:87:7b:58:40:39:15:4f:e8:4f:65:fe:a0:79:c5:91:50:ce:
         a5:16:96:0b:5f:35:a5:c5:a4:c8:b0:70:06:c2:e6:32:1b:53:
         a8:d7:19:23:a6:75:03:bf:0c:f3:81:67:b7:48:fe:77:8c:dc:
         90:47:7f:1d:61:73:5e:04:1e:e7:05:df:48:82:33:d1:54:dc:
         3d:64:f5:30:1a:68:8f:3b:db:d9:1f:1b:cf:ad:4a:48:f1:a4:
         dc:94:4c:bf:06:08:ba:81:b9:72:33:f0:6d:8b:bb:96:83:7e:
         49:12:fc:49:9b:0d:18:33:d1:c6:fc:08:97:7a:81:2d:30:c6:
         68:33:99:be:bd:b7:aa:2c:a5:86:14:2a:b1:6b:73:0f:37:29:
         46:c6:24:00:a9:88:ce:c4:08:8e:df:27:90:58:8c:28:3d:20:
         7c:95:0c:5f:46:df:b5:47:c0:71:be:60:dd:ac:e2:0b:62:43:
         6f:45:fb:39:a0:78:b4:d9:b8:9c:64:77:35:34:e2:3a:a9:f6:
         ee:fb:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----