Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.mft
File:                     1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.mft (raw, json)
Hash identifier:          qQpKyCdp0aY2qTPXeCoYn2b41tVVF4fefMcnYWJOkXQ=
Subject key identifier:   89:2E:5A:70:27:5D:B3:90:D4:74:7F:97:35:8E:6C:3B:57:85:79:4E
Authority key identifier: 1C:F8:99:C8:37:4C:BD:37:7C:1C:6B:96:A6:7A:5D:4F:39:CA:C3:D1
Certificate issuer:       /CN=1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1
Certificate serial:       410BD4BA3D8161B9E59FA81A46324867D45735F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.mft
Manifest number:          BE
Signing time:             Sat 12 Aug 2023 02:41:22 +0000
Manifest this update:     Sat 12 Aug 2023 02:36:22 +0000
Manifest next update:     Sun 13 Aug 2023 03:55:22 +0000
Files and hashes:         1: 1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.crl (hash: RhO25TVFD5pSaSjhshnKUYeESmGVH3uywsRS2rq1Hqw=)
                          2: 323830343a316561343a3a2f33322d3334203d3e20323634343431.roa (hash: ZrdlpPd1NLzdGoQZAjrdYxiu0CT5Ezb5VYQI2A94vPs=)
                          3: 3133312e3232312e3234382e302f32322d3234203d3e20323634343431.roa (hash: pW8523jFXutyevMvNiPsP1ZOhUn7HtJxPr+P8SJSnf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0b:d4:ba:3d:81:61:b9:e5:9f:a8:1a:46:32:48:67:d4:57:35:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1
        Validity
            Not Before: Aug 12 02:36:22 2023 GMT
            Not After : Aug 13 03:55:22 2023 GMT
        Subject: CN=892E5A70275DB390D4747F97358E6C3B5785794E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:ec:3d:f8:d8:20:72:c2:b2:f6:58:d4:e1:
                    47:9c:3d:14:a4:dd:2e:a9:28:f2:ee:af:a3:c9:50:
                    55:62:14:69:08:bd:37:c6:30:c0:ad:ca:52:d2:86:
                    a0:7c:9e:76:d8:c4:db:80:75:34:21:4e:b2:d5:ff:
                    5e:f0:de:70:b7:d5:7a:50:cf:07:85:8b:ad:a9:64:
                    ef:3e:7f:e5:71:ba:80:56:80:5f:22:32:85:90:59:
                    b0:1c:c4:1a:08:3a:6c:3c:00:1c:df:ac:f1:10:05:
                    25:68:fd:cd:1e:3e:c3:4e:ef:60:25:7d:5d:d2:b8:
                    6b:9d:6b:d5:3f:0b:1a:9d:db:eb:1e:97:8f:3d:02:
                    78:1d:4b:8d:56:cf:ce:39:7a:ee:67:3f:eb:3b:94:
                    f0:a5:3c:e6:f8:5f:8d:8f:ff:de:b3:a6:1a:35:c7:
                    d8:42:5f:7c:65:b6:2f:10:62:54:0f:6b:33:a1:77:
                    cb:19:ce:50:8f:68:56:ac:e2:bb:ab:0c:f5:b5:05:
                    0b:80:6d:59:af:9b:17:9d:f3:36:21:e5:69:a7:c8:
                    b6:0e:f5:5f:ac:48:bd:ce:e3:b0:36:11:67:5f:2d:
                    65:4a:4a:92:e3:67:e5:4f:2d:15:70:03:e7:e1:60:
                    5e:db:58:80:f3:6f:71:63:2a:04:fe:0e:3e:0d:d9:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2E:5A:70:27:5D:B3:90:D4:74:7F:97:35:8E:6C:3B:57:85:79:4E
            X509v3 Authority Key Identifier:
                keyid:1C:F8:99:C8:37:4C:BD:37:7C:1C:6B:96:A6:7A:5D:4F:39:CA:C3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f4:df:86:38:40:38:53:7a:0a:a4:ff:a7:d5:99:b1:30:83:
         fe:76:ce:cd:a2:33:0b:f8:b4:93:af:bf:16:9b:9b:87:ab:42:
         c5:bd:0a:82:6c:7a:79:e7:83:a6:34:14:36:6b:b5:34:62:41:
         3d:54:91:9a:e4:00:c2:66:ab:af:0a:8a:86:f6:01:40:8c:92:
         b2:cb:87:7c:39:a1:41:d7:f8:b0:e6:61:2e:34:56:06:de:61:
         80:41:55:69:d5:57:09:84:10:af:6a:ad:d1:6b:a7:83:fc:ac:
         ac:5a:14:b7:a3:ff:69:41:d4:47:30:29:2b:0f:c4:69:b4:a2:
         64:9c:bf:3d:ca:d2:e4:c2:8f:e7:8e:7b:58:b1:f4:90:d1:9d:
         28:5f:f3:a0:3a:8c:42:48:56:e1:38:88:0c:22:16:97:34:a6:
         73:38:38:1d:90:d3:95:50:85:e1:b4:ec:c6:bc:61:6d:ab:41:
         24:6f:d5:5e:63:d5:bd:e3:76:9c:18:8e:83:7c:c3:f6:50:f3:
         7c:3c:64:14:19:48:4e:39:03:29:4b:a2:c3:bf:ab:a4:a4:91:
         5a:8c:61:79:6d:ab:a9:df:4e:c3:84:b6:e1:90:a8:0d:34:cc:
         64:b3:d9:46:21:5a:e3:31:49:04:69:78:34:b8:85:34:95:cf:
         22:6e:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----