Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.mft
File:                     92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.mft (raw, json)
Hash identifier:          qTuNWlAD+0BxL2LsndOFIvtwXW0Dv6Py3KlKL/VBFOA=
Subject key identifier:   B1:55:D8:F8:1F:59:B8:4E:CA:22:24:CE:F9:29:AC:4B:D7:0E:85:97
Authority key identifier: 92:E5:B8:9C:7E:B2:62:98:94:30:4D:3B:6F:1C:A5:1C:11:EB:8E:A2
Certificate issuer:       /CN=92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2
Certificate serial:       2F50CE8D4CBDF2D48DD0078F691814B1C0AAF166
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.mft
Manifest number:          06
Signing time:             Sun 26 Feb 2023 18:42:06 +0000
Manifest this update:     Sun 26 Feb 2023 18:37:06 +0000
Manifest next update:     Mon 27 Feb 2023 19:58:06 +0000
Files and hashes:         1: 323830343a346131633a3a2f33322d3337203d3e20323637323139.roa (hash: RHh1+46fZEr4JOs5/NVNXK/w11W/9/aV/8Rh+rGAo1I=)
                          2: 34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa (hash: yrbTBh1KR7HFgxPKO3PW2wGl2VXoXMcytCeRvDvHiiU=)
                          3: 92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.crl (hash: XypJorZ7evhv8Q65vER+OSGpTRjVbfhyBdD2ZdqDlMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:ce:8d:4c:bd:f2:d4:8d:d0:07:8f:69:18:14:b1:c0:aa:f1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2
        Validity
            Not Before: Feb 26 18:37:06 2023 GMT
            Not After : Feb 27 19:58:06 2023 GMT
        Subject: CN=B155D8F81F59B84ECA2224CEF929AC4BD70E8597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:8a:6d:73:91:49:43:d5:34:9d:b0:59:12:
                    39:04:41:24:d5:ed:a2:15:43:ba:e6:95:42:9a:b2:
                    1a:92:ee:39:25:8c:3d:65:0a:73:c1:ce:f2:48:11:
                    53:46:44:7e:dd:7e:87:f4:74:8e:0d:30:b6:5e:aa:
                    c5:cb:0e:30:60:e3:29:01:52:2b:fd:d9:f9:33:3e:
                    ab:6d:80:b2:44:3e:77:2c:3c:b0:56:f9:64:f4:38:
                    4f:41:58:73:18:30:3a:24:9c:81:59:da:15:4f:6c:
                    32:6e:fb:58:a8:7f:b8:ed:13:76:7d:41:47:18:70:
                    10:44:dd:55:03:c3:50:72:50:d3:d3:2b:fc:c1:06:
                    a8:ae:11:4c:c0:4a:1d:c7:aa:d9:5f:60:de:c6:d6:
                    1b:5f:51:20:42:0f:2f:45:f5:cb:c7:93:01:75:54:
                    b9:8e:e7:44:8f:24:46:47:c2:eb:1c:21:b4:91:1d:
                    2c:82:bb:af:9a:bc:7e:70:26:fb:47:0b:88:ec:1d:
                    c0:a4:33:4f:f6:b5:6c:40:88:2f:47:15:cb:10:4a:
                    ab:ed:b5:37:f4:de:00:2e:be:ce:1d:4a:4e:81:7a:
                    d4:77:c4:08:39:a7:64:b3:65:a8:74:79:7f:3c:f2:
                    5e:80:17:7a:27:ca:4a:f0:de:7d:aa:23:79:91:c3:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:D8:F8:1F:59:B8:4E:CA:22:24:CE:F9:29:AC:4B:D7:0E:85:97
            X509v3 Authority Key Identifier:
                keyid:92:E5:B8:9C:7E:B2:62:98:94:30:4D:3B:6F:1C:A5:1C:11:EB:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/92E5B89C7EB2629894304D3B6F1CA51C11EB8EA2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:28:39:e6:8b:82:1d:09:31:79:6c:04:4a:1e:04:54:ba:
         a9:17:67:1b:92:ae:84:c6:48:7f:02:56:02:fd:98:62:aa:36:
         55:31:12:7b:f8:ae:89:7b:36:6c:58:13:3e:bb:c8:35:66:88:
         eb:d8:d3:ce:1d:d7:49:7b:50:88:b0:04:b0:3a:49:54:ce:a6:
         ad:27:95:7a:75:7a:17:50:67:a0:d9:86:2d:bd:ba:25:f1:b4:
         74:a2:90:43:6a:05:18:2e:58:03:db:05:ca:14:4a:da:36:9b:
         ca:a3:e8:cd:c1:d4:eb:1a:27:5b:3e:71:65:1b:0f:67:c5:5b:
         c6:e3:6c:9c:99:86:5c:14:ad:93:08:ad:e6:e4:9e:4b:0c:cb:
         3c:8c:da:10:a6:3b:87:d4:2e:79:d6:87:92:b0:24:3d:83:4a:
         b4:9a:a9:a5:6b:ff:ac:59:3f:79:43:0a:97:8e:12:5f:ca:d5:
         7f:23:74:10:dd:44:1c:e4:0e:bb:87:ee:7b:7b:76:bf:30:32:
         bd:3a:59:2a:6a:a9:46:af:96:b6:ea:55:b6:bd:4a:19:ef:3d:
         1b:53:2f:8a:82:52:a5:89:50:be:75:e7:da:f5:19:5e:82:be:
         0c:fc:a3:1c:5b:cd:92:79:82:cc:36:b2:b0:47:ad:39:2f:9d:
         f4:b8:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----