Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.mft
File:                     81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.mft (raw, json)
Hash identifier:          9jxPXsvVlAuHjLT8iBS+BbOX51NTAUpPyvUhvxMMq8o=
Subject key identifier:   47:AD:75:E5:B2:E5:FA:99:A1:88:E6:5B:AD:E5:75:8C:DE:1B:B7:BA
Authority key identifier: 81:EA:4D:EB:DE:47:7A:E5:74:A0:8F:AF:AE:7B:97:A4:21:0D:F8:CF
Certificate issuer:       /CN=81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF
Certificate serial:       7C4ACDF1C9F7152DF8F6DB86902CC73F4E6373AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.mft
Manifest number:          95
Signing time:             Fri 10 Mar 2023 07:36:49 +0000
Manifest this update:     Fri 10 Mar 2023 07:31:49 +0000
Manifest next update:     Sat 11 Mar 2023 09:36:49 +0000
Files and hashes:         1: 323830343a373937303a3a2f33322d3438203d3e20323731333035.roa (hash: nPgpOzPWunJffbqFb+Jf8nybl10zKrMcN16YelW92us=)
                          2: 81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.crl (hash: xwZxI2SQtk/Flc249yzxoSCVuFzaGkB4Gkf0ggsWZ/g=)
                          3: 3137372e3132342e38302e302f32322d3234203d3e20323731333035.roa (hash: vURYAAiqzh8UEda5cA+SbRJvgOgor5hgLSn9C7i567s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4a:cd:f1:c9:f7:15:2d:f8:f6:db:86:90:2c:c7:3f:4e:63:73:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF
        Validity
            Not Before: Mar 10 07:31:49 2023 GMT
            Not After : Mar 11 09:36:49 2023 GMT
        Subject: CN=47AD75E5B2E5FA99A188E65BADE5758CDE1BB7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:80:d5:30:d7:28:1c:8e:db:3c:c1:77:67:d5:
                    6a:c2:5e:76:4d:e7:22:7f:38:af:91:4c:27:7d:47:
                    7b:c9:5c:e1:97:61:fb:1e:ad:d7:81:e0:94:f1:f0:
                    14:e2:3a:a9:6b:a8:cc:70:0e:e3:0c:a2:1b:ba:7e:
                    aa:c6:e0:c0:94:42:07:91:f4:fa:ab:5d:60:bf:9e:
                    cd:74:d5:65:5c:52:b0:46:aa:b7:da:6d:3e:00:bf:
                    70:d8:f4:90:04:80:1f:ff:ff:47:5f:c6:68:ce:e3:
                    17:4a:9b:8b:f2:42:fd:b4:a7:44:0d:72:86:1a:c3:
                    ec:42:c4:48:f1:ba:c9:69:1c:e2:88:02:a4:cd:16:
                    59:7b:a1:6a:ba:ed:2a:02:35:59:06:f5:c8:70:36:
                    f5:e2:89:28:30:f9:95:06:8a:aa:66:05:6e:21:db:
                    13:e9:cd:dd:13:66:45:21:be:08:0d:ac:eb:6e:bd:
                    56:6f:75:e9:a3:87:ba:45:ea:30:a0:f6:29:fe:14:
                    5d:b4:42:20:be:91:73:71:a3:e1:e1:cb:ac:73:97:
                    86:9b:04:ea:6e:da:41:9f:70:73:7b:1d:a8:c8:88:
                    d9:d8:c3:37:d3:93:37:05:35:93:c7:6e:2a:45:c0:
                    34:63:f2:b5:4d:f5:26:7f:4c:b8:f9:ae:67:01:86:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:75:E5:B2:E5:FA:99:A1:88:E6:5B:AD:E5:75:8C:DE:1B:B7:BA
            X509v3 Authority Key Identifier:
                keyid:81:EA:4D:EB:DE:47:7A:E5:74:A0:8F:AF:AE:7B:97:A4:21:0D:F8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/81EA4DEBDE477AE574A08FAFAE7B97A4210DF8CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:56:df:78:4b:ce:a9:16:3c:1a:4d:72:15:8c:2e:7f:88:fb:
         5d:cb:21:9e:77:b1:ee:e1:9c:d4:38:f0:5a:43:3a:a5:21:05:
         28:18:38:3b:94:c3:6e:45:43:e9:3c:09:4f:23:06:11:3f:aa:
         04:68:ea:05:73:61:5e:39:49:10:a4:c1:59:a4:66:90:71:7d:
         ae:ad:0b:c3:8d:9a:9c:75:68:1a:2e:aa:09:9e:ae:dc:d5:5a:
         cb:fc:ce:b9:d5:10:4e:87:1a:7e:bd:87:13:35:38:53:2b:7b:
         42:cf:88:eb:59:62:aa:54:ad:d1:fe:0a:ca:0c:4f:3e:bb:4b:
         1e:25:b8:b1:bc:4b:2c:27:cb:16:80:96:98:76:f5:9e:bc:14:
         f2:86:0c:18:17:cf:47:e2:1a:d2:7c:32:0e:20:e4:6b:f5:f7:
         05:2e:f1:9c:7b:8f:26:b3:93:92:c2:41:e9:5c:c2:ea:2a:19:
         b6:d7:d5:e1:74:b4:0e:40:40:3a:dd:82:d3:63:49:63:16:f5:
         92:f9:44:70:cb:3a:24:01:c2:f3:66:df:4e:ca:16:85:5e:fa:
         01:5d:fb:7f:5d:a7:74:f9:d3:05:40:cf:99:3e:2b:14:89:52:
         99:78:55:b6:07:8d:09:e7:34:ca:2e:5e:11:ea:b4:de:f5:4a:
         42:ba:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----