Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.mft
File:                     B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.mft (raw, json)
Hash identifier:          jhZb6YWNrPV+nW/cXNZup+4GJjbK7HRAoY0z26sM2/Q=
Subject key identifier:   8E:29:96:E5:AA:D1:D0:0F:EF:39:6A:20:DB:61:F5:76:C2:98:9B:AC
Authority key identifier: B4:BD:B5:51:1B:5A:40:76:CB:2A:6E:FD:1B:3D:77:43:A3:88:BA:E9
Certificate issuer:       /CN=B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9
Certificate serial:       3B6B33D26828E5C5E5DA4A44243A9C0C0BF973B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.mft
Manifest number:          0A
Signing time:             Thu 20 Jul 2023 18:27:00 +0000
Manifest this update:     Thu 20 Jul 2023 18:22:00 +0000
Manifest next update:     Fri 21 Jul 2023 20:19:00 +0000
Files and hashes:         1: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: FdQ5MNbICRKbAiYrJJOhLgEG2nCiqopWtC4VcoMYEoE=)
                          2: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: YWI9QHv2dWV/LUAQ9D45RUpBIA6TEFGxHZ9nuCrQ2PQ=)
                          3: B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.crl (hash: OIlDhKmS3wTRr8v+MYPGSnImOs1T6bIfG8MnjcEH0Io=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6b:33:d2:68:28:e5:c5:e5:da:4a:44:24:3a:9c:0c:0b:f9:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9
        Validity
            Not Before: Jul 20 18:22:00 2023 GMT
            Not After : Jul 21 20:19:00 2023 GMT
        Subject: CN=8E2996E5AAD1D00FEF396A20DB61F576C2989BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:82:61:15:fa:8c:70:61:ff:54:35:da:75:
                    a3:ad:d1:83:83:64:59:bc:46:4c:80:23:51:e6:75:
                    f9:3e:c2:67:b9:eb:63:43:cf:ec:b9:c0:c9:ef:a9:
                    fb:64:63:f8:bd:b8:d2:1c:c7:25:52:a5:5e:60:1c:
                    dd:e1:90:ae:8d:00:c5:c6:07:46:f7:38:2e:bd:b2:
                    16:2d:c6:f1:cd:d1:fd:22:2c:71:19:bd:b6:cb:25:
                    74:02:f0:63:a3:f9:e3:55:5b:ba:d0:12:6e:58:3f:
                    12:d0:35:36:c3:4e:7e:19:f2:be:1a:38:04:01:f7:
                    5e:1f:c7:2a:93:99:c1:ef:b8:e9:fb:a5:1b:7e:c5:
                    95:5a:81:0c:90:a0:78:d7:f0:e4:07:4d:1f:43:b2:
                    c4:f6:5a:b7:03:21:33:69:4e:0a:5f:06:6d:e1:fb:
                    0e:7a:a7:e9:da:f2:84:0b:3d:b0:bb:d2:0f:e9:ea:
                    ad:69:0c:c2:fc:b2:6a:25:5b:c5:0b:59:d8:29:38:
                    fc:03:96:80:d2:64:f3:48:19:c8:e8:32:e4:4f:51:
                    ba:19:27:cb:77:b1:7b:34:95:d9:a8:70:b1:90:6b:
                    69:df:11:11:e1:cc:f2:cc:44:c1:bc:e1:5f:c8:e4:
                    09:cd:e7:fb:a9:55:44:28:b5:29:d5:69:47:fd:4e:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:29:96:E5:AA:D1:D0:0F:EF:39:6A:20:DB:61:F5:76:C2:98:9B:AC
            X509v3 Authority Key Identifier:
                keyid:B4:BD:B5:51:1B:5A:40:76:CB:2A:6E:FD:1B:3D:77:43:A3:88:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/B4BDB5511B5A4076CB2A6EFD1B3D7743A388BAE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:32:dc:b8:1f:32:35:ea:d5:88:13:8e:e6:28:88:1f:d1:
         4d:c1:54:83:1c:19:a3:fc:d4:89:81:22:0d:eb:a3:be:5a:0b:
         49:1e:b9:8c:ef:f5:7d:e8:c7:ac:02:e3:ec:95:2c:bd:a2:7a:
         ab:2b:d0:64:62:84:d2:62:22:58:ae:a3:e4:ff:db:7f:85:b3:
         91:49:15:5e:72:a6:83:77:3e:34:3a:d7:b6:2a:6d:b6:39:16:
         4f:eb:08:f8:a4:e1:4c:c9:33:d5:ef:2b:a6:bc:af:d3:96:71:
         06:58:61:14:e3:e4:49:14:e9:85:83:56:a4:55:2b:9e:b5:31:
         a8:97:7c:04:9a:16:2a:ad:ce:21:d9:09:e8:a2:f7:78:69:bf:
         03:20:99:27:64:e9:07:e2:30:d5:9d:91:8d:8b:fb:4f:b2:3e:
         6e:58:b2:bf:f4:54:e7:ad:f2:9c:82:d3:f7:1a:d4:50:4f:b7:
         cd:20:09:c2:3f:40:84:c7:1a:35:2f:a8:85:00:33:36:cc:a9:
         d8:2a:ba:d9:b9:67:ec:5a:59:65:63:f4:b9:3d:93:ff:4a:33:
         c5:61:21:4b:e7:b1:a8:b4:a8:74:3a:7c:ce:2d:74:20:68:63:
         eb:8b:b3:c5:4d:f2:b7:b0:2c:94:00:e4:c2:2a:d6:71:65:0b:
         b6:3f:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----