Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.mft
File:                     04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.mft (raw, json)
Hash identifier:          FroUTgGTiHIruQc5bnrEUHtpFi7cjsQy41YvKL2LdbQ=
Subject key identifier:   82:2E:B0:EE:9D:80:1C:BB:CB:25:4C:C9:C0:6A:C0:BA:39:41:D0:F5
Authority key identifier: 04:F0:01:56:B4:C5:8E:25:C6:78:88:7B:EC:E6:D0:A7:D6:C5:E2:CA
Certificate issuer:       /CN=04F00156B4C58E25C678887BECE6D0A7D6C5E2CA
Certificate serial:       3593EBE2546CDAECF448379522A49247BCE47270
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.mft
Manifest number:          08
Signing time:             Tue 21 Nov 2023 06:39:04 +0000
Manifest this update:     Tue 21 Nov 2023 06:34:04 +0000
Manifest next update:     Wed 22 Nov 2023 09:48:04 +0000
Files and hashes:         1: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: 92yAufFHZ8UEvOpYJ+EV3EJX/1ZPc+CT/ZBDFjvE9zU=)
                          2: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: SFuXtplVRVmm09llY8IE9k+ICo+kQnpo679DUy5d5xg=)
                          3: 04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.crl (hash: gzwsPaiqPERtDXZ6MS4fgGXhGmBlFzDYEzgLKBpFdtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:93:eb:e2:54:6c:da:ec:f4:48:37:95:22:a4:92:47:bc:e4:72:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04F00156B4C58E25C678887BECE6D0A7D6C5E2CA
        Validity
            Not Before: Nov 21 06:34:04 2023 GMT
            Not After : Nov 22 09:48:04 2023 GMT
        Subject: CN=822EB0EE9D801CBBCB254CC9C06AC0BA3941D0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:53:c5:e9:2a:95:e4:75:73:89:38:a0:64:
                    f1:1b:af:f9:a7:0a:b2:8b:25:47:55:25:75:84:7b:
                    e6:66:30:0e:25:35:df:8c:a2:50:b3:af:29:df:a1:
                    d6:2d:e8:54:8b:6d:a9:85:46:31:b8:24:53:ec:ee:
                    85:95:2e:e4:78:5a:b3:e2:34:02:c5:48:4c:47:bd:
                    94:10:10:cf:2d:af:52:09:de:50:37:2c:79:87:1a:
                    c5:8a:90:45:ee:ab:94:74:48:54:3d:80:b9:2c:99:
                    e0:5b:fc:92:fa:bf:85:96:da:da:bf:76:b0:48:65:
                    76:f4:d1:3e:2a:dd:da:7d:36:a5:a9:08:c5:31:6a:
                    72:65:0b:f4:4d:8e:36:6a:f1:11:f9:62:a3:86:cf:
                    91:ef:ac:40:03:0f:ae:20:26:87:73:ea:e2:55:b8:
                    64:eb:dc:9d:b9:62:d3:fc:76:51:76:0a:d9:5d:7d:
                    01:e2:64:e0:b8:ff:bc:14:9b:79:97:90:02:28:01:
                    a9:10:a7:c1:9c:cf:87:4c:02:a9:f6:06:8a:e3:af:
                    af:28:22:e0:b1:05:81:3b:f7:15:0f:89:3a:a1:55:
                    91:0e:93:93:2c:03:84:31:35:06:f7:34:3a:70:d6:
                    17:d9:1f:0d:55:a3:21:45:ba:a1:f4:cb:49:4a:1a:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:B0:EE:9D:80:1C:BB:CB:25:4C:C9:C0:6A:C0:BA:39:41:D0:F5
            X509v3 Authority Key Identifier:
                keyid:04:F0:01:56:B4:C5:8E:25:C6:78:88:7B:EC:E6:D0:A7:D6:C5:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/04F00156B4C58E25C678887BECE6D0A7D6C5E2CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:a6:66:65:fd:52:97:95:54:eb:87:ec:5a:9b:18:96:2b:9f:
         22:26:5b:41:92:f4:bd:44:27:3f:c4:c7:04:a0:ec:47:3d:4f:
         de:9f:c1:02:66:f3:2c:4c:a6:17:02:c1:c9:5a:a9:8f:f2:e0:
         9f:ac:58:79:f3:19:52:42:d9:bd:87:2d:32:58:25:10:a4:76:
         ce:d2:dd:18:41:b8:05:58:fb:1a:72:92:36:5c:25:01:39:15:
         d7:f3:ce:74:58:1a:41:31:04:99:b8:8c:e2:42:50:bf:33:04:
         04:5c:a8:42:fb:5f:7c:0d:63:08:bd:e4:47:b5:dd:d1:17:c0:
         85:e8:be:ef:5e:2c:7f:12:5b:9b:ee:47:0a:e3:69:ee:b6:eb:
         d5:71:d3:66:0f:7f:88:ff:90:4b:4d:ab:3f:7b:74:d1:cc:5b:
         83:fc:5d:20:e1:37:98:66:a8:1a:79:f0:a1:e2:99:5a:d5:da:
         d5:d7:71:71:17:32:be:67:61:05:d4:fc:cc:35:38:d4:af:54:
         9a:29:38:7e:7b:f4:d2:a3:88:b6:83:dc:9a:c3:a4:01:bd:f6:
         4e:f7:c1:43:53:d4:03:96:b5:1a:7b:e7:b3:01:fa:f0:37:70:
         9a:b3:fc:c0:39:f6:a8:00:57:61:10:0e:a8:cd:45:b4:8a:69:
         09:3e:f5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----