Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.mft
File:                     6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.mft (raw, json)
Hash identifier:          +HLkEvzGWJrYwNo5I7uhwIvAuHjyAEf41Mj+OrSNROg=
Subject key identifier:   46:B7:88:57:BB:F5:68:CA:5E:F6:24:AC:83:E4:90:76:62:C9:2A:5F
Authority key identifier: 6A:0C:CC:41:E6:02:C8:6A:6E:BA:1E:A8:BD:08:E6:18:F2:2B:F5:CE
Certificate issuer:       /CN=6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE
Certificate serial:       1AF0544F2AD0F309BEA083F30965A48503CC8305
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.mft
Manifest number:          04CA
Signing time:             Sun 16 Jul 2023 22:34:44 +0000
Manifest this update:     Sun 16 Jul 2023 22:29:44 +0000
Manifest next update:     Tue 18 Jul 2023 02:03:44 +0000
Files and hashes:         1: 323830343a343466303a3a2f33322d3438203d3e20323637363632.roa (hash: 4VCF3CGICSX0JMPAXtm6VQ5L4zD0MLXfqxXIrBWwZg0=)
                          2: 34352e3232342e3136342e302f32322d3234203d3e20323637363632.roa (hash: Kf1rsMuT90il1dgp515Jryfv7Y42KTqJG6GZIgdr3sg=)
                          3: 6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.crl (hash: KhHa5uhpyVCHDUOT4mf4TiB+BSNRu11JVu9J5F9wOAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:54:4f:2a:d0:f3:09:be:a0:83:f3:09:65:a4:85:03:cc:83:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE
        Validity
            Not Before: Jul 16 22:29:44 2023 GMT
            Not After : Jul 18 02:03:44 2023 GMT
        Subject: CN=46B78857BBF568CA5EF624AC83E4907662C92A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:c5:f4:74:b1:56:6c:cc:79:37:bd:fa:13:
                    5a:93:36:6b:fc:2c:ea:55:5f:2a:26:27:7a:df:50:
                    c3:e1:b0:eb:b5:c0:53:a1:92:8c:ee:4c:91:3e:cd:
                    fe:87:45:64:ad:d6:4e:03:11:a0:6b:05:da:1d:be:
                    30:01:4c:ab:3d:96:e6:6a:68:a1:4b:32:a5:ec:5b:
                    10:ef:a2:43:66:58:40:be:8b:75:8c:29:ed:5d:9f:
                    34:12:6c:6d:40:18:df:36:b6:96:9d:69:72:4c:c7:
                    70:d6:10:a8:43:81:a0:f0:51:07:b6:43:42:45:c3:
                    a7:f2:64:b7:67:66:b4:be:b8:d2:a9:8b:0c:8e:ea:
                    ab:35:58:46:c7:af:7f:82:61:c0:df:00:74:b5:d3:
                    2a:30:d0:65:7d:dd:9d:93:ca:8d:de:ff:19:c4:d6:
                    1c:e4:ca:6f:ec:67:81:bd:6f:6d:45:69:8a:1b:5d:
                    9e:17:23:08:c0:61:dc:14:b4:91:a5:bb:05:29:7f:
                    9e:3f:c2:21:2e:0e:46:c8:6c:a1:56:f0:77:7a:ee:
                    aa:59:f8:63:3a:15:bf:91:ab:9f:34:46:b6:ef:b6:
                    92:b7:07:5e:04:6d:9c:d6:8a:50:f3:26:ad:a7:c8:
                    b0:13:ea:e4:a3:70:8f:a5:a1:b4:61:24:63:8e:56:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:88:57:BB:F5:68:CA:5E:F6:24:AC:83:E4:90:76:62:C9:2A:5F
            X509v3 Authority Key Identifier:
                keyid:6A:0C:CC:41:E6:02:C8:6A:6E:BA:1E:A8:BD:08:E6:18:F2:2B:F5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/6A0CCC41E602C86A6EBA1EA8BD08E618F22BF5CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:cc:37:6e:e1:9e:b0:42:80:f1:8f:0e:bb:79:fe:c5:31:
         14:58:3c:96:39:e1:9b:09:55:cd:f4:9c:89:49:47:36:5e:7a:
         e5:7a:14:65:ce:90:ab:f6:16:42:e5:fa:ce:d8:c3:bd:49:4c:
         1e:0d:c3:a2:45:16:a5:35:f5:e5:4c:fc:d6:cb:8f:0f:2f:c7:
         e8:78:6d:c5:73:16:04:41:bd:ae:b7:bf:ce:51:13:22:e5:27:
         cb:e2:46:be:ab:c8:9b:a2:0a:ca:4b:8c:17:16:df:3b:f5:1d:
         e0:62:d5:3e:96:9e:b8:d2:09:53:cb:e0:18:01:19:ee:3f:6a:
         f6:3d:e7:05:55:75:a2:4b:f1:78:17:e9:d1:99:eb:ae:6b:ad:
         85:7c:9f:1e:68:e0:9a:7a:6d:0c:c9:cd:71:24:63:65:6e:f5:
         d1:56:d9:37:1e:76:0a:2b:61:0c:06:8b:94:76:04:df:1d:e7:
         08:d4:8f:6b:05:9d:80:c4:0d:d2:7a:ab:1d:ab:1c:96:62:05:
         15:bf:0b:d1:7f:49:11:a6:d7:29:28:ab:86:ec:37:ed:41:32:
         37:85:88:b7:e9:d7:4b:14:c9:43:d8:90:92:89:bb:b1:1a:f7:
         4a:70:cf:41:9a:1d:57:a3:90:fc:80:2a:71:b9:d2:66:10:f2:
         42:b5:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----