Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.mft
File:                     6CB4B945583C5E88991A6EDB9EFD250C14979DA5.mft (raw, json)
Hash identifier:          FL/rg1HUI4eHUNDfhTpgwza2i+BOiHx5vcuxJdQJtH4=
Subject key identifier:   6E:22:C3:E4:40:A8:5C:03:D2:A3:62:63:D2:10:5B:BE:3F:07:71:B3
Authority key identifier: 6C:B4:B9:45:58:3C:5E:88:99:1A:6E:DB:9E:FD:25:0C:14:97:9D:A5
Certificate issuer:       /CN=6CB4B945583C5E88991A6EDB9EFD250C14979DA5
Certificate serial:       4512327E5FAD46E2033C6A05DFB3C06D47078243
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.mft
Manifest number:          28
Signing time:             Tue 21 Feb 2023 14:25:05 +0000
Manifest this update:     Tue 21 Feb 2023 14:20:05 +0000
Manifest next update:     Wed 22 Feb 2023 16:39:05 +0000
Files and hashes:         1: 323830343a333734383a3a2f33322d3332203d3e20323636343031.roa (hash: VUe9UB4l6kEnY1DMDszjBvPOlVzC3qfsMHEmv+x6Guc=)
                          2: 3137302e38312e36302e302f32322d3332203d3e20323636343031.roa (hash: NlmIQr/fG6MFLynxbyMG9Mtm6JXTDEFZR0oCha3pEJw=)
                          3: 6CB4B945583C5E88991A6EDB9EFD250C14979DA5.crl (hash: 02b+8uuSYvxtrv1mlRuPmp4FBX0wbA7VGfC/+j5PsuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:12:32:7e:5f:ad:46:e2:03:3c:6a:05:df:b3:c0:6d:47:07:82:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB4B945583C5E88991A6EDB9EFD250C14979DA5
        Validity
            Not Before: Feb 21 14:20:05 2023 GMT
            Not After : Feb 22 16:39:05 2023 GMT
        Subject: CN=6E22C3E440A85C03D2A36263D2105BBE3F0771B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:a1:58:4f:55:51:b7:2a:32:a1:cb:d3:04:
                    06:13:89:9f:a8:f2:87:91:39:84:17:a5:5b:f6:6f:
                    01:b6:7a:4d:7d:5a:85:ac:50:fd:9f:1f:72:a0:84:
                    91:3d:e2:77:14:20:7d:7b:4b:0e:e1:99:bc:21:f1:
                    e1:b3:a7:38:80:c7:3c:7d:b0:c5:f0:42:3b:4c:c0:
                    26:af:af:1f:3d:87:a4:e3:4a:e2:4c:56:84:e3:a4:
                    3c:9c:f4:cc:8d:77:90:68:29:dd:1a:4b:84:ae:82:
                    be:b3:9c:30:56:1e:c4:72:46:77:4d:c6:65:2f:a4:
                    ff:ac:4a:b0:57:2c:51:ef:63:36:19:26:d5:ba:57:
                    0e:cd:45:5b:45:4a:08:f4:08:3b:98:56:b2:53:95:
                    3b:1e:3e:6f:e3:ba:c5:1b:bf:77:92:15:ca:46:a9:
                    21:5e:65:f1:72:cb:74:19:4a:8a:9c:45:ec:f4:d0:
                    67:78:d0:2b:07:50:af:7a:ff:10:0c:ca:10:1a:29:
                    c7:30:9c:10:a3:4f:ba:da:2e:a7:3c:0d:77:10:32:
                    90:90:78:25:01:7c:72:f0:6e:fb:21:25:46:74:c9:
                    d5:49:a8:ef:9b:cf:97:5c:38:24:97:d8:21:1c:6d:
                    b3:76:00:0e:38:36:9a:49:dc:5a:15:ee:53:9f:3b:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:C3:E4:40:A8:5C:03:D2:A3:62:63:D2:10:5B:BE:3F:07:71:B3
            X509v3 Authority Key Identifier:
                keyid:6C:B4:B9:45:58:3C:5E:88:99:1A:6E:DB:9E:FD:25:0C:14:97:9D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68KEqhzR2P5ExWbs7kaxcE8FYqSMfEQzo2ukyXqkWJg7/0/6CB4B945583C5E88991A6EDB9EFD250C14979DA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:61:a4:56:b8:b3:ca:27:60:f6:40:95:06:57:d7:3a:c7:
         ca:1c:a5:db:50:e8:3d:ca:7e:b0:11:3f:6a:44:c3:c2:44:19:
         8d:09:03:2a:6f:28:58:b8:ba:8d:93:57:ce:33:36:d8:01:c4:
         42:f4:92:e9:6f:ea:a8:d3:85:8d:c2:b7:f9:40:40:76:bb:c1:
         af:4b:42:48:9b:b7:5a:f3:c0:dd:a2:9b:36:7c:b0:c2:71:f5:
         f4:c7:f4:29:b1:3a:b5:da:27:95:1e:d9:d0:83:ab:cd:79:18:
         14:7c:24:10:e6:4b:57:ca:a7:9a:39:60:08:ea:01:22:ce:f3:
         29:5a:c6:b3:d6:20:9a:15:af:96:9a:15:cd:0b:82:4e:4e:07:
         d9:ba:ff:00:f4:37:29:a4:48:e7:8a:56:ad:82:f1:03:d6:2e:
         76:62:03:75:d3:46:3c:a4:24:f7:30:ea:80:91:39:7c:31:36:
         88:d7:f1:8f:69:4b:c6:79:9d:a2:0e:66:67:9a:8e:d3:c1:0f:
         88:4a:8a:8a:e1:43:ad:19:76:6f:bd:a8:9d:94:11:d5:66:0b:
         0a:71:0c:42:5e:12:ce:dd:13:42:4c:5f:3a:24:c5:cf:0b:c7:
         97:ac:26:27:f9:b5:0e:61:7c:c0:82:b3:54:16:06:73:cd:7a:
         9e:28:51:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----