Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.mft
File:                     81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.mft (raw, json)
Hash identifier:          1za72nYhd4tWEKDWgGhFj23cn4cBoTbIT0Yztk4inqY=
Subject key identifier:   B1:6D:4E:3D:48:F2:9B:A1:06:7B:B4:D2:27:13:0B:51:BB:18:A3:2B
Authority key identifier: 81:B2:C3:AC:45:C5:C9:DE:98:CE:A2:52:AA:68:C8:E0:6D:74:58:D7
Certificate issuer:       /CN=81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7
Certificate serial:       68B6C4C0F5CA02AFED972B55973DC9B1F97DE588
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.mft
Manifest number:          6D
Signing time:             Tue 11 Oct 2022 06:37:28 +0000
Manifest this update:     Tue 11 Oct 2022 06:32:28 +0000
Manifest next update:     Wed 12 Oct 2022 08:16:28 +0000
Files and hashes:         1: 34352e3136322e3133362e302f32322d3234203d3e20323638353230.roa (hash: FPuBP93ixvQidmc458BEPrc2nU6ud32TVjSeppsz9hs=)
                          2: 81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.crl (hash: ZZHFJDg87Qvpr4KSwLFHYq2t41n3ulv2WJDKhr3PssY=)
                          3: 323830343a353237383a3a2f33322d3438203d3e20323638353230.roa (hash: XRLSAsyiHw2FTv8sqIwqpNg8vHW5Ic3cIh+1vHsd13A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b6:c4:c0:f5:ca:02:af:ed:97:2b:55:97:3d:c9:b1:f9:7d:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7
        Validity
            Not Before: Oct 11 06:32:28 2022 GMT
            Not After : Oct 12 08:16:28 2022 GMT
        Subject: CN=B16D4E3D48F29BA1067BB4D227130B51BB18A32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:98:92:7d:4e:5b:97:38:16:07:32:0d:05:
                    83:89:ae:8c:b1:0d:68:58:da:bd:9a:2c:0f:cc:06:
                    06:90:b5:c5:eb:79:08:ad:13:0f:8e:ea:39:22:59:
                    c3:bd:ec:50:5b:65:48:1c:3b:8c:e2:9d:23:cb:3b:
                    e6:01:02:22:81:ef:d6:e0:a5:8f:e2:c9:72:fd:79:
                    a4:a7:29:83:ee:a6:6c:a5:4f:25:a5:11:17:8c:25:
                    a2:fe:a6:89:33:a2:08:1b:d9:93:90:b7:50:7d:b7:
                    20:2f:cd:b0:a1:2d:b8:a4:dd:00:1b:fd:18:49:98:
                    d9:36:d8:b7:2f:c1:82:9e:d8:69:21:cb:d2:5f:a5:
                    95:4b:51:ea:19:e0:c7:7d:e6:f6:61:c9:38:78:4b:
                    18:98:35:29:c5:6c:2c:68:43:20:11:e7:9e:ee:42:
                    99:02:55:68:8f:91:6c:3c:ae:da:ce:ec:2e:b9:2a:
                    57:f6:f2:f5:de:8b:17:3d:08:fd:57:4b:5d:7e:28:
                    8f:2d:30:f9:0c:00:53:4d:7a:2d:1e:49:5c:80:fd:
                    75:37:75:c7:71:d2:ce:31:19:99:b7:22:85:8a:46:
                    cf:c2:24:db:46:16:1c:fd:f4:90:dd:f1:fd:92:2b:
                    e2:ca:dc:80:de:50:61:10:22:e8:be:6d:9f:7d:5c:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6D:4E:3D:48:F2:9B:A1:06:7B:B4:D2:27:13:0B:51:BB:18:A3:2B
            X509v3 Authority Key Identifier:
                keyid:81:B2:C3:AC:45:C5:C9:DE:98:CE:A2:52:AA:68:C8:E0:6D:74:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/81B2C3AC45C5C9DE98CEA252AA68C8E06D7458D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:81:6f:79:56:4a:2f:25:14:fc:73:23:2e:13:cc:80:39:35:
         68:47:34:fe:04:3c:2d:f3:46:9b:a9:af:84:60:1a:b8:97:59:
         67:04:a9:69:23:9c:c6:03:93:2c:83:23:39:15:f3:f9:52:60:
         9a:a0:bd:c4:5e:6a:bb:92:4f:9e:af:fe:84:cd:89:b0:d8:eb:
         25:3d:64:a3:12:73:87:b6:88:de:dc:e3:9b:fc:59:3e:13:ce:
         af:73:51:bc:f5:5d:cd:51:81:9a:37:cf:f9:68:56:17:92:07:
         e0:16:4d:a0:57:73:b3:a1:2c:95:ab:30:ed:d3:4b:ad:8b:ca:
         3e:e3:a6:db:55:4d:4b:a1:71:4f:8e:4d:2b:56:6c:36:a0:65:
         4d:9b:8d:b8:72:42:4a:19:1d:eb:46:87:0b:b2:52:69:de:38:
         a1:60:0e:ab:9c:51:ab:91:a5:26:8c:da:44:d8:d0:0e:79:88:
         f2:1a:03:fd:04:82:c7:19:1f:0c:cf:23:0e:a9:86:91:7b:d1:
         dd:0f:1a:c0:bd:3e:08:cd:06:d3:34:84:65:d6:fc:1d:63:6f:
         68:03:e9:66:8e:b7:4c:a8:70:4c:eb:2c:cb:c5:88:0f:83:02:
         85:d9:2a:fc:2b:93:ba:62:42:e0:8a:dd:42:a0:78:90:31:73:
         27:29:e7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----