Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/A7D482FCEFB211A00CE4A3197103257EA85FCD86.mft
File:                     A7D482FCEFB211A00CE4A3197103257EA85FCD86.mft (raw, json)
Hash identifier:          /f/4JccpZgOzTY2jUlrrXYxn5jeW78DKME9mRJlteTw=
Subject key identifier:   21:42:1B:1B:49:10:32:91:6D:10:B4:27:24:7C:84:12:19:78:4F:A8
Authority key identifier: A7:D4:82:FC:EF:B2:11:A0:0C:E4:A3:19:71:03:25:7E:A8:5F:CD:86
Certificate issuer:       /CN=A7D482FCEFB211A00CE4A3197103257EA85FCD86
Certificate serial:       2E89326ABE8106A566E557A8AAE97D194D393429
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D482FCEFB211A00CE4A3197103257EA85FCD86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/A7D482FCEFB211A00CE4A3197103257EA85FCD86.mft
Manifest number:          01A8
Signing time:             Sat 11 Mar 2023 04:03:04 +0000
Manifest this update:     Sat 11 Mar 2023 03:58:04 +0000
Manifest next update:     Sun 12 Mar 2023 04:42:04 +0000
Files and hashes:         1: 323830343a336261633a3a2f33322d313238203d3e20323636313634.roa (hash: /II4zry9K70ylLgM/CD2KCfTo5yg+u5DChgQ6gmFnVg=)
                          2: A7D482FCEFB211A00CE4A3197103257EA85FCD86.crl (hash: 93UnP3raCAAruD5oADh7nM5fAlWF19MoPS6CeQrS9gc=)
                          3: 34352e362e3138342e302f32322d3332203d3e20323636313634.roa (hash: Dox4Ado+aSyPmwY7O3zce6DeDRMQ7R9u4/VaHvy4WQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:89:32:6a:be:81:06:a5:66:e5:57:a8:aa:e9:7d:19:4d:39:34:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D482FCEFB211A00CE4A3197103257EA85FCD86
        Validity
            Not Before: Mar 11 03:58:04 2023 GMT
            Not After : Mar 12 04:42:04 2023 GMT
        Subject: CN=21421B1B491032916D10B427247C841219784FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:80:83:bb:cf:ea:32:00:14:eb:af:04:86:
                    7d:42:16:ba:c1:5f:f5:f2:bb:d8:67:b1:af:dd:a5:
                    c0:8c:6a:42:e4:2b:18:1c:61:06:02:47:82:87:7d:
                    a2:a4:68:14:8f:29:9e:53:71:19:ff:69:ba:65:94:
                    b1:16:cf:ce:63:47:3d:68:94:5b:aa:02:ae:fb:12:
                    6e:3e:47:f7:1b:90:f5:50:ae:09:d6:60:1e:0f:24:
                    10:9c:30:df:6c:e2:64:f2:c3:6b:18:71:14:6f:82:
                    60:74:a9:e4:5e:9d:3b:61:41:c1:78:37:da:5c:4a:
                    de:c2:00:55:ba:8d:4c:9e:8c:9f:0e:cd:71:76:1a:
                    79:15:9e:b9:b5:85:b3:e3:cf:44:e8:c2:98:9e:91:
                    d3:5c:e8:b6:54:94:93:be:99:27:d1:a0:6b:ae:5f:
                    d6:da:e2:3e:b8:e7:d1:46:c3:80:ea:13:ee:59:cb:
                    5f:b1:8d:47:4b:1b:e7:ad:f4:9d:10:22:30:f5:29:
                    2a:c8:66:37:10:c2:5d:75:75:c0:21:dc:5d:59:5c:
                    36:72:5a:35:40:52:ae:79:5e:72:de:05:87:15:6e:
                    1e:55:54:42:2a:9e:7e:5c:e8:09:e0:7d:e1:1b:51:
                    1d:59:77:7b:17:13:2d:7d:00:d4:af:50:c8:e6:f9:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:1B:1B:49:10:32:91:6D:10:B4:27:24:7C:84:12:19:78:4F:A8
            X509v3 Authority Key Identifier:
                keyid:A7:D4:82:FC:EF:B2:11:A0:0C:E4:A3:19:71:03:25:7E:A8:5F:CD:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/A7D482FCEFB211A00CE4A3197103257EA85FCD86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7D482FCEFB211A00CE4A3197103257EA85FCD86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/A7D482FCEFB211A00CE4A3197103257EA85FCD86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:1d:60:c9:a3:4e:66:ee:71:f8:96:8f:82:a2:2c:41:e7:
         29:42:e8:32:37:dc:30:4f:36:89:b3:13:b3:f9:ff:24:81:85:
         d5:c5:b1:72:4e:ea:a7:c3:57:30:37:a7:1c:6f:da:54:6f:12:
         b5:2a:6f:68:b2:35:a2:31:e0:79:a2:52:b7:a5:b1:4f:48:50:
         9a:5f:47:c4:b0:0d:0f:c3:25:51:ac:8c:4a:c3:3a:1b:4d:dd:
         da:63:be:39:af:74:df:2d:1b:d0:fd:01:4d:30:20:b4:f1:7b:
         76:8d:2e:19:00:50:27:3f:fa:f3:e3:b1:0c:86:08:e4:0f:35:
         57:86:65:e0:6b:87:b2:3f:62:cc:dc:4d:27:38:7a:e9:80:66:
         d0:92:03:cb:08:19:a1:96:c4:69:96:96:87:0b:8a:e9:58:47:
         22:8e:92:d4:83:7f:61:71:91:0d:32:d6:f9:2b:0c:37:60:32:
         ab:e9:43:4c:5b:f9:97:15:2c:ae:14:a9:84:4c:16:3d:72:67:
         01:cb:5e:aa:1f:b3:05:cb:f5:23:09:56:67:9c:25:96:c7:3b:
         ae:a9:ed:34:83:42:bf:53:f5:42:1c:e0:1e:64:94:0b:44:ca:
         fe:76:30:f2:22:d3:59:e3:ac:b5:be:23:4d:7d:1c:7a:6d:3a:
         ec:22:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----