Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.mft
File:                     EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.mft (raw, json)
Hash identifier:          3XCWrPobBbR1JLcg1OEVfqU3nHd3leO4ChjwMj5X1WI=
Subject key identifier:   52:38:F7:52:F2:F8:D7:BA:36:FC:4E:89:79:FB:37:DD:05:64:FA:2E
Authority key identifier: EC:27:B2:D1:7E:01:86:C0:8D:87:96:69:E1:FC:4B:39:5B:BB:0B:1C
Certificate issuer:       /CN=EC27B2D17E0186C08D879669E1FC4B395BBB0B1C
Certificate serial:       7F74BB61DAE33A27F244298E817C08B0A3276F9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.mft
Manifest number:          3E
Signing time:             Fri 27 Oct 2023 19:00:37 +0000
Manifest this update:     Fri 27 Oct 2023 18:55:37 +0000
Manifest next update:     Sat 28 Oct 2023 22:31:37 +0000
Files and hashes:         1: EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.crl (hash: l3dprLQJbdT3ihTVPiZdiL642NVABTq6AVn8fOIWnZk=)
                          2: 323830343a353863383a3a2f33322d3438203d3e20323638313439.roa (hash: q4si29mgdXHFns54mQsC0xxTtsympyiKZNlAPYe9Zto=)
                          3: 34352e3137302e39322e302f32322d3234203d3e20323638313439.roa (hash: APEHpXLSJRMrivm/Qx51Gzo0+Fxrf5NAe676/JmAhgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:74:bb:61:da:e3:3a:27:f2:44:29:8e:81:7c:08:b0:a3:27:6f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC27B2D17E0186C08D879669E1FC4B395BBB0B1C
        Validity
            Not Before: Oct 27 18:55:37 2023 GMT
            Not After : Oct 28 22:31:37 2023 GMT
        Subject: CN=5238F752F2F8D7BA36FC4E8979FB37DD0564FA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:d7:4e:7b:9f:76:21:e3:c2:0e:c7:d6:05:
                    d4:f1:7b:c2:c4:80:48:03:b5:59:e8:50:6e:45:35:
                    04:d9:97:c4:52:76:30:6d:88:f0:61:10:50:d3:5f:
                    e9:65:04:83:8a:2f:10:18:c1:55:64:6f:9c:1b:97:
                    a2:d9:4f:4a:6e:81:13:09:b9:8f:7d:9f:a1:24:d6:
                    42:fb:f6:ad:cd:17:54:a9:3f:ae:f5:62:0c:12:17:
                    03:7c:98:79:72:df:f6:02:ae:db:b3:bb:b1:08:98:
                    7d:bc:af:31:9e:f9:b9:5f:f6:ec:96:62:16:37:45:
                    16:6e:6a:b9:80:5a:72:c1:4e:3b:b0:f5:15:7a:00:
                    22:fb:96:87:77:85:b2:c2:47:5b:c8:09:3e:9c:43:
                    50:b9:7e:b9:4e:3a:55:27:65:ef:03:09:55:91:c5:
                    5c:55:a6:43:ea:14:47:23:ad:1a:7d:ee:e2:9c:c4:
                    af:3a:3b:21:c2:65:aa:f0:1b:ef:27:4a:37:a3:7f:
                    db:8c:cd:3d:b8:40:f1:59:d2:0a:77:e3:78:da:67:
                    1d:ee:53:3e:82:1b:16:f9:36:d4:f5:e9:a2:db:d6:
                    56:3d:58:bc:75:b5:1e:92:1a:3a:65:02:76:2c:b8:
                    a3:32:4f:ec:99:1b:3d:f8:7c:4c:ba:3a:2f:4e:f3:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:F7:52:F2:F8:D7:BA:36:FC:4E:89:79:FB:37:DD:05:64:FA:2E
            X509v3 Authority Key Identifier:
                keyid:EC:27:B2:D1:7E:01:86:C0:8D:87:96:69:E1:FC:4B:39:5B:BB:0B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:93:1f:d5:ae:3b:eb:d4:44:8e:8b:48:34:dc:12:31:f0:07:
         c8:aa:97:08:cc:6b:9e:8e:d9:a9:16:72:0e:ce:2c:a0:3c:2d:
         65:02:6b:3b:14:f7:5b:56:5a:8c:29:1d:d5:b2:f5:9e:32:f4:
         f4:f8:e1:4f:da:12:b0:67:bf:b3:7c:e3:c0:e3:b8:bb:1d:f3:
         51:2c:76:e3:ed:8f:0c:d7:76:ca:bd:52:dc:2f:b1:d3:ac:a8:
         2e:33:d9:a8:f5:6a:4b:e1:e0:55:b4:02:93:fa:fe:53:4b:c7:
         cf:a6:ac:a8:e8:bf:a2:5b:5c:52:9c:ee:8b:5a:06:ef:b9:02:
         9a:c7:d8:f2:8a:92:ff:0d:69:4e:1f:71:51:05:d3:b0:09:09:
         40:16:69:43:26:92:41:73:00:8f:85:ef:4f:8f:af:d4:cd:01:
         8b:94:a6:8f:a5:df:49:02:db:45:cc:04:b2:55:2f:ea:f2:e6:
         5c:5f:7b:5b:75:ff:7d:20:bc:ea:38:3d:08:30:ae:04:9d:f2:
         5e:ef:f5:63:24:36:84:c2:a1:65:a7:73:e0:7d:49:e3:ac:51:
         96:7a:94:0c:bc:04:b4:da:c6:25:5e:31:d7:44:fc:31:f3:02:
         93:ac:48:e1:1e:1d:b0:5f:ae:22:29:b1:23:de:0a:1f:75:da:
         1f:30:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----