Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.mft
File:                     35095E12F171817DDE4EC0B91231CC009AC6496C.mft (raw, json)
Hash identifier:          1eyxfYs03Ih9+14DsQ9oQaRIkwAHayNbWh0EhqFHSEA=
Subject key identifier:   A3:4C:99:4D:B5:44:15:6C:04:C9:A1:BA:4A:67:10:79:CC:F2:73:51
Authority key identifier: 35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C
Certificate issuer:       /CN=35095E12F171817DDE4EC0B91231CC009AC6496C
Certificate serial:       5C5E282FC37E88D003759282FBFF8F3BBEDEB3ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.mft
Manifest number:          0332
Signing time:             Wed 20 Sep 2023 12:30:49 +0000
Manifest this update:     Wed 20 Sep 2023 12:25:49 +0000
Manifest next update:     Thu 21 Sep 2023 13:14:49 +0000
Files and hashes:         1: 35095E12F171817DDE4EC0B91231CC009AC6496C.crl (hash: ywqbEfBKfQqmdsgFz44+DlkehCFwnXcP/Uiw/hmDD20=)
                          2: 323830343a343764343a3a2f33322d3438203d3e20323637303739.roa (hash: Tvy0P/n9RlbtoNWld1mkj0UrsBEDvN9CO7+dPCjfcW4=)
                          3: 34352e3232372e34342e302f32322d3234203d3e20323637303739.roa (hash: 37+4qtUQQGuJqNSKL8gKIQF8uYV+8t2+0TcZgwVur+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:28:2f:c3:7e:88:d0:03:75:92:82:fb:ff:8f:3b:be:de:b3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35095E12F171817DDE4EC0B91231CC009AC6496C
        Validity
            Not Before: Sep 20 12:25:49 2023 GMT
            Not After : Sep 21 13:14:49 2023 GMT
        Subject: CN=A34C994DB544156C04C9A1BA4A671079CCF27351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:2b:ac:a1:c8:32:02:9c:d0:23:ec:d2:41:
                    1e:71:60:86:3b:18:cf:08:4d:11:6a:01:7e:f5:96:
                    29:80:11:07:26:91:41:9f:ce:50:b5:09:57:f1:75:
                    4f:69:95:63:de:f8:96:2a:4b:31:aa:48:97:7c:3c:
                    bc:1c:82:95:43:27:78:1d:42:c8:b0:1b:dd:87:1a:
                    95:6e:74:52:4b:72:99:27:ba:3c:a2:b0:a9:52:b1:
                    e3:9a:a5:82:a7:ac:f3:39:8b:44:e4:bb:14:3e:69:
                    15:f3:87:b7:01:84:c8:55:50:31:aa:7c:9b:a3:88:
                    32:fe:d7:03:fb:a6:ff:0e:29:6f:bd:f9:81:b6:0f:
                    47:b7:af:90:64:b2:5a:77:b5:cc:16:0e:7d:4d:c9:
                    d8:cf:e7:51:c2:c8:03:96:7e:96:d0:66:8f:17:02:
                    f6:07:be:5f:82:2b:58:41:49:f1:97:a6:77:64:1f:
                    dd:97:55:86:9b:28:7b:53:2f:8f:b8:ec:12:9f:43:
                    c9:b3:08:13:4e:42:5f:c9:27:fb:ab:c5:bf:a2:2d:
                    44:a7:86:36:a7:0e:0e:7f:05:b7:3a:53:b9:2b:53:
                    b1:34:e3:34:e2:53:78:6e:e1:0d:f4:5d:42:db:e6:
                    de:28:3c:ae:11:3d:bb:a7:11:23:f8:75:36:c2:ca:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4C:99:4D:B5:44:15:6C:04:C9:A1:BA:4A:67:10:79:CC:F2:73:51
            X509v3 Authority Key Identifier:
                keyid:35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:5b:66:28:e4:fc:e7:e3:fa:61:f6:02:ee:60:7c:4c:29:
         82:06:13:81:e0:c5:ad:c0:6e:11:3d:61:23:36:07:e1:0e:0f:
         cc:ed:6f:ff:cf:d5:dc:28:f3:18:ae:01:4e:df:2d:b0:0f:1f:
         0a:92:7c:8c:86:b2:48:44:36:c5:4d:92:ce:fa:00:b1:ad:ac:
         2e:9e:ae:cf:31:36:69:73:11:0c:dd:18:1c:76:23:0d:90:6c:
         c2:b2:41:c3:0c:57:2f:0d:2b:ae:41:72:8b:c1:b4:65:08:9f:
         42:c8:bf:4b:0f:0c:97:98:d8:25:7b:b6:ea:42:c0:42:8a:c4:
         16:d5:4e:2f:75:3a:4f:b1:92:11:74:1e:9b:cc:35:0e:91:a3:
         83:d7:cc:9a:f0:33:9f:a0:ef:04:c5:ac:2d:dd:b2:2f:f3:c9:
         bf:c3:fd:0a:4a:5b:f0:c0:1e:27:d7:b3:58:d3:09:02:a3:28:
         fc:4f:ef:a4:21:4e:54:34:75:dc:87:53:93:93:36:31:49:35:
         e2:31:e0:f8:4b:f1:c1:54:a2:b1:9a:44:3a:1d:d8:33:e0:4f:
         e6:61:6c:86:12:ba:f4:6d:8d:ae:ff:4f:19:70:e1:8c:39:d9:
         65:fb:ad:5d:a9:78:7d:f1:cc:6a:69:7a:21:5b:51:e3:e2:1b:
         8f:e5:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----