Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.mft
File:                     B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.mft (raw, json)
Hash identifier:          RySQticwREDpjDFxhSSVwi8taqtN2CpUSw9659wnYaQ=
Subject key identifier:   2B:A0:E9:3A:BE:AA:2A:A9:79:22:66:A5:A5:75:A0:95:EA:C7:F9:0C
Authority key identifier: B7:FC:5A:33:58:B8:D8:DA:F5:A1:46:59:C0:64:20:F8:4C:49:3A:0B
Certificate issuer:       /CN=B7FC5A3358B8D8DAF5A14659C06420F84C493A0B
Certificate serial:       2D3F7BCAEDBD2D90F036F9CBB5EEA02CF0973F07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.mft
Manifest number:          04C5
Signing time:             Wed 12 Jul 2023 01:46:09 +0000
Manifest this update:     Wed 12 Jul 2023 01:41:09 +0000
Manifest next update:     Thu 13 Jul 2023 02:37:09 +0000
Files and hashes:         1: 323830343a313433633a3a2f33322d3438203d3e20323633333230.roa (hash: CzQ++Uqzm19oMFvdUWWoNWs6jPxH2nkoamJN5zDO55w=)
                          2: B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.crl (hash: tEoBit5Ccq16TMasbAqY6JmRDxN+0BsSk1z5HTHULKg=)
                          3: 3139312e372e3134342e302f32302d3234203d3e20323633333230.roa (hash: D/HOLBNZ3Gaaz9NDHjfR0Cwo3uMPQJuS7B2oSVG0tuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3f:7b:ca:ed:bd:2d:90:f0:36:f9:cb:b5:ee:a0:2c:f0:97:3f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FC5A3358B8D8DAF5A14659C06420F84C493A0B
        Validity
            Not Before: Jul 12 01:41:09 2023 GMT
            Not After : Jul 13 02:37:09 2023 GMT
        Subject: CN=2BA0E93ABEAA2AA9792266A5A575A095EAC7F90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:56:db:ca:75:2a:32:9c:3e:ed:3f:fe:7d:
                    1d:c8:d2:e7:03:28:f3:ba:28:9e:3a:b6:7d:e5:a0:
                    2a:21:6f:6a:c8:78:22:17:56:01:47:c1:09:7f:4a:
                    e7:90:8b:ee:f2:96:53:6c:02:34:81:c0:9c:df:87:
                    7f:5b:84:bc:5c:ee:80:63:61:2b:29:67:97:ad:e2:
                    b3:49:10:b3:9d:0c:1e:5e:e2:1e:85:81:e8:cb:a1:
                    2d:18:bc:b6:50:6f:16:1a:aa:72:22:1f:da:4d:e1:
                    5a:61:43:26:14:3e:08:4f:b0:9e:41:f3:33:99:be:
                    18:0e:95:49:ad:34:51:92:50:49:91:7f:88:42:e1:
                    f1:57:54:97:bf:2c:e5:36:44:c8:d8:90:ef:ca:bf:
                    cf:ae:db:7a:02:19:56:2c:1d:ec:5b:15:39:40:b7:
                    5f:24:30:0d:d9:3b:da:5e:0e:8a:5a:71:54:bd:a1:
                    ab:09:0e:6d:f9:34:df:de:2e:96:8e:5c:e8:91:fb:
                    bd:17:68:b8:4e:22:9f:b4:66:a5:8f:68:66:9d:ab:
                    50:ac:62:24:89:85:95:4f:ec:cb:37:00:b7:71:47:
                    96:0d:e7:7d:34:22:d8:5e:70:e7:bb:8c:9a:5e:e0:
                    14:83:8e:5d:49:88:a2:c0:4e:68:0a:39:0f:33:c7:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:E9:3A:BE:AA:2A:A9:79:22:66:A5:A5:75:A0:95:EA:C7:F9:0C
            X509v3 Authority Key Identifier:
                keyid:B7:FC:5A:33:58:B8:D8:DA:F5:A1:46:59:C0:64:20:F8:4C:49:3A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/B7FC5A3358B8D8DAF5A14659C06420F84C493A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:9c:05:6c:6a:e5:48:bb:ea:c8:52:77:d3:01:96:8f:5e:
         9a:fc:c9:e8:31:a4:93:ff:03:7a:c9:43:d3:a2:e7:7f:94:bb:
         91:20:eb:2a:8a:c1:ae:97:52:ca:d2:56:0d:ea:e9:1a:6d:bf:
         dc:b9:b0:2a:a3:95:6a:53:e4:59:07:e9:51:62:52:be:c9:41:
         e6:e3:28:13:e1:6b:f8:c9:b5:23:30:57:61:fd:92:4a:cd:c6:
         c1:ea:d0:7f:44:20:9f:76:2f:79:16:5d:04:83:08:39:03:d0:
         89:f4:40:8d:2e:bc:63:49:d9:d4:b2:74:12:6b:30:7f:9d:e6:
         29:ba:f2:35:70:df:62:8f:db:b7:f5:ff:b6:1f:0f:2f:92:82:
         bb:29:13:e8:4c:34:a1:50:29:ac:4f:92:5f:49:6b:c0:ac:ea:
         01:35:01:6f:6b:ed:2a:23:9c:d9:ae:ba:a5:78:6c:67:e5:d1:
         03:ac:f2:3a:e9:da:8b:b1:41:72:c9:f9:3b:b4:0a:4d:c4:57:
         b9:34:8e:2d:c6:5c:a7:65:f2:7c:0e:94:83:8e:d3:d8:3a:df:
         63:1a:61:3f:56:1a:85:9a:e7:7a:f2:4b:92:52:66:77:0d:be:
         2b:a1:55:68:3d:42:fc:2e:6b:b7:09:71:49:c0:9a:66:58:c6:
         c0:b8:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----