Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.mft
File:                     1A47D726E2A780A130E88105B672CBB18E9BCCBC.mft (raw, json)
Hash identifier:          gBknrjgOZqKtL2Fm2YSId6vwqlYZwXL8J2zzKI+TKMc=
Subject key identifier:   8C:9C:B4:90:4C:FD:70:CF:67:45:A7:35:E9:EC:1F:B9:FA:B5:1A:7C
Authority key identifier: 1A:47:D7:26:E2:A7:80:A1:30:E8:81:05:B6:72:CB:B1:8E:9B:CC:BC
Certificate issuer:       /CN=1A47D726E2A780A130E88105B672CBB18E9BCCBC
Certificate serial:       60E948556763BD05F3B8AF17297AE56B6603623F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.mft
Manifest number:          77
Signing time:             Wed 24 May 2023 15:03:14 +0000
Manifest this update:     Wed 24 May 2023 14:58:14 +0000
Manifest next update:     Thu 25 May 2023 15:04:14 +0000
Files and hashes:         1: 1A47D726E2A780A130E88105B672CBB18E9BCCBC.crl (hash: Z9boL/r+poy+U85BHfy67q7RV0oqLzJKvP12VS335Ro=)
                          2: 323830343a356436303a3a2f33322d3438203d3e20323638393638.roa (hash: n6n+CzBKl+LEljBBMbiiXjmMeR0KHqL/7evo3Qirp+o=)
                          3: 34352e3137362e33362e302f32322d3234203d3e20323638393638.roa (hash: EJVmAnbK1H1sHYiPJNkn3YCUJe3+bsWxM/xJbJRaJkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e9:48:55:67:63:bd:05:f3:b8:af:17:29:7a:e5:6b:66:03:62:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A47D726E2A780A130E88105B672CBB18E9BCCBC
        Validity
            Not Before: May 24 14:58:14 2023 GMT
            Not After : May 25 15:04:14 2023 GMT
        Subject: CN=8C9CB4904CFD70CF6745A735E9EC1FB9FAB51A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:8c:59:cc:8c:f5:76:1c:d0:ba:ed:5c:30:
                    6b:35:da:db:20:8e:eb:00:b4:2d:cf:c0:c8:b6:11:
                    8b:9d:ea:1a:03:c0:7a:27:d1:48:a4:3e:f9:7d:2a:
                    3c:0d:25:73:65:02:9a:34:65:97:c9:0b:f2:06:5b:
                    3f:f6:f5:08:c7:71:51:73:d3:8b:c8:d1:00:e0:4b:
                    59:8d:04:60:da:b5:c7:4e:72:57:c6:f1:2a:83:6a:
                    98:d0:f1:1c:fa:28:a6:f5:6e:49:28:25:97:e0:35:
                    dd:24:f5:d5:9f:a2:99:0b:e7:17:99:d6:91:02:31:
                    77:be:b8:f0:af:16:8b:84:2f:11:72:fc:0e:98:94:
                    bd:44:cd:a1:e7:63:d0:bb:a2:23:45:b2:eb:ad:a0:
                    c8:74:0e:2a:da:6d:3d:db:fe:6e:72:95:a4:f5:4d:
                    14:5e:f3:58:e2:9a:3b:90:0d:a8:30:df:55:80:42:
                    89:86:2c:9b:62:60:38:f6:1d:70:37:06:37:ba:01:
                    71:82:ef:b7:d6:95:74:42:d0:24:4a:c6:e0:bc:0c:
                    c5:e2:e3:e2:9c:fa:97:93:29:07:44:7e:38:51:79:
                    9e:aa:a5:d1:9b:5d:2c:b0:40:47:30:45:67:73:45:
                    ee:eb:3a:30:a9:e9:5a:97:69:c1:78:68:af:9a:01:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9C:B4:90:4C:FD:70:CF:67:45:A7:35:E9:EC:1F:B9:FA:B5:1A:7C
            X509v3 Authority Key Identifier:
                keyid:1A:47:D7:26:E2:A7:80:A1:30:E8:81:05:B6:72:CB:B1:8E:9B:CC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:79:29:2e:e9:fc:fa:dc:d4:3f:ee:2a:ee:43:42:f3:db:38:
         58:0d:c2:2e:93:34:b7:1e:19:91:69:39:d8:fa:62:a3:98:7d:
         32:3c:9b:dd:96:6d:91:ba:15:bf:25:9c:9d:16:b3:35:f8:34:
         1f:b1:d9:b7:c9:5a:5a:68:00:aa:78:84:01:21:87:a8:02:09:
         16:f2:d4:a3:d8:d3:88:ca:b7:56:0c:a6:92:c1:8e:46:e7:cb:
         68:8b:90:6c:2d:02:69:68:35:e3:63:23:38:dc:32:07:e1:ee:
         50:13:c8:4e:c1:b2:0e:11:bb:87:f6:dd:cd:b1:c8:fa:54:f4:
         dc:28:b5:fc:d5:ab:ac:b6:31:89:5b:47:3e:78:68:0d:51:9b:
         6a:a2:42:53:90:09:f7:95:e9:13:89:4e:63:02:84:71:ae:d9:
         96:cd:1f:d5:3d:c8:42:b3:d5:da:09:65:9e:f2:3e:5d:15:2b:
         0e:92:20:9d:25:50:1d:fb:bb:19:85:d3:db:7f:3b:c9:65:2f:
         dd:94:06:c2:2d:6b:17:d8:d3:4d:08:7e:2a:85:ba:6f:a0:48:
         2b:97:99:51:6b:a2:02:c0:04:d4:0c:47:de:0c:52:7b:ac:d2:
         24:47:2d:b2:44:3d:a3:98:19:c7:3d:b8:c5:1d:d6:19:7e:82:
         1e:09:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----