Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.mft
File:                     25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.mft (raw, json)
Hash identifier:          yhO0U4sSkPACE1QBIb+lTuasavZVaFlRIHAqgYcpeTU=
Subject key identifier:   9C:B1:27:DB:C6:76:C5:EF:4D:C9:F9:3D:12:CB:C5:91:1E:75:B7:85
Authority key identifier: 25:E3:23:BC:DC:D1:A8:A4:CD:A4:CE:36:A1:B8:83:B9:1F:CB:67:36
Certificate issuer:       /CN=25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736
Certificate serial:       7205EFEAEC8D174EA276891CC22EDD75DF075E22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.mft
Manifest number:          0107
Signing time:             Mon 15 May 2023 19:39:35 +0000
Manifest this update:     Mon 15 May 2023 19:34:35 +0000
Manifest next update:     Tue 16 May 2023 23:09:35 +0000
Files and hashes:         1: 323830313a38303a316264303a3a2f34382d3438203d3e20323636353132.roa (hash: MhY6vgpFzQk2dBQsvpZbKIfUNFR9QlH+ijflr1k5c7k=)
                          2: 25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.crl (hash: U11YiJSjYQtMTQ1LHLTZTLCYjpcV/0U/vxYtmE8z1j4=)
                          3: 3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa (hash: mQ0NOWkR2vjyOCD0ybWJm3k9Whce7YM84tH7svPJxYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:05:ef:ea:ec:8d:17:4e:a2:76:89:1c:c2:2e:dd:75:df:07:5e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736
        Validity
            Not Before: May 15 19:34:35 2023 GMT
            Not After : May 16 23:09:35 2023 GMT
        Subject: CN=9CB127DBC676C5EF4DC9F93D12CBC5911E75B785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:3e:b7:00:7d:fb:92:91:c7:0f:22:8b:ac:
                    b7:f6:c2:88:d2:40:84:56:5e:56:3b:b7:83:24:bb:
                    e0:47:19:52:20:ea:16:32:44:27:5c:fd:c5:53:dc:
                    ff:d1:6c:d3:01:94:1b:41:e4:8e:db:3e:b3:8e:4f:
                    68:1f:84:ff:5f:b2:aa:63:a5:9c:a4:72:d6:d2:a6:
                    e8:56:a6:02:83:56:3a:11:7f:3d:bb:16:ec:6d:f4:
                    0a:e6:0d:15:77:b0:15:91:f0:c8:43:8a:83:19:57:
                    ff:db:ad:67:09:15:4f:61:43:0e:5a:e5:b5:b9:82:
                    a6:8f:2a:b7:09:a6:16:55:9e:eb:89:d7:8e:02:64:
                    dc:34:99:a0:b6:da:08:f1:3a:1a:2e:e2:f8:93:33:
                    a9:84:8f:40:87:4d:3c:d8:83:9e:0e:12:8d:10:7c:
                    ea:35:8e:15:8e:30:d0:80:73:e5:53:ee:40:67:da:
                    f9:1d:74:a4:43:59:d6:7d:9e:2c:33:62:53:1e:1f:
                    29:a9:30:8c:2c:ab:54:b8:44:10:b3:2f:c8:65:4e:
                    bc:8a:a8:c9:9d:0b:28:76:cf:0f:f0:ee:ab:bf:08:
                    61:67:3c:36:fb:84:7e:f3:32:58:d6:01:25:22:71:
                    07:c4:b1:60:d1:5e:ee:18:8c:69:34:45:12:7d:d2:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B1:27:DB:C6:76:C5:EF:4D:C9:F9:3D:12:CB:C5:91:1E:75:B7:85
            X509v3 Authority Key Identifier:
                keyid:25:E3:23:BC:DC:D1:A8:A4:CD:A4:CE:36:A1:B8:83:B9:1F:CB:67:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/25E323BCDCD1A8A4CDA4CE36A1B883B91FCB6736.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:9f:fc:af:9c:10:31:53:82:5b:fb:15:5e:64:cd:f2:38:
         f4:e1:5c:00:f6:0e:4e:91:08:5d:c8:db:49:8b:c6:5e:7c:37:
         dc:f6:d8:df:7c:45:8c:ca:22:dd:b6:45:6e:fa:a2:97:09:ee:
         14:ed:47:0f:40:71:a8:51:e7:84:36:8d:05:27:c9:0d:ae:14:
         49:2f:e2:f5:90:73:09:b4:bc:5a:2b:a1:cf:d6:1d:ee:e2:09:
         ee:4b:22:6d:a2:e3:5a:e9:2f:0e:02:5c:bb:bf:f3:9f:af:03:
         51:5b:24:46:95:1a:9b:88:bd:09:2a:bc:57:54:14:01:0a:98:
         da:9e:ee:65:77:de:3d:16:1f:f8:aa:35:22:35:ab:d9:62:7e:
         76:b4:38:59:2e:75:4b:64:e3:1f:f8:cb:3e:25:ac:65:b6:42:
         09:26:e9:ce:3b:ee:6a:fa:f7:7e:76:82:5b:78:c3:fb:cc:24:
         46:2d:95:3c:bc:fd:ca:93:02:8e:75:d0:0c:d8:ac:e8:09:cc:
         c1:74:5c:71:79:1f:39:a4:da:78:5b:24:63:1b:df:4a:43:ea:
         6f:a4:2a:e5:47:e0:b2:40:96:90:dd:51:26:a2:0d:01:e0:36:
         50:23:c3:27:0c:fa:39:60:c7:80:79:74:2d:86:eb:97:8d:b3:
         a9:ba:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----