Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/6859C1BF0F6944BB65081CADB53E7080A01D3183.mft
File:                     6859C1BF0F6944BB65081CADB53E7080A01D3183.mft (raw, json)
Hash identifier:          KkAmEwEq0OeVEL6PuWhHXdxYM69ZKAdqEeh71088Y8c=
Subject key identifier:   69:C4:29:32:08:63:CD:4F:46:AE:10:B7:6B:C1:04:4B:55:76:E1:78
Authority key identifier: 68:59:C1:BF:0F:69:44:BB:65:08:1C:AD:B5:3E:70:80:A0:1D:31:83
Certificate issuer:       /CN=6859C1BF0F6944BB65081CADB53E7080A01D3183
Certificate serial:       5E3B4D286B9573E6F2259CFCBDF9721E18EA689B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6859C1BF0F6944BB65081CADB53E7080A01D3183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/6859C1BF0F6944BB65081CADB53E7080A01D3183.mft
Manifest number:          9B
Signing time:             Wed 20 Sep 2023 10:39:23 +0000
Manifest this update:     Wed 20 Sep 2023 10:34:23 +0000
Manifest next update:     Thu 21 Sep 2023 13:14:23 +0000
Files and hashes:         1: 323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa (hash: cSLPd/c8uqzgAuHEmwkc7Vfh9WhpAlgLa0pmsl8sWiM=)
                          2: 3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa (hash: /oq2fjODXqKTEI+BH5MBaZBMvKf+o6aPjKs8MN/OQfI=)
                          3: 6859C1BF0F6944BB65081CADB53E7080A01D3183.crl (hash: eq9QNl8xlyDpz9QvXaYdYulmrDWKG5ZDxDzmpI5Y5Aw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3b:4d:28:6b:95:73:e6:f2:25:9c:fc:bd:f9:72:1e:18:ea:68:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6859C1BF0F6944BB65081CADB53E7080A01D3183
        Validity
            Not Before: Sep 20 10:34:23 2023 GMT
            Not After : Sep 21 13:14:23 2023 GMT
        Subject: CN=69C429320863CD4F46AE10B76BC1044B5576E178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:df:40:32:23:46:5b:2b:c5:87:cf:9d:ac:
                    42:1c:2a:07:5f:6e:95:33:ea:45:75:46:39:8b:b0:
                    c0:71:f8:be:78:f0:96:c0:9d:3c:2b:51:48:33:03:
                    8d:51:7a:04:08:a0:71:2d:9d:9d:b0:9e:7d:e5:88:
                    f9:e2:51:a3:c5:f8:42:6f:2a:98:7a:e9:06:ce:09:
                    47:e8:4a:87:db:c4:a3:e1:67:9c:15:b8:a2:e8:0a:
                    19:a8:97:7a:45:89:20:18:56:0e:83:72:7b:14:d5:
                    e1:5d:e6:a4:50:6e:29:88:43:5c:77:bf:c7:7f:38:
                    e0:c4:b2:08:1a:da:a9:77:d9:a8:c0:20:73:64:d2:
                    85:2e:2d:84:ac:f0:2d:56:85:1b:a1:f4:01:72:b5:
                    b5:61:c5:c8:5b:84:ea:d4:b5:ac:a4:5f:59:ff:df:
                    f6:00:6f:21:9c:6c:b3:ef:01:fa:9c:47:31:7d:bd:
                    36:dd:28:75:08:21:6d:9b:ed:75:6d:12:e4:94:71:
                    2f:f3:e6:50:47:42:ba:08:04:94:96:44:d7:dd:a3:
                    9e:65:94:d9:2c:7a:32:b3:60:ee:eb:60:aa:97:3a:
                    04:6f:44:a2:9d:1d:92:20:18:3d:a7:5d:1c:f7:89:
                    76:d8:ae:e4:c1:51:d2:c3:1d:e7:e7:da:43:b6:7f:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:29:32:08:63:CD:4F:46:AE:10:B7:6B:C1:04:4B:55:76:E1:78
            X509v3 Authority Key Identifier:
                keyid:68:59:C1:BF:0F:69:44:BB:65:08:1C:AD:B5:3E:70:80:A0:1D:31:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/6859C1BF0F6944BB65081CADB53E7080A01D3183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6859C1BF0F6944BB65081CADB53E7080A01D3183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/0/6859C1BF0F6944BB65081CADB53E7080A01D3183.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:58:a4:82:87:b1:ac:29:16:32:2b:4f:5b:bb:1b:6c:64:
         e1:86:9f:97:73:6b:da:11:79:29:1e:17:c1:9e:9b:88:8a:49:
         47:08:51:45:c1:eb:fe:12:c5:1d:46:89:db:5b:ac:f6:bf:ac:
         a3:df:99:c4:13:04:e1:d8:0f:d9:85:c5:79:8b:45:89:72:1b:
         5b:ca:4a:a0:7a:c2:64:c8:c6:df:c1:11:3b:29:41:be:42:8e:
         63:17:68:93:7e:c0:58:16:17:fa:2c:26:7a:bb:94:a2:b9:55:
         9b:89:db:0b:96:7d:3d:11:8b:2d:1a:d5:57:53:2b:df:07:7f:
         91:54:91:73:fd:7b:cf:a2:ec:e2:3c:f4:c5:a1:67:0c:a4:5c:
         8b:b0:dd:da:b4:54:3a:04:78:5a:0b:38:52:a3:24:81:5b:fc:
         ed:07:ae:9a:5f:f6:f2:c2:03:36:50:b7:dc:c9:e7:a0:e4:7f:
         ce:4d:2a:76:3f:93:ad:5f:bc:c4:31:8b:b5:1f:cb:90:81:cd:
         48:32:2c:27:81:a6:6a:eb:6f:0b:46:58:b0:46:76:91:23:ee:
         7f:a7:ea:92:b5:9c:85:d8:db:c7:6a:be:5c:d2:f7:84:d5:aa:
         5a:9f:b7:c2:0d:4b:20:8c:01:47:0a:10:36:7f:55:a2:39:07:
         e7:37:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----