Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.mft
File:                     14F32A13ACEF5A58C84C147548B1C3475FB1E893.mft (raw, json)
Hash identifier:          +UXJXeOiDf5UqqzPilnCba1a/tYsKEjDzVocGBl6+uo=
Subject key identifier:   17:C7:54:0C:DA:81:2A:ED:0B:37:0D:E3:1C:07:D3:8B:5B:BE:23:FB
Authority key identifier: 14:F3:2A:13:AC:EF:5A:58:C8:4C:14:75:48:B1:C3:47:5F:B1:E8:93
Certificate issuer:       /CN=14F32A13ACEF5A58C84C147548B1C3475FB1E893
Certificate serial:       6A9914A1A0388A5DCB43D385F1EAE68BE0F2F2E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.mft
Manifest number:          0529
Signing time:             Thu 19 Oct 2023 23:51:31 +0000
Manifest this update:     Thu 19 Oct 2023 23:46:31 +0000
Manifest next update:     Sat 21 Oct 2023 02:09:31 +0000
Files and hashes:         1: 34352e3137312e31322e302f32322d3234203d3e20323638313737.roa (hash: IDC4lOuF+kNfLvTfdPRvCA7e9Jg9p55h8Nu6UMYB1AA=)
                          2: 323830343a353933633a3a2f33322d3334203d3e20323638313737.roa (hash: +VVJF7s8/i9BWR4GBss5IzpMr/sOyCEwgnLxObKEXuw=)
                          3: 14F32A13ACEF5A58C84C147548B1C3475FB1E893.crl (hash: oydSrOnhKS+3EeOkQpxbrbKa+zOGF5JcRQU8EITlHwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:99:14:a1:a0:38:8a:5d:cb:43:d3:85:f1:ea:e6:8b:e0:f2:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F32A13ACEF5A58C84C147548B1C3475FB1E893
        Validity
            Not Before: Oct 19 23:46:31 2023 GMT
            Not After : Oct 21 02:09:31 2023 GMT
        Subject: CN=17C7540CDA812AED0B370DE31C07D38B5BBE23FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:5c:6c:9f:b0:f9:c7:6e:19:4c:2d:a8:df:
                    d7:84:79:82:d0:8c:d3:6e:7e:6b:04:de:df:57:4d:
                    09:74:24:07:f2:66:18:89:0f:29:22:03:b5:35:6c:
                    92:64:9f:d1:9d:0f:e2:49:50:a2:8c:09:8c:de:a3:
                    38:27:84:a7:6c:da:6f:5f:23:59:7f:5e:d4:76:25:
                    83:6b:d9:d5:79:c7:6f:4b:0a:e2:cc:37:68:75:53:
                    b2:71:45:b5:c2:25:c4:62:e8:a0:29:13:cf:d5:78:
                    e1:1a:a8:75:3d:2b:31:0d:e5:b7:22:a7:f6:e0:02:
                    d3:b5:b0:78:ba:42:20:df:6b:31:1d:36:bb:f0:62:
                    6f:fc:03:11:b8:2e:5f:53:84:d1:e8:d7:75:c3:4c:
                    b2:6c:35:3b:d7:d2:2d:a8:e8:e1:06:d4:6a:27:83:
                    63:43:a1:7b:5c:98:11:43:13:78:bc:92:bb:6d:35:
                    fb:1c:06:b9:7f:71:6e:59:a9:21:b5:95:9d:67:34:
                    42:6a:fc:78:f8:23:06:17:dd:13:46:b8:9e:56:00:
                    90:02:10:55:dd:02:36:54:49:1b:ba:3b:77:03:88:
                    b4:12:16:ba:66:f1:87:26:c9:0b:b3:0b:2b:b9:a2:
                    8c:28:0a:5b:81:bc:c7:7e:e4:39:4d:28:8a:f7:e8:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:54:0C:DA:81:2A:ED:0B:37:0D:E3:1C:07:D3:8B:5B:BE:23:FB
            X509v3 Authority Key Identifier:
                keyid:14:F3:2A:13:AC:EF:5A:58:C8:4C:14:75:48:B1:C3:47:5F:B1:E8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/14F32A13ACEF5A58C84C147548B1C3475FB1E893.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2c:60:96:e1:41:f3:bc:a2:28:a7:ce:9e:47:e5:2f:9a:c0:
         2b:af:f1:76:96:93:19:ba:f2:e5:29:31:e7:9e:70:b1:c2:a2:
         ac:5f:67:17:85:fc:d8:92:e9:b8:7a:36:d7:89:f6:64:19:b5:
         36:b4:cf:e7:d3:e3:76:f9:4f:80:d5:c2:d3:31:07:b9:da:93:
         91:64:92:dc:a9:70:66:25:c5:78:1e:9a:49:f9:ee:8a:66:91:
         8b:6a:02:6e:52:91:9c:15:c0:b7:1d:03:be:3d:7d:06:0f:44:
         ad:57:1c:07:02:87:2a:f7:1e:29:2e:6b:02:ae:9f:1f:1e:34:
         59:c8:0a:53:34:19:cc:ca:23:e7:3a:2c:da:0f:aa:ce:54:ee:
         8d:0d:fc:b6:fc:8e:ce:43:2e:ff:57:4f:0d:8d:62:18:18:61:
         05:a5:6b:c6:e7:16:be:83:dc:00:6e:e3:b7:d8:da:e0:b8:58:
         a3:95:74:5f:53:89:86:1a:e7:40:20:8f:04:b8:26:b3:e7:58:
         68:3e:e7:e1:64:c5:76:92:b7:04:26:8d:22:7e:6a:5c:93:00:
         15:34:39:8b:4f:22:d7:e1:86:80:36:0b:65:96:f4:cf:58:94:
         d1:86:b4:2c:77:c7:9a:f4:4b:09:e8:b4:69:f4:0b:6f:a9:f4:
         39:c4:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----