Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.mft
File:                     B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.mft (raw, json)
Hash identifier:          l6OJ8I+5vitRlQJwvBKiBKhtb0RQ135KaeU30JeiL88=
Subject key identifier:   45:68:EC:72:05:A1:0B:7C:03:BC:FD:F9:54:BA:17:9B:11:03:B8:0F
Authority key identifier: B1:37:C7:7C:7D:CC:54:33:6B:55:42:D4:57:1E:BA:B2:E8:9F:0C:4E
Certificate issuer:       /CN=B137C77C7DCC54336B5542D4571EBAB2E89F0C4E
Certificate serial:       28F65527631B55FEA3D09FE94E18F2993F40A22C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.mft
Manifest number:          36
Signing time:             Mon 29 Aug 2022 20:05:28 +0000
Manifest this update:     Mon 29 Aug 2022 20:00:28 +0000
Manifest next update:     Tue 30 Aug 2022 22:50:28 +0000
Files and hashes:         1: 323830343a333433343a3a2f33322d3335203d3e20323635343432.roa (hash: yTWujcYXUIfqLpCBHQN7fSbMEf7q+PoZwDK9xqrcXv8=)
                          2: 3136382e3139362e34302e302f32322d3234203d3e20323635343432.roa (hash: dM+lCXgf9VJueRWudx4+1Qr1Hrb54dP5BqJJJP62naI=)
                          3: B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.crl (hash: ChDxO6JGYulASMC7Y2AVY8RFFlgEbvK2WeLpzjZlwdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f6:55:27:63:1b:55:fe:a3:d0:9f:e9:4e:18:f2:99:3f:40:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137C77C7DCC54336B5542D4571EBAB2E89F0C4E
        Validity
            Not Before: Aug 29 20:00:28 2022 GMT
            Not After : Aug 30 22:50:28 2022 GMT
        Subject: CN=4568EC7205A10B7C03BCFDF954BA179B1103B80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:cd:c4:59:1c:59:35:7c:61:bb:f7:21:f6:
                    6a:d8:1c:ef:25:83:63:9b:31:29:b4:92:1e:4a:b1:
                    6f:6e:64:35:8e:b1:df:21:36:91:6b:3d:22:01:1c:
                    db:dc:fa:39:13:9f:07:4a:d6:97:34:fc:70:98:fb:
                    b7:65:6e:5d:54:a3:a3:37:0c:31:68:9d:52:d7:17:
                    c6:0f:b4:d5:05:e1:df:ab:11:86:95:3f:ba:3a:2a:
                    2f:92:01:da:24:79:2d:9a:33:d3:c6:e9:16:55:df:
                    49:4e:90:06:f7:f9:74:14:9c:7b:60:03:03:47:43:
                    60:d0:d9:e8:ff:84:9a:b7:99:39:11:43:58:53:f6:
                    28:24:f6:57:54:9c:39:48:fc:d5:89:50:21:63:bf:
                    5d:b3:b9:a4:bc:d0:fe:5c:67:ad:46:44:74:18:f8:
                    db:e0:80:c9:b5:5f:49:40:9b:dd:15:30:71:22:1d:
                    56:ee:2d:a6:15:18:c7:e5:65:b1:d5:67:d0:f2:78:
                    59:b3:17:42:a1:d7:39:17:5f:09:5e:37:65:f4:e9:
                    54:97:7c:71:03:f2:7c:0f:e7:c8:84:8d:72:ad:d7:
                    81:a7:2e:0b:66:76:1e:a3:a7:37:4d:34:62:84:58:
                    a6:fc:00:6b:b1:6d:74:02:27:15:5c:27:98:d3:55:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:EC:72:05:A1:0B:7C:03:BC:FD:F9:54:BA:17:9B:11:03:B8:0F
            X509v3 Authority Key Identifier:
                keyid:B1:37:C7:7C:7D:CC:54:33:6B:55:42:D4:57:1E:BA:B2:E8:9F:0C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/B137C77C7DCC54336B5542D4571EBAB2E89F0C4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a3:c3:87:de:80:6d:1c:cb:a4:0a:28:57:e4:89:85:b6:cb:
         bf:5b:dd:7e:1a:5c:88:fb:f4:47:6c:26:4e:70:4f:01:6b:fb:
         ba:c7:c1:ae:0c:ab:f1:10:3e:5d:7f:61:8c:de:f2:20:51:fe:
         10:c8:61:81:34:49:f8:1e:cf:ae:34:a1:36:2b:4e:69:76:5f:
         1a:55:ff:d6:6a:8d:55:80:82:34:fb:f6:33:d1:25:2f:2a:4b:
         96:88:19:e4:f5:33:b6:d4:cf:2b:0c:60:c3:16:c4:3e:08:cc:
         15:8e:51:11:66:73:ed:dc:7b:36:60:4c:42:cf:94:3a:3c:4d:
         2e:21:c2:5e:8c:97:40:98:3e:13:45:cb:50:e1:87:54:2d:5d:
         84:2d:d1:ca:0d:99:ba:d1:c4:a8:4b:12:57:89:08:6c:d3:4a:
         d2:9c:66:c6:b0:81:56:b7:90:80:64:bb:e1:6e:53:f5:69:b6:
         4b:af:84:ea:32:b9:cc:71:a8:71:0a:f9:91:8b:48:27:b6:72:
         44:73:12:e3:43:10:a9:c5:0f:57:47:21:b7:c6:f6:f1:e9:d4:
         26:e6:72:e6:67:f7:e4:34:b6:3e:12:25:dd:e1:64:57:c3:58:
         40:5a:8e:f9:c3:fd:09:17:72:b3:67:cc:59:8f:4e:19:59:6e:
         d6:ec:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----