Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/A78C26484398C2A474F0FDDAE8D317813B4813E0.mft
File:                     A78C26484398C2A474F0FDDAE8D317813B4813E0.mft (raw, json)
Hash identifier:          GeIHxyY/xA6JznK2AfkSO5qxo++1wHpb6bKWXoPPo6Q=
Subject key identifier:   13:A5:B7:CB:F9:AB:E8:60:53:A4:21:F1:98:C6:0E:D5:BE:13:B7:BB
Authority key identifier: A7:8C:26:48:43:98:C2:A4:74:F0:FD:DA:E8:D3:17:81:3B:48:13:E0
Certificate issuer:       /CN=A78C26484398C2A474F0FDDAE8D317813B4813E0
Certificate serial:       3C60DF2785215E613955660928700257F4F19435
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A78C26484398C2A474F0FDDAE8D317813B4813E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/A78C26484398C2A474F0FDDAE8D317813B4813E0.mft
Manifest number:          010A
Signing time:             Wed 15 Mar 2023 14:12:30 +0000
Manifest this update:     Wed 15 Mar 2023 14:07:30 +0000
Manifest next update:     Thu 16 Mar 2023 14:40:30 +0000
Files and hashes:         1: 323830343a323233383a3a2f33322d3438203d3e20323634353938.roa (hash: ti+DpIyK5fvow3ac6N+xefC/ZmT+B3GJbOXtjqXoNYc=)
                          2: A78C26484398C2A474F0FDDAE8D317813B4813E0.crl (hash: h0uh/E4DB32j1AmXDDl/UCyn06yNELrZv+a2kfMmdFM=)
                          3: 3133382e33362e3232382e302f32322d3234203d3e20323634353938.roa (hash: ZYIdwi+DElVf+XFaU5W/4nZ7vvCNu66D6JqmcNr0gjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:60:df:27:85:21:5e:61:39:55:66:09:28:70:02:57:f4:f1:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A78C26484398C2A474F0FDDAE8D317813B4813E0
        Validity
            Not Before: Mar 15 14:07:30 2023 GMT
            Not After : Mar 16 14:40:30 2023 GMT
        Subject: CN=13A5B7CBF9ABE86053A421F198C60ED5BE13B7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:c7:4a:0c:ed:dd:4f:6b:57:09:61:7e:25:
                    e6:90:c8:71:1d:d2:ac:6d:16:02:e1:62:e5:5d:1a:
                    60:8c:b2:fa:4d:96:ee:20:a0:b5:7e:71:85:ae:06:
                    78:e3:d2:9e:d8:b5:84:c4:a4:17:48:49:da:b7:71:
                    66:da:d5:6a:cc:47:b6:4e:84:cd:0e:31:5f:5f:83:
                    f1:16:17:10:38:89:99:e4:c5:60:dc:cb:9c:5b:eb:
                    16:1f:5d:20:db:c8:c1:66:18:b2:d6:81:78:ff:b0:
                    31:06:a4:b1:fd:f4:29:ba:25:fc:88:95:bd:92:94:
                    64:40:23:52:2a:19:d9:6d:8d:55:5a:a6:ea:8b:04:
                    d2:cc:43:f9:a7:08:ee:39:da:34:5d:d9:dd:10:d5:
                    43:e9:8b:af:57:f0:e3:99:2b:47:ca:4d:55:b5:42:
                    56:69:64:cc:d3:ab:47:52:cb:0c:b3:45:b0:c9:0a:
                    e4:d2:81:64:d4:c8:ef:ed:33:2b:d9:fe:f4:83:2a:
                    c0:79:25:eb:33:f3:f9:2a:cc:bd:1e:16:f3:91:3d:
                    a1:c1:8b:86:bd:35:db:e3:0a:c4:d9:7c:f5:72:63:
                    cd:2e:3e:0c:dc:6f:dd:3e:10:9d:12:ff:b4:fc:38:
                    b5:e3:68:6d:c9:38:ae:a4:55:6a:c8:a4:25:d8:99:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A5:B7:CB:F9:AB:E8:60:53:A4:21:F1:98:C6:0E:D5:BE:13:B7:BB
            X509v3 Authority Key Identifier:
                keyid:A7:8C:26:48:43:98:C2:A4:74:F0:FD:DA:E8:D3:17:81:3B:48:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/A78C26484398C2A474F0FDDAE8D317813B4813E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A78C26484398C2A474F0FDDAE8D317813B4813E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/A78C26484398C2A474F0FDDAE8D317813B4813E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:31:d0:06:28:4d:62:aa:b2:00:15:fe:bc:f2:55:42:cf:30:
         46:2f:46:5b:da:83:c1:cf:b6:c7:13:73:9f:03:fc:11:af:fc:
         4b:a6:a0:f2:98:25:d8:66:cc:c2:8c:a4:80:50:e9:00:6c:6c:
         35:94:d7:61:36:ee:51:0e:63:ee:f7:23:e6:b8:5a:e7:5a:56:
         3a:2d:69:81:09:4c:c8:fb:70:cd:e2:92:21:99:52:bb:53:09:
         94:bb:2b:bc:ad:f8:ca:55:12:f0:4f:6c:ab:c1:90:99:49:2c:
         ae:0b:fc:fa:27:6e:77:b1:15:fe:71:14:78:e5:4b:88:23:a9:
         ea:4f:08:ba:58:1e:d9:50:f8:86:09:fc:35:ec:d6:15:28:9e:
         b9:5d:fa:f4:e4:d9:b0:a1:50:10:1d:c1:1c:93:b0:48:71:cc:
         bb:a1:5a:ed:a0:1e:dd:70:77:18:22:96:df:12:a7:d7:c2:c1:
         94:b1:08:58:85:6c:c6:b1:6d:44:0a:4a:49:6c:ca:b9:be:a1:
         b8:8a:39:32:25:78:b6:c4:ca:6e:2f:94:d3:1d:d1:7a:1a:89:
         31:12:b6:72:ba:2c:52:4f:95:a9:94:b9:dc:f0:b4:e2:dc:58:
         50:2c:6e:ba:44:ce:a8:e0:f1:73:39:78:0f:4d:b4:66:ca:3d:
         b8:3a:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----