Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.mft
File:                     9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.mft (raw, json)
Hash identifier:          5V16Dijk+vfE12PQ6KccpYuw8xbbhP3+Ql7kfqEGU2o=
Subject key identifier:   35:58:D9:AC:D4:B0:66:4E:03:12:C9:F6:42:48:CF:F9:83:09:25:F0
Authority key identifier: 97:93:AA:AD:DB:B4:1B:56:44:D5:96:B5:F7:E7:CB:B6:EC:2D:23:15
Certificate issuer:       /CN=9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315
Certificate serial:       704575AC43664CE2F1D3DF74A8246C540992DEEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.mft
Manifest number:          90
Signing time:             Wed 25 Oct 2023 23:00:06 +0000
Manifest this update:     Wed 25 Oct 2023 22:55:06 +0000
Manifest next update:     Fri 27 Oct 2023 02:28:06 +0000
Files and hashes:         1: 9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.crl (hash: pbiU1pCGOUUHDi9+s365dT60MvcI6s7LxKRIvm4Na6A=)
                          2: 323830343a323765633a3a2f33322d313238203d3e20323633393239.roa (hash: gLEk3iprOK6mCeFWXpe1d8aCByLiGA1bTyzijbQWcLg=)
                          3: 3133382e3231392e3133322e302f32322d3332203d3e20323633393239.roa (hash: tkOfWHmS4ae93P4gJIFtxPPOZinUmXyIwnw8sH8M7Ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:75:ac:43:66:4c:e2:f1:d3:df:74:a8:24:6c:54:09:92:de:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315
        Validity
            Not Before: Oct 25 22:55:06 2023 GMT
            Not After : Oct 27 02:28:06 2023 GMT
        Subject: CN=3558D9ACD4B0664E0312C9F64248CFF9830925F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:de:4f:df:4b:21:08:87:fe:21:49:0f:23:
                    30:fb:f7:38:00:7b:08:d3:a5:7a:1b:d7:f4:11:02:
                    17:fd:90:b8:b2:a2:fd:b3:76:33:79:de:ff:45:0e:
                    c4:ae:bb:1b:3a:dd:b1:55:dd:b7:b7:89:fb:01:40:
                    c0:6f:e9:71:0a:dd:a2:0d:f1:4d:c3:67:89:48:86:
                    0a:07:5d:37:8c:4d:e8:17:55:54:c8:f2:52:e3:4a:
                    e2:91:ff:7c:84:24:f5:c6:3a:53:b3:5a:39:3b:6e:
                    b8:83:70:9a:85:41:7a:e1:26:9b:02:34:c5:d4:a4:
                    22:c4:85:94:36:75:b1:71:a4:4f:c2:35:ab:a6:e7:
                    c5:a4:48:81:82:b8:c4:db:c5:4f:c5:08:ef:d9:c2:
                    ba:40:70:4e:4d:2e:a4:69:af:bb:ae:e3:ff:9c:80:
                    cf:fa:ee:5d:c8:b9:69:3e:2f:9d:38:4a:00:a4:57:
                    df:b0:83:93:0b:65:c6:fa:57:48:54:e3:8f:c9:01:
                    8f:87:14:b1:47:3d:a2:4f:6f:bd:a2:22:6b:7a:db:
                    35:ad:c3:60:12:ed:fe:92:c1:52:ec:ad:8d:e5:30:
                    e2:cf:aa:59:c5:8d:6f:87:d2:47:b1:71:96:db:58:
                    ee:04:e3:10:9f:20:6f:1a:59:08:42:07:f2:7e:94:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:D9:AC:D4:B0:66:4E:03:12:C9:F6:42:48:CF:F9:83:09:25:F0
            X509v3 Authority Key Identifier:
                keyid:97:93:AA:AD:DB:B4:1B:56:44:D5:96:B5:F7:E7:CB:B6:EC:2D:23:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:6f:1b:76:59:17:a6:cd:64:7f:a8:18:4f:32:3a:2c:61:
         a6:e3:90:c4:98:6f:15:6a:19:84:d5:3c:b9:26:3d:b0:02:e4:
         68:b2:79:62:bb:40:17:4d:eb:ed:44:ad:9d:1b:ea:b4:1e:c0:
         e3:ee:3f:e4:2c:14:70:71:8f:7b:f7:41:bd:2f:ad:94:b5:8c:
         63:51:e4:d2:f8:4e:8f:8c:5a:88:e1:14:1e:c4:b4:f1:05:31:
         78:b3:87:8b:fe:f9:cd:c7:7d:fa:f7:9c:72:ea:e0:f3:52:5e:
         10:b4:f9:b8:6e:c1:c8:d0:43:bd:d5:75:3f:df:56:43:36:5f:
         2d:e4:1f:7f:bf:44:ee:aa:f2:8a:a0:80:c8:95:46:e3:5a:2d:
         77:0f:9c:26:de:86:e9:28:3e:b4:88:de:92:87:4c:13:8b:f4:
         10:4a:e5:59:a3:7e:66:da:d4:64:16:15:6c:bd:75:fd:10:2c:
         60:85:81:9c:74:9d:4e:6d:0c:93:3c:84:ae:95:9d:20:1e:ab:
         32:df:fe:d2:3b:7e:ba:7e:6e:bf:fa:b9:4a:5b:6d:a1:5a:3a:
         f5:76:6d:df:96:eb:90:77:ed:88:55:6d:b4:ca:04:68:6a:f1:
         02:83:90:82:7f:c4:b8:65:8f:e4:a8:c8:cd:0e:c7:ec:40:cf:
         a8:42:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----