Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.mft
File:                     0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.mft (raw, json)
Hash identifier:          nmtskjRXfdQigvzaOa40R7mpYmQgsolHymbTa1dTgwc=
Subject key identifier:   CD:04:BE:5B:8D:E7:CE:82:24:96:25:0A:39:22:50:58:D6:E0:E3:47
Authority key identifier: 0E:66:52:FD:C3:CE:9A:58:5E:EE:29:A2:6C:4E:73:3A:AD:8E:CF:71
Certificate issuer:       /CN=0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71
Certificate serial:       2586A8FEDC97EF38E804432F35FA5A358DDAE22C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.mft
Manifest number:          0252
Signing time:             Thu 26 Jan 2023 12:44:04 +0000
Manifest this update:     Thu 26 Jan 2023 12:39:04 +0000
Manifest next update:     Fri 27 Jan 2023 14:04:04 +0000
Files and hashes:         1: 3138372e38362e3234302e302f32302d3234203d3e203533303732.roa (hash: eNbwJBtCtUWrUPpeSQtKDE0U7Vtm2Y5sNDRc3Hb/IC4=)
                          2: 0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.crl (hash: nlgXHlfC+8bkqkmThi1lzJnKiHcgp96Ls1fEd4ryyWc=)
                          3: 323830343a3538343a3a2f33322d3335203d3e203533303732.roa (hash: aDpNtGnsCVOulYS2ma6AUt7SsBPi50xJdFpRtPVwc3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:a8:fe:dc:97:ef:38:e8:04:43:2f:35:fa:5a:35:8d:da:e2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71
        Validity
            Not Before: Jan 26 12:39:04 2023 GMT
            Not After : Jan 27 14:04:04 2023 GMT
        Subject: CN=CD04BE5B8DE7CE822496250A39225058D6E0E347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:83:d4:60:60:ee:f7:25:c6:4e:e8:e6:14:
                    07:0e:92:74:b5:41:60:f8:47:8f:70:45:fa:fb:85:
                    a1:b6:6a:f1:93:54:32:90:09:e1:b4:ea:f2:b6:6f:
                    9a:1c:3a:4f:25:f1:ff:77:8c:9d:a2:a4:78:28:f2:
                    85:ef:a2:bc:35:fb:b5:07:81:b8:71:7c:4f:13:7c:
                    c2:90:14:2a:28:e8:c7:a4:ab:99:c9:66:36:b4:04:
                    2e:88:b2:11:40:3e:05:1e:74:4c:9d:a9:07:c9:a4:
                    09:b6:1a:99:c6:08:5d:96:70:c7:6b:e2:9a:74:69:
                    79:1b:e1:36:d8:57:9b:17:c3:bd:90:e8:5a:ba:62:
                    9d:08:10:8f:f9:02:5a:87:fb:49:3e:7b:ce:75:fd:
                    11:62:39:b0:93:d9:c6:99:0a:dd:d5:86:4b:bd:f7:
                    17:dd:53:24:c2:ee:9c:4d:6d:eb:70:50:ce:cd:99:
                    3d:03:76:66:e4:11:1b:d4:85:ea:df:8b:fa:59:3d:
                    9f:f1:db:1b:e5:15:34:9a:8d:fc:3c:59:93:26:b3:
                    dc:29:ab:fe:93:4b:a7:00:f4:67:23:ae:eb:2a:9f:
                    e8:3e:bf:a7:49:f2:e7:c8:c9:06:48:da:1d:87:00:
                    74:8c:cb:75:27:d6:2b:f0:db:27:ce:35:ea:16:8d:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:BE:5B:8D:E7:CE:82:24:96:25:0A:39:22:50:58:D6:E0:E3:47
            X509v3 Authority Key Identifier:
                keyid:0E:66:52:FD:C3:CE:9A:58:5E:EE:29:A2:6C:4E:73:3A:AD:8E:CF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/0E6652FDC3CE9A585EEE29A26C4E733AAD8ECF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:62:15:0c:e0:d7:d2:dc:b0:8d:82:9d:33:dd:51:74:9e:
         46:58:c6:a3:b0:1a:ad:d1:f4:6b:9d:20:77:18:7b:55:74:11:
         2b:5f:55:c7:ec:65:d8:4a:19:a1:7c:5c:af:8c:36:ae:aa:a7:
         e4:3e:f5:39:57:68:3e:69:bb:0f:52:17:29:6b:47:fc:ae:9d:
         72:62:7f:ec:49:0a:6f:fc:86:a4:85:31:45:f6:e9:71:4b:26:
         11:9c:14:de:96:8b:9e:7f:0d:fd:cf:35:94:20:92:cc:0f:15:
         26:e5:e2:87:28:f7:43:81:f0:32:84:ee:85:8f:ea:03:2c:6d:
         37:0c:d4:8a:8b:d3:98:b1:e3:2f:02:6c:30:e9:1a:f0:ae:69:
         82:8a:d2:98:c1:d2:10:af:8a:54:9e:56:26:da:cf:3d:99:e0:
         bd:62:d4:95:69:12:c0:f7:16:a0:94:8d:09:1d:12:3c:41:ae:
         7a:a4:1e:38:ff:19:39:31:59:c7:e7:a9:74:6f:34:c4:c7:8a:
         85:ff:f2:f5:77:03:16:66:0d:9c:db:fc:ac:c4:af:fd:26:94:
         3d:f8:69:2d:7b:d3:0e:83:2e:3d:04:db:af:85:22:4b:58:a3:
         ef:f0:38:d8:88:ba:9a:4f:de:f7:6b:4a:ef:5e:2b:0b:82:04:
         d6:4c:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----