Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.mft
File:                     235E2B01C2459F074CFD13885D3E3EBA15EB781D.mft (raw, json)
Hash identifier:          4GXT71k9Rh+lIdJPldXWccLhSX91KHRq0KnQQMWuUqo=
Subject key identifier:   80:13:C1:E2:B5:F9:C2:95:47:7D:6F:19:9A:E1:B6:39:01:BF:1B:CC
Authority key identifier: 23:5E:2B:01:C2:45:9F:07:4C:FD:13:88:5D:3E:3E:BA:15:EB:78:1D
Certificate issuer:       /CN=235E2B01C2459F074CFD13885D3E3EBA15EB781D
Certificate serial:       14C5960074A8D4433EDBA62ABEB8CCA34BC0D874
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.mft
Manifest number:          0535
Signing time:             Wed 22 Mar 2023 03:07:09 +0000
Manifest this update:     Wed 22 Mar 2023 03:02:09 +0000
Manifest next update:     Thu 23 Mar 2023 05:45:09 +0000
Files and hashes:         1: 323830343a353335633a3a2f33322d3334203d3e20323638353739.roa (hash: J5niwj+Urcp/5SK9JMAxXtQ/dyB5xkprdMnmK1cnQrs=)
                          2: 34352e3136332e3138302e302f32322d3234203d3e20323638353739.roa (hash: jYpt28ceTRXmT53vodGaiI/DvXYw+iwTVE4HtsBRjSM=)
                          3: 235E2B01C2459F074CFD13885D3E3EBA15EB781D.crl (hash: 9jxwffsTM3VKYf6fule3BzaQIujsYgitNnnImDa97cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c5:96:00:74:a8:d4:43:3e:db:a6:2a:be:b8:cc:a3:4b:c0:d8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235E2B01C2459F074CFD13885D3E3EBA15EB781D
        Validity
            Not Before: Mar 22 03:02:09 2023 GMT
            Not After : Mar 23 05:45:09 2023 GMT
        Subject: CN=8013C1E2B5F9C295477D6F199AE1B63901BF1BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:b4:c6:e8:01:f0:0b:62:9d:8b:b1:81:b1:
                    9d:7a:0a:2b:29:71:92:50:33:a2:57:1b:c1:8d:98:
                    08:58:cb:77:5e:0f:3e:70:85:ec:ac:78:e4:2e:b1:
                    aa:3a:de:07:39:a8:a9:8a:74:bf:d6:ff:76:6f:f1:
                    8c:0a:68:e7:6e:82:0d:b7:11:4f:0f:51:6c:26:25:
                    4c:b4:a7:80:f8:0e:cd:47:39:cf:7f:fe:e1:0f:87:
                    36:5d:81:3b:a1:2a:f0:d0:62:87:bd:77:df:77:01:
                    23:af:c6:e0:6d:4f:da:cd:c8:3e:ca:cc:f7:9f:96:
                    6e:33:1d:5f:48:3e:55:ca:6d:88:03:04:a0:e8:03:
                    a6:6e:10:42:98:5d:8a:06:c1:4e:4d:2c:31:cc:e9:
                    c9:f0:35:b6:1e:b4:63:94:7d:8e:6d:ed:64:5b:59:
                    19:2b:83:dc:de:e8:27:e2:2f:18:28:a3:e8:22:5b:
                    73:bf:6a:71:44:d2:e1:eb:0f:4d:e5:1c:0e:20:fa:
                    40:18:5c:6f:7b:0b:c2:6c:64:28:c5:e7:de:b6:f2:
                    55:55:74:2b:56:ca:b7:44:43:33:cd:5e:c4:3b:2f:
                    7e:4f:30:24:38:47:32:f9:ea:c4:c8:63:1b:e2:fb:
                    cb:71:d7:a3:35:77:cf:0b:46:71:e7:92:af:bc:76:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:13:C1:E2:B5:F9:C2:95:47:7D:6F:19:9A:E1:B6:39:01:BF:1B:CC
            X509v3 Authority Key Identifier:
                keyid:23:5E:2B:01:C2:45:9F:07:4C:FD:13:88:5D:3E:3E:BA:15:EB:78:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c5:43:70:2e:60:13:6c:9b:2f:d2:46:c2:2f:fd:5c:ef:e4:
         0c:e6:92:16:bf:54:a5:9b:3e:48:26:81:34:fe:7e:e7:90:85:
         4b:a7:68:19:54:c4:b7:76:94:59:b1:07:c0:70:63:04:60:96:
         e6:cb:2a:1d:cd:38:13:ae:29:a8:66:fe:19:48:e0:92:2e:81:
         6a:95:08:f1:46:c8:ae:42:75:46:ab:5d:68:23:d0:5c:d9:b8:
         56:b2:66:e2:54:16:db:54:3e:c2:da:88:67:24:ea:7d:b8:a8:
         65:5e:09:64:d7:27:8b:fb:77:76:1b:fd:76:13:bc:df:30:67:
         57:f2:83:a9:c5:b5:ab:5e:eb:7b:c8:37:e3:ca:22:f9:25:39:
         cc:a9:76:02:ef:0a:1f:d1:48:34:4c:90:1b:ae:e2:dc:61:4e:
         20:ab:d9:81:2b:a0:27:cd:1b:01:c3:0e:33:b4:d4:cd:e7:5b:
         00:1b:c3:f0:3a:4d:cb:5a:c1:1c:b2:b9:5e:2e:d2:ab:ee:4a:
         21:82:41:63:04:9a:94:52:d5:2f:c1:07:16:36:84:0e:d1:a4:
         52:d4:44:ec:97:08:15:3e:7f:75:d1:28:99:02:45:7e:61:ab:
         16:ef:46:b7:2a:0d:89:fb:99:bf:80:f5:a9:4d:bd:ae:d4:f4:
         2e:91:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----