Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.mft
File:                     07833EE00DABA87DB5F29925F1042F428FD9200E.mft (raw, json)
Hash identifier:          LamA49J/csAbUmzVIM9Ixh94NcG1vjjZwnozScmVvD0=
Subject key identifier:   DB:FF:62:CD:B2:45:90:EF:37:57:8C:46:23:DF:85:E1:6D:69:DE:95
Authority key identifier: 07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E
Certificate issuer:       /CN=07833EE00DABA87DB5F29925F1042F428FD9200E
Certificate serial:       45AC0D801FC7C0811E66C4C98CDB7A3C5F8A5A1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.mft
Manifest number:          39
Signing time:             Thu 20 Apr 2023 15:18:26 +0000
Manifest this update:     Thu 20 Apr 2023 15:13:26 +0000
Manifest next update:     Fri 21 Apr 2023 18:31:26 +0000
Files and hashes:         1: 07833EE00DABA87DB5F29925F1042F428FD9200E.crl (hash: +8vK71z+Tes/dQ+9AouKz2JzxnLxLtzNS2B1SdcNY2E=)
                          2: 3133382e33362e3139322e302f32322d3332203d3e20323634353835.roa (hash: 0hJ2+qKRkUuUtmRR1Uzj8ow8tPa9f2PZSgocZRPtZ/4=)
                          3: 323830343a323230303a3a2f33322d313238203d3e20323634353835.roa (hash: IaZE+xZ9vWH+OEB43MaRCvdYCRfo3G8fj8Uj/aY8c7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ac:0d:80:1f:c7:c0:81:1e:66:c4:c9:8c:db:7a:3c:5f:8a:5a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07833EE00DABA87DB5F29925F1042F428FD9200E
        Validity
            Not Before: Apr 20 15:13:26 2023 GMT
            Not After : Apr 21 18:31:26 2023 GMT
        Subject: CN=DBFF62CDB24590EF37578C4623DF85E16D69DE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:e5:20:5f:d1:93:c3:ce:9d:99:55:ae:8f:
                    58:b8:b8:5d:8a:5a:1c:a5:60:dd:46:42:9d:92:4d:
                    a7:eb:e1:1c:e3:d1:b2:49:70:4b:1c:df:83:3e:d7:
                    23:29:f0:ac:24:92:96:e4:12:01:59:cd:e6:74:78:
                    ff:0e:ba:fa:1a:fe:97:2c:e7:46:7a:bf:6a:77:5b:
                    df:c8:ce:42:f4:3f:2a:ba:36:a6:a8:45:ca:65:24:
                    08:34:25:e9:87:f2:20:73:f1:de:6f:fb:7b:b9:34:
                    42:4c:36:7f:dc:fd:ff:96:22:dd:d9:dc:4f:f4:c6:
                    06:08:34:ae:21:db:1e:85:cd:ac:59:48:d5:75:12:
                    5c:59:59:f8:9c:c4:c4:d7:c9:4e:ab:46:52:c2:ec:
                    58:1c:d6:d0:40:53:c4:8f:57:41:3b:7e:ae:4b:90:
                    82:bf:17:1e:4b:57:ba:2a:47:43:21:c6:10:90:37:
                    46:65:60:06:99:06:68:2b:95:b2:72:c4:63:51:04:
                    e4:4d:82:ad:76:e8:46:a1:f0:19:b9:64:5f:02:da:
                    e1:6b:d1:f9:21:5a:7d:24:1f:eb:3d:e0:d7:00:ca:
                    7c:dd:71:2f:e1:2a:cd:90:00:43:46:14:8c:93:34:
                    6b:66:a4:f9:2c:2c:19:19:d0:7c:4c:15:61:88:d5:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FF:62:CD:B2:45:90:EF:37:57:8C:46:23:DF:85:E1:6D:69:DE:95
            X509v3 Authority Key Identifier:
                keyid:07:83:3E:E0:0D:AB:A8:7D:B5:F2:99:25:F1:04:2F:42:8F:D9:20:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07833EE00DABA87DB5F29925F1042F428FD9200E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/07833EE00DABA87DB5F29925F1042F428FD9200E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:15:03:95:00:2f:88:02:94:86:aa:0c:3a:9b:43:b0:3e:5f:
         f5:32:87:b7:10:85:d6:9c:35:2f:ee:57:ce:2d:9c:8c:1e:7f:
         6e:d4:4d:12:de:1b:6a:dc:6d:32:ef:2d:b3:9d:1f:83:22:7a:
         15:9d:ff:f4:2d:ee:04:05:44:90:06:1c:46:e1:42:0c:ef:f7:
         f3:f3:e5:f3:9b:2c:ad:be:9d:fe:9f:f1:1e:47:db:2e:4a:40:
         cf:53:04:79:90:c9:70:14:6d:d7:ce:5f:3f:cb:73:a7:36:37:
         bd:74:c2:41:02:ec:24:09:01:82:58:89:ae:13:4f:11:50:c5:
         56:d5:f7:a7:ef:99:3a:d4:95:27:62:fd:2f:0c:b0:15:f2:15:
         d4:8b:83:5d:37:20:e3:dc:3e:00:54:ac:95:dd:4e:e3:32:f1:
         a0:d0:1a:29:6c:5e:f3:f9:92:8f:e6:7a:2d:18:74:ef:52:3e:
         fa:69:12:64:9e:c8:44:cf:f7:c5:70:74:8f:ea:fb:ff:ce:aa:
         b0:84:41:1c:08:52:5c:5f:69:95:e5:5d:16:20:12:e7:68:c5:
         67:86:99:2f:91:f9:88:b2:bf:d5:e0:8e:db:71:14:3c:f5:d4:
         a6:05:e0:cb:d6:8d:cc:09:6c:ae:f8:da:19:1b:69:a6:58:15:
         51:ee:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----