Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.mft
File:                     0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.mft (raw, json)
Hash identifier:          LpkPYlFSZXk25NaVLV4RLAfLQwQ1cKm7PzYOaFbjwmI=
Subject key identifier:   19:D5:AF:67:CA:77:D3:93:F9:7B:01:CE:69:A5:25:6E:E9:0A:E1:07
Authority key identifier: 0B:07:09:AC:6E:EA:CC:CA:96:E1:14:5C:5E:8F:CF:AA:F9:A1:C2:2B
Certificate issuer:       /CN=0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B
Certificate serial:       386F3939E1CD92B44AD2B3822EACAD082B6114E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.mft
Manifest number:          E2
Signing time:             Fri 10 Mar 2023 09:37:13 +0000
Manifest this update:     Fri 10 Mar 2023 09:32:13 +0000
Manifest next update:     Sat 11 Mar 2023 11:54:13 +0000
Files and hashes:         1: 323830343a333535303a3a2f33322d3438203d3e20323636323830.roa (hash: kB8BIaMHiqnGsqC4kAyMmBMrTOiqX2pNYaMnOvBnr9E=)
                          2: 0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.crl (hash: U/GvWt5KRgjBFhkwg2lCMA+FUM9LJm4lQTr6u3270S0=)
                          3: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: fUNMVV3oK4dj19tCS2A5lPhxtsQXbjIKuUMPLFX+Vy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6f:39:39:e1:cd:92:b4:4a:d2:b3:82:2e:ac:ad:08:2b:61:14:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B
        Validity
            Not Before: Mar 10 09:32:13 2023 GMT
            Not After : Mar 11 11:54:13 2023 GMT
        Subject: CN=19D5AF67CA77D393F97B01CE69A5256EE90AE107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:7a:b0:09:a7:2d:69:11:05:6f:db:aa:15:
                    ff:69:c1:43:3a:83:12:2b:f0:cc:08:ff:27:4f:ce:
                    2f:07:69:72:2c:b6:bf:8e:82:c6:cd:d7:1c:0e:c2:
                    fb:3f:e4:f7:9c:bb:22:8c:23:17:ae:07:02:87:01:
                    91:2e:2f:5b:2a:90:fd:9c:ab:46:8a:ff:95:9f:b1:
                    07:7d:75:04:84:d5:df:56:81:03:c2:9d:98:e7:c7:
                    4a:1c:cb:1b:ba:c6:01:08:0c:22:21:f2:53:8b:7e:
                    d3:0b:07:54:93:a6:e3:34:f9:82:59:bf:21:e8:95:
                    96:40:f1:96:cc:c7:6d:e9:32:5f:da:be:8d:4b:df:
                    79:ac:37:6c:66:b2:e9:7c:c3:4e:9b:9c:e2:34:54:
                    c6:b2:72:f2:d6:29:95:46:0c:ab:b5:e7:bd:dc:e5:
                    ae:91:ec:68:64:61:f6:07:83:c9:63:66:c7:08:eb:
                    a3:15:7e:58:97:60:e0:78:48:96:61:17:f1:4b:43:
                    a9:c7:ba:41:3a:98:06:e8:38:47:43:cf:28:68:ed:
                    25:c6:55:7c:5f:f2:73:b8:57:af:08:1a:ed:56:3a:
                    48:bf:f2:02:90:35:1e:1f:48:30:9f:a1:1e:32:9a:
                    05:6c:a2:f6:0c:f2:11:a3:27:7d:ed:aa:d4:e6:e6:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D5:AF:67:CA:77:D3:93:F9:7B:01:CE:69:A5:25:6E:E9:0A:E1:07
            X509v3 Authority Key Identifier:
                keyid:0B:07:09:AC:6E:EA:CC:CA:96:E1:14:5C:5E:8F:CF:AA:F9:A1:C2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/0B0709AC6EEACCCA96E1145C5E8FCFAAF9A1C22B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2d:16:a0:81:53:ba:a9:7a:3b:e7:d6:e4:90:54:cf:48:c8:
         f8:c7:68:23:aa:0b:54:37:36:a6:1e:c9:79:bf:5d:c5:5c:fe:
         3b:9b:6c:e8:6e:0e:3a:af:c9:d5:32:a7:9d:24:ac:0f:f0:72:
         d6:41:22:c6:03:4a:b0:65:2a:9f:c3:ca:0c:86:14:a3:20:28:
         8f:d5:c5:fa:46:cc:89:ca:8e:8c:0d:f7:a2:48:15:2a:65:53:
         83:9c:8f:32:c8:d4:e2:b0:a6:40:bc:9f:d9:1f:a7:1a:64:02:
         bd:c0:7f:63:92:af:ef:c6:b2:b2:ad:c6:20:fd:42:8e:c4:48:
         61:c3:d8:a0:c7:6d:5d:b5:30:c9:ca:3e:0f:82:cb:29:dd:69:
         ef:b3:63:22:c6:27:aa:2c:89:d8:73:8d:3a:de:0b:2c:b6:83:
         01:27:a5:73:7e:01:c2:df:12:4e:bd:ae:f8:ca:32:80:2b:14:
         99:5b:2c:5b:f4:83:6a:39:a1:22:3a:67:0c:d1:b8:2b:95:bb:
         a5:f6:d3:3d:6b:1a:ac:57:ea:3c:29:38:f1:8f:55:7e:e9:a9:
         2e:2f:59:7a:b7:bc:ec:81:e8:b7:7d:ce:51:6e:2f:0a:c3:de:
         ba:28:de:74:04:30:5d:c7:96:95:09:29:a0:80:9d:68:21:0a:
         d8:94:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----