Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.mft
File:                     AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.mft (raw, json)
Hash identifier:          c1UaWptB+zCh1O//Vkotf/WOzWjgkY14CXqka5eEMK4=
Subject key identifier:   29:5E:B3:7B:3B:DA:9A:1F:61:D5:80:46:54:D3:50:DF:65:BE:F1:9C
Authority key identifier: AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A
Certificate issuer:       /CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
Certificate serial:       2C4B85325ECC9EA87D52AD99FA55E386D17F171A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.mft
Manifest number:          04EA
Signing time:             Fri 18 Aug 2023 02:12:43 +0000
Manifest this update:     Fri 18 Aug 2023 02:07:43 +0000
Manifest next update:     Sat 19 Aug 2023 02:21:43 +0000
Files and hashes:         1: 3137302e38322e3134302e302f32322d3234203d3e20323634343034.roa (hash: S3kyJf2cv+k9C/GSYPycZ9FTTUY9qQdQ9oLBNoOvH7Q=)
                          2: 3133382e3235352e31362e302f32322d3234203d3e20323634343034.roa (hash: gWgUJPte8ehCKc32fLRiF+DQ6R3xw7IbH4cOPZrq8Iw=)
                          3: 3133312e3136312e3232382e302f32322d3234203d3e20323634343034.roa (hash: XkBMGjByLKz7VwhSV6f8C+NgWb1OzPGZfVfYi9+Ws3Y=)
                          4: 323830343a316466383a3a2f33322d3334203d3e20323634343034.roa (hash: 0L/vZZjmz/odA5mpayhIZ8IU/lsIr4Gr8SMCYsyoW8I=)
                          5: AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.crl (hash: S3z3varaLZa9qmgBJXx1DhEoJRSE/Op4xlRqcVFcGqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4b:85:32:5e:cc:9e:a8:7d:52:ad:99:fa:55:e3:86:d1:7f:17:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
        Validity
            Not Before: Aug 18 02:07:43 2023 GMT
            Not After : Aug 19 02:21:43 2023 GMT
        Subject: CN=295EB37B3BDA9A1F61D5804654D350DF65BEF19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:38:43:e9:63:ab:e5:b7:18:e6:80:7f:73:
                    3f:40:53:3a:a6:8a:e1:49:95:a7:11:20:50:14:54:
                    a4:81:c3:34:c2:94:28:9a:af:a0:cd:03:23:c6:89:
                    d5:19:20:cf:0a:8e:08:c6:1c:10:ce:02:df:a8:a0:
                    25:e7:f2:0e:33:c1:db:ef:0e:eb:60:74:ef:f3:26:
                    51:48:19:71:64:2a:c2:5c:a2:c4:b6:d0:82:85:1d:
                    64:11:51:99:ac:e9:39:80:1d:e2:0d:d4:47:07:13:
                    80:75:43:ac:0c:87:35:64:91:c7:61:5c:7f:16:86:
                    0b:cd:40:25:1b:bc:1d:27:ca:88:67:87:02:a4:7c:
                    06:c4:e9:65:9b:62:e6:dc:7c:0c:07:fc:db:ae:e0:
                    55:8e:e8:80:46:9c:8c:5d:9f:37:07:45:d6:c2:be:
                    eb:fe:84:a1:c6:3b:90:9b:8b:29:e8:6b:9a:a2:af:
                    16:77:8a:76:93:fe:30:fb:99:48:b0:1e:06:4d:7f:
                    8f:0a:fe:63:00:79:0f:9f:d5:14:3e:4f:d5:a9:7e:
                    31:e8:b4:b0:65:5d:85:f8:d5:31:0b:c3:c6:e9:c8:
                    4c:4c:6e:d7:f1:d2:6d:85:69:4e:2b:54:bf:ac:57:
                    ad:11:bc:47:30:5b:12:af:22:22:67:ea:4d:7f:e1:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5E:B3:7B:3B:DA:9A:1F:61:D5:80:46:54:D3:50:DF:65:BE:F1:9C
            X509v3 Authority Key Identifier:
                keyid:AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:89:ee:14:60:3c:dc:2c:ac:02:7e:81:5f:eb:63:27:da:9f:
         4d:ca:75:ea:c0:d2:4a:27:98:ca:a8:81:9b:b4:b3:58:19:d1:
         a8:6e:d8:e7:3b:95:3d:37:3a:22:a1:28:b3:55:1c:fc:e2:55:
         7a:9c:36:3f:03:b4:d8:70:92:5b:66:04:20:bf:f6:d8:c1:d5:
         b0:5c:de:ef:bb:a3:d2:54:b4:7f:88:21:b5:76:91:97:8f:36:
         27:18:67:7f:8a:7e:19:d3:d7:0f:66:2e:34:21:a0:8a:c2:b8:
         d7:28:25:ac:88:33:ca:c1:16:06:84:7e:a4:4e:d9:cf:e0:de:
         70:07:45:b4:62:b7:2c:15:27:4e:82:74:ee:5c:86:44:b6:6c:
         15:87:72:82:69:00:11:1c:13:c8:a7:f8:2a:f6:ef:f0:85:0a:
         c7:6f:b7:b0:15:c1:82:18:cd:54:19:e8:8b:c2:8f:f2:a6:5f:
         b4:db:60:82:1c:15:a8:48:51:4b:e2:3c:4b:41:5f:2c:8f:a8:
         5d:41:8e:83:c8:10:e8:12:88:7e:93:e2:33:71:37:d4:3f:b8:
         c9:18:6c:c9:3c:f5:c8:5c:84:3f:65:45:b3:f0:f6:3f:e9:9e:
         7a:cf:64:81:15:63:39:ba:ad:16:69:8a:1e:db:29:4a:b5:69:
         34:c0:ac:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----