Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/35BA79467AFBA82F9D34CB16476547B728D9D1D1.mft
File:                     35BA79467AFBA82F9D34CB16476547B728D9D1D1.mft (raw, json)
Hash identifier:          Rps4hbflyvCqoT5kMOuz0Ncp6ddVVYuV31KF/2Wn62c=
Subject key identifier:   71:7E:2D:B7:E4:8B:9E:38:0A:8F:07:2D:C1:34:F2:F6:E4:31:35:55
Authority key identifier: 35:BA:79:46:7A:FB:A8:2F:9D:34:CB:16:47:65:47:B7:28:D9:D1:D1
Certificate issuer:       /CN=35BA79467AFBA82F9D34CB16476547B728D9D1D1
Certificate serial:       48AFE4A27FF2429C93B291FB5AE4863CE6618274
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35BA79467AFBA82F9D34CB16476547B728D9D1D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/35BA79467AFBA82F9D34CB16476547B728D9D1D1.mft
Manifest number:          0219
Signing time:             Sat 25 Feb 2023 22:48:12 +0000
Manifest this update:     Sat 25 Feb 2023 22:43:12 +0000
Manifest next update:     Mon 27 Feb 2023 01:55:12 +0000
Files and hashes:         1: 323830343a343433303a3a2f33322d3438203d3e20323637363038.roa (hash: 8xTpx5avkhX/9Mee25ityBagq2ScYZsKYMwcMeIpytc=)
                          2: 34352e37312e3132382e302f32322d3234203d3e20323637363038.roa (hash: CTGK6hcltRDNr0Io/gxG0cgqyDbvb1v0CdJW7j5XqSs=)
                          3: 35BA79467AFBA82F9D34CB16476547B728D9D1D1.crl (hash: JiS9lNx1K5atE6xp0qXPSEqja7I8+z7K8oenAcC1aMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:af:e4:a2:7f:f2:42:9c:93:b2:91:fb:5a:e4:86:3c:e6:61:82:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35BA79467AFBA82F9D34CB16476547B728D9D1D1
        Validity
            Not Before: Feb 25 22:43:12 2023 GMT
            Not After : Feb 27 01:55:12 2023 GMT
        Subject: CN=717E2DB7E48B9E380A8F072DC134F2F6E4313555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:7d:78:f1:6a:d5:a0:04:94:74:d1:3e:9c:
                    65:7a:6f:67:8f:ed:a8:65:46:c6:01:ef:93:cc:ec:
                    ad:25:52:78:a3:13:72:71:e2:77:d6:f0:29:e9:c2:
                    5d:0d:93:df:a0:e3:99:f1:1b:4b:e1:a8:e6:6f:63:
                    49:eb:84:60:39:bc:ad:75:85:f2:1d:04:ac:b8:ad:
                    97:52:e9:e4:1b:0a:f4:58:0f:61:95:eb:1e:d0:fe:
                    e2:77:2a:5f:03:ab:09:e2:c8:d0:4a:26:a4:9c:e0:
                    7f:bc:d7:5d:95:7e:9c:5c:24:98:08:18:1d:72:5d:
                    70:5c:98:a9:87:4b:b2:ab:da:54:1a:5f:0f:6f:4c:
                    ef:ab:7b:02:bf:e0:82:04:9b:e6:aa:7b:e8:bc:91:
                    2f:1f:26:d1:fc:9e:41:ba:32:b7:f2:d2:25:66:3b:
                    c1:01:0b:33:47:a1:6d:a0:4d:86:90:88:f2:5d:70:
                    49:d9:8c:42:37:65:26:3f:cd:bb:15:43:e1:bf:7f:
                    fc:84:d2:94:07:b2:42:a2:ca:28:40:83:36:08:c1:
                    83:13:7b:02:e0:df:ff:dc:bf:9a:d8:3d:d6:41:2d:
                    28:ec:b5:b7:98:ff:65:bb:2b:62:fd:88:3a:bc:6d:
                    cb:9d:fb:d6:54:9e:fe:10:56:0c:9f:51:7d:d6:e5:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:2D:B7:E4:8B:9E:38:0A:8F:07:2D:C1:34:F2:F6:E4:31:35:55
            X509v3 Authority Key Identifier:
                keyid:35:BA:79:46:7A:FB:A8:2F:9D:34:CB:16:47:65:47:B7:28:D9:D1:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/35BA79467AFBA82F9D34CB16476547B728D9D1D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35BA79467AFBA82F9D34CB16476547B728D9D1D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/35BA79467AFBA82F9D34CB16476547B728D9D1D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:f1:4a:0f:b5:e7:f5:2d:42:bc:c6:58:1c:dd:09:f8:6f:
         82:f7:df:11:89:db:96:60:de:81:83:95:10:43:44:cb:5b:3e:
         67:1d:6b:a7:73:71:2e:04:0e:4d:05:15:82:99:21:4a:a2:13:
         c6:12:05:3d:6e:20:da:6d:6f:a2:8d:7f:35:06:0e:97:e6:56:
         6d:d2:cd:8d:7e:c9:72:f7:50:bd:a3:a4:3b:09:d8:ce:a1:72:
         ec:66:87:af:70:72:4f:21:06:66:cf:c5:b6:fd:19:98:55:76:
         28:18:02:68:88:cb:79:bc:11:d1:87:2a:dc:59:bf:0a:f4:ce:
         1b:74:8e:a7:7c:17:d6:80:95:20:19:9a:d9:26:86:b9:9c:d3:
         4f:e1:63:ca:4a:51:29:c0:5a:cd:60:6c:d5:62:d7:5e:f7:2e:
         6b:f4:29:75:3a:48:4e:f1:15:af:c3:01:b7:94:ff:a6:a8:63:
         fb:2f:e5:eb:18:a0:ba:98:1d:bc:de:af:5b:22:08:78:b9:ee:
         51:58:a0:f7:31:26:15:aa:77:f1:c0:84:b5:b4:20:af:d6:33:
         54:c1:5c:00:dc:6b:3b:35:e3:00:ae:2e:74:17:5e:36:10:30:
         f2:68:67:17:64:64:e3:33:22:1d:8b:b3:de:02:73:65:d8:fb:
         e3:b4:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----