Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft
File:                     458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft (raw, json)
Hash identifier:          RmYVD9vPuuaIUeoQNCvw2lswWUOOIhgSCTHeyl+JO1Y=
Subject key identifier:   CB:49:E5:56:3D:74:FC:FB:D1:29:18:72:8D:A0:BA:89:B1:BD:57:0D
Authority key identifier: 45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99
Certificate issuer:       /CN=458B0DFA16A8C630CACC3AE2F4E4CAB234C09299
Certificate serial:       7D20CA750BDD35F5F86C54ABEE73F604669409CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft
Manifest number:          6D
Signing time:             Tue 18 Apr 2023 03:27:38 +0000
Manifest this update:     Tue 18 Apr 2023 03:22:38 +0000
Manifest next update:     Wed 19 Apr 2023 05:47:38 +0000
Files and hashes:         1: 3134332e302e38342e302f32322d3234203d3e20323633393938.roa (hash: AM3u7NuEzBuxrKsSI8QIFLKqtX5MmkapoPcxSNFPGsw=)
                          2: 323830343a323931633a3a2f33322d3430203d3e20323633393938.roa (hash: X+K2F50KU6fMxcvaYD3huK/BeARAdBJoh1Zhzm+X5dE=)
                          3: 458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.crl (hash: HFUDaTWgPgxTF7qOa3o+O6cjZUF4t6D9wRu05s+8ty4=)
                          4: 3137302e3234352e3230302e302f32322d3234203d3e20323633393938.roa (hash: EMKpjyOFAR7bZULFQz+gDW/eAKLCo3W1hQSxqzh2k7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:20:ca:75:0b:dd:35:f5:f8:6c:54:ab:ee:73:f6:04:66:94:09:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458B0DFA16A8C630CACC3AE2F4E4CAB234C09299
        Validity
            Not Before: Apr 18 03:22:38 2023 GMT
            Not After : Apr 19 05:47:38 2023 GMT
        Subject: CN=CB49E5563D74FCFBD12918728DA0BA89B1BD570D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:5e:59:9d:da:8f:6f:23:49:7f:dd:c4:ea:
                    3b:d7:00:34:38:df:2a:90:b8:39:bc:bd:31:31:34:
                    28:bd:88:f4:a1:77:3a:ca:08:1f:c5:93:dd:62:19:
                    5c:4b:49:66:ad:43:64:47:c2:fc:0c:25:ca:3f:72:
                    b7:00:b5:ea:c4:4e:62:a7:1c:05:2d:d7:5e:9c:e5:
                    8c:31:62:15:90:a9:33:31:c9:6b:ef:3c:88:4f:06:
                    cb:c1:ca:21:b5:cd:39:d0:98:26:42:80:e4:d9:1c:
                    56:ae:25:82:89:fe:6f:ca:79:26:e1:b7:bd:f2:75:
                    96:09:d8:c7:a4:a9:14:ac:c3:ac:5a:6c:40:01:3a:
                    dd:f0:fb:67:f7:3c:9d:fe:fc:d0:50:26:93:02:29:
                    03:4e:bb:21:43:25:11:27:9a:8c:e7:6b:fd:20:bc:
                    6b:d3:c9:e8:90:f5:50:9b:ed:4c:b6:be:01:d5:cb:
                    23:f4:0b:2e:78:e3:58:9e:c9:92:00:7a:75:e4:59:
                    07:b0:b6:d5:c6:12:28:fe:19:2d:ac:31:5a:df:96:
                    74:46:0b:09:2d:ca:f3:96:84:29:a9:62:82:bc:20:
                    ec:3a:13:d5:9c:ab:0c:d7:3b:91:02:5f:6c:a8:23:
                    46:1d:47:a2:23:07:d9:56:a7:45:e4:43:dc:3e:a0:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:49:E5:56:3D:74:FC:FB:D1:29:18:72:8D:A0:BA:89:B1:BD:57:0D
            X509v3 Authority Key Identifier:
                keyid:45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:a6:d8:22:96:7b:75:fb:46:0f:56:f8:16:2d:10:29:60:
         63:13:fe:21:7d:f2:1a:13:02:61:b7:ca:07:d2:e8:b9:1b:1a:
         63:d6:7c:17:3e:da:24:fa:da:6a:a3:03:ea:ae:65:8f:2d:d7:
         04:e9:30:e2:aa:f5:f5:9a:67:e6:be:66:69:42:d1:f3:ee:49:
         c7:11:cb:8a:f0:9a:ba:e2:14:54:4a:20:2a:aa:e8:9f:42:c5:
         7a:25:4e:cd:7e:17:87:1d:f4:b7:11:78:52:9e:1f:e0:ac:02:
         cf:46:dd:83:8d:bb:d0:c9:13:72:15:36:cc:c1:6e:ef:78:a8:
         76:13:c6:c0:6a:79:0e:64:e6:5f:9c:ba:31:f2:66:22:fc:df:
         6f:45:6d:b3:e4:b3:9f:15:c7:28:d2:20:34:7f:08:a9:4d:d8:
         0e:10:84:21:45:d3:c1:33:12:33:15:2b:be:9c:8f:d3:77:66:
         80:53:87:4a:30:4e:fc:bf:26:c5:03:74:1f:bd:2d:bf:d2:56:
         38:58:c7:b2:d4:28:3b:fa:cb:15:cb:36:bd:a6:77:16:40:95:
         f8:57:f1:17:5f:3d:1a:04:69:14:4b:f9:8b:0e:b9:79:e9:16:
         bd:5b:2f:c5:64:d5:7e:47:a2:88:1a:8b:59:a0:48:9c:87:1d:
         1f:90:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----