Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.mft
File:                     115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.mft (raw, json)
Hash identifier:          cr6w7+otVCxNO0+mzcOb+uvoId9JLx6xcID530n+zDo=
Subject key identifier:   56:51:82:F1:56:53:19:68:63:BB:8C:B2:01:21:D9:94:EB:71:05:A6
Authority key identifier: 11:5B:D5:FA:AC:7A:C0:2C:56:D3:72:A4:7E:AF:DA:2B:67:C3:19:8A
Certificate issuer:       /CN=115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A
Certificate serial:       41C4B0F8E10CDC9DD6175453F2A9935F575BF5BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.mft
Manifest number:          8A
Signing time:             Sat 26 Aug 2023 10:31:44 +0000
Manifest this update:     Sat 26 Aug 2023 10:26:44 +0000
Manifest next update:     Sun 27 Aug 2023 10:49:44 +0000
Files and hashes:         1: 323830343a326162633a3a2f33322d313238203d3e20323634303931.roa (hash: oJ7RJR6lZF+K12HL7CiQyrhL3Disq18qc78eRE2K4FU=)
                          2: 3134332e3230382e3132382e302f32322d3332203d3e20323634303931.roa (hash: r88Jv8u0nFZUiwZVLzSEmjlueDeSQfHoM+L69OgIr3o=)
                          3: 115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.crl (hash: mDcs9jW6B74OWBR9T53fAbOGYEpKgNKVYXFxlSfOyVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c4:b0:f8:e1:0c:dc:9d:d6:17:54:53:f2:a9:93:5f:57:5b:f5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A
        Validity
            Not Before: Aug 26 10:26:44 2023 GMT
            Not After : Aug 27 10:49:44 2023 GMT
        Subject: CN=565182F15653196863BB8CB20121D994EB7105A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:81:0f:26:c6:bf:39:b4:de:9d:12:0e:c4:
                    e5:17:3f:49:64:95:02:67:fd:96:ea:6c:9f:d7:a4:
                    98:1d:df:a7:03:a1:83:9b:39:61:6c:30:b8:8f:6c:
                    99:c9:ab:90:22:55:36:e6:69:a6:6b:90:26:44:f1:
                    3f:a8:79:d8:7a:e9:37:f7:dc:8d:a9:19:8e:47:f2:
                    b4:81:b3:f5:ec:52:4c:00:8c:d9:57:29:bd:88:90:
                    6c:b9:c2:45:97:bd:24:56:65:a7:3b:d2:24:c9:82:
                    a5:88:3f:c2:40:76:cd:18:48:64:db:4a:af:db:29:
                    df:d4:c6:41:76:a8:fc:c7:f0:a1:6a:14:a5:4c:44:
                    31:04:a1:b9:be:d8:52:bf:76:b6:cb:e5:6b:37:e0:
                    ac:a9:74:30:d4:a8:b0:88:8c:d5:2a:cf:74:15:eb:
                    16:1b:a3:63:79:6e:87:ca:ab:8b:ef:7a:7d:94:ee:
                    ff:a9:2e:5b:86:0c:8d:71:6e:68:08:76:ab:c0:1e:
                    b9:19:3d:bb:35:b9:cd:81:9d:7e:61:5b:af:4d:a2:
                    74:77:2b:d3:83:41:49:ac:78:9e:ea:11:de:5b:66:
                    82:3c:7e:6f:de:ef:83:f5:9d:44:60:48:68:f9:d2:
                    b1:a2:f0:1a:0d:f5:0e:36:ec:8a:27:cd:be:51:ee:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:82:F1:56:53:19:68:63:BB:8C:B2:01:21:D9:94:EB:71:05:A6
            X509v3 Authority Key Identifier:
                keyid:11:5B:D5:FA:AC:7A:C0:2C:56:D3:72:A4:7E:AF:DA:2B:67:C3:19:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/115BD5FAAC7AC02C56D372A47EAFDA2B67C3198A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:a8:2c:95:58:a8:4a:b9:1a:24:d3:2a:24:23:88:55:4b:
         62:ef:66:a1:35:fe:5f:fd:e4:2b:a0:9d:58:4c:0b:71:13:32:
         93:9f:4d:c4:e4:1d:ae:c5:c3:ea:44:bf:b8:87:20:54:97:58:
         0f:55:fd:ea:24:92:aa:37:d2:13:af:23:65:f8:e8:a0:f6:84:
         8d:0e:e9:f1:f6:9d:ba:bc:71:09:ae:8d:65:7d:80:03:81:7c:
         61:b0:c4:82:cb:0b:d2:c1:f9:15:55:3d:f8:c2:7e:2d:29:b0:
         37:19:53:61:df:1f:6f:ac:ac:e0:e1:7e:76:24:26:f7:10:ba:
         56:d8:1a:e8:40:fc:fc:71:e4:19:92:2d:f7:0d:00:00:f4:92:
         4c:69:ce:d5:42:8a:c0:6e:b8:59:ff:21:a4:42:f5:ac:0e:78:
         ce:64:de:32:74:03:54:d4:70:ea:9b:b5:41:57:0a:7e:f6:c5:
         f8:ac:0e:d3:cf:4c:b4:46:92:9a:32:58:2a:fa:31:f3:fd:2e:
         4b:2a:00:92:8b:20:55:40:06:ca:56:5e:67:24:55:68:aa:c0:
         5e:cc:6d:c0:0e:0e:bd:eb:80:68:b0:5d:8f:d5:54:25:ac:79:
         21:f6:5f:d6:9d:97:54:f0:e2:ce:ea:11:6a:fe:10:8f:29:4b:
         d4:47:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----