Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.mft
File:                     837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.mft (raw, json)
Hash identifier:          RMQ+vkhTRtwcBowCY+5qVmS4paIMHXHTjZKJN9i81h4=
Subject key identifier:   F7:73:41:B5:70:F2:F0:38:8F:EE:63:B6:17:7D:2F:B8:C2:5E:F4:3E
Authority key identifier: 83:76:77:D7:23:D7:FC:D0:2F:F6:A6:A9:0F:34:2D:E2:A4:C2:F6:D1
Certificate issuer:       /CN=837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1
Certificate serial:       0FABA3DDC2EC9DD926EC8C40DCEFAE0653121E19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.mft
Manifest number:          02AD
Signing time:             Tue 13 Jun 2023 18:40:00 +0000
Manifest this update:     Tue 13 Jun 2023 18:35:00 +0000
Manifest next update:     Wed 14 Jun 2023 21:28:00 +0000
Files and hashes:         1: 837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.crl (hash: okUgxTZkF/frOnEBsXaEnc0qcTjIV1gQgfbJdVbDJXg=)
                          2: 3133382e3132322e3133362e302f32322d3234203d3e20323634333239.roa (hash: KhL3byRXORDCDmZPctPuQgKSky1Son5D6X4unxZ/91k=)
                          3: 323830343a323635633a3a2f33322d3336203d3e20323634333239.roa (hash: R4+/aprhP5NMukhA7zTgzJKIBI5r0Re/UX8OvJ4TAlA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ab:a3:dd:c2:ec:9d:d9:26:ec:8c:40:dc:ef:ae:06:53:12:1e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1
        Validity
            Not Before: Jun 13 18:35:00 2023 GMT
            Not After : Jun 14 21:28:00 2023 GMT
        Subject: CN=F77341B570F2F0388FEE63B6177D2FB8C25EF43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:c4:95:8e:05:91:71:8b:d5:77:7b:b2:0a:
                    16:fb:68:34:36:27:28:a1:fa:53:46:61:af:18:52:
                    ff:29:cb:df:c4:e6:a2:95:ef:a7:0a:c7:f2:29:01:
                    a2:c2:79:eb:e9:38:ed:e6:66:bf:df:93:cf:af:ec:
                    47:39:1c:3b:58:53:a6:8a:c6:ad:be:dc:98:65:18:
                    52:54:9a:11:b4:c1:41:70:4c:1c:32:26:55:58:31:
                    9f:67:fe:16:44:23:ea:aa:82:f9:26:fd:99:1e:bc:
                    43:5f:f6:36:4e:ad:fd:9f:e8:c8:b4:b2:8f:f1:7f:
                    d2:1b:09:40:b0:d8:99:e8:00:cc:80:d6:67:6b:02:
                    91:1d:9e:ef:af:a9:5d:56:24:71:bf:76:d5:ae:42:
                    71:cb:a0:d7:7b:46:b9:76:84:e4:a8:9b:73:b7:80:
                    5e:7b:67:5a:f2:bd:19:04:1f:67:78:e1:9e:26:94:
                    f1:15:5d:09:ec:5a:19:11:4a:7f:e4:33:61:f7:f2:
                    9e:74:52:a7:76:65:a3:d3:bb:03:b2:75:30:dc:b9:
                    73:7b:a0:3f:e3:fb:fc:bf:f0:a6:bd:b8:05:87:13:
                    a1:62:f4:70:9e:18:dd:e5:24:80:29:50:ac:28:7b:
                    11:c0:a8:c2:56:d1:02:b9:a2:c0:de:9c:1c:8c:ec:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:73:41:B5:70:F2:F0:38:8F:EE:63:B6:17:7D:2F:B8:C2:5E:F4:3E
            X509v3 Authority Key Identifier:
                keyid:83:76:77:D7:23:D7:FC:D0:2F:F6:A6:A9:0F:34:2D:E2:A4:C2:F6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/837677D723D7FCD02FF6A6A90F342DE2A4C2F6D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:77:6f:bb:fd:13:0e:22:5d:3e:16:47:dd:4c:3b:ff:0e:7d:
         7e:50:3a:21:79:02:57:49:c3:f1:27:20:03:cd:d9:5f:0e:31:
         5c:c8:c5:47:5e:0c:91:91:aa:a6:4f:da:82:db:fa:54:53:d0:
         13:bf:8a:fd:58:6d:29:07:29:23:ba:33:e0:5a:c5:85:d8:be:
         55:9c:8c:6a:b6:b9:83:08:f6:b2:e0:45:95:15:96:87:04:c4:
         db:44:7c:d6:56:ca:e1:3f:2c:c5:f1:46:9b:d5:bf:1a:51:7a:
         ac:97:e7:32:4b:8f:eb:2c:f3:f7:77:74:c0:eb:10:54:fd:87:
         76:a3:5d:49:06:89:05:12:8b:8a:b0:e9:23:a5:f4:1b:f7:91:
         b3:86:1e:26:93:2f:61:74:77:a6:38:6f:ed:a6:07:3b:36:0d:
         fe:c7:95:46:a4:fb:0b:2e:48:6c:07:95:7e:a6:71:cb:6d:6e:
         92:6d:63:d8:7f:24:6e:fc:c2:ac:1d:4d:f9:86:33:ee:1f:87:
         26:32:94:89:3a:71:b0:f2:59:5c:8b:42:a4:75:e0:6f:8a:26:
         46:81:74:8f:9c:72:16:4b:68:f2:14:27:13:14:15:45:cd:d6:
         95:fe:74:9c:e6:c4:93:7e:9c:72:75:45:e3:70:a2:64:eb:24:
         bd:9d:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----