Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.mft
File:                     65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.mft (raw, json)
Hash identifier:          9+zmZgIImGxm3btvsq+VpVhSBAsQ9b1f92e2GL2R+aE=
Subject key identifier:   23:07:D5:9D:92:E5:84:6F:8B:FA:5D:77:A0:53:1D:41:8C:C4:AE:D4
Authority key identifier: 65:B1:AA:51:FD:5A:08:CF:DF:82:7F:BF:62:DB:B4:40:CF:EB:EF:ED
Certificate issuer:       /CN=65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED
Certificate serial:       609B4299366FDC1DB13A460D11D6CFF806F49B69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.mft
Manifest number:          03
Signing time:             Sun 10 Apr 2022 15:30:00 +0000
Manifest this update:     Sun 10 Apr 2022 15:25:00 +0000
Manifest next update:     Mon 11 Apr 2022 18:15:00 +0000
Files and hashes:         1: 3133382e39372e3139362e302f32322d3234203d3e20323634313935.roa (hash: t/d4a8+1+Y/WvBcdnZplpTrPiFonddQYZ55U0v58W/U=)
                          2: 65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.crl (hash: 2CLV8Z2mlhS+BNlfbkAcNmlSGdvgCPUbKPKmz72zBHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9b:42:99:36:6f:dc:1d:b1:3a:46:0d:11:d6:cf:f8:06:f4:9b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED
        Validity
            Not Before: Apr 10 15:25:00 2022 GMT
            Not After : Apr 11 18:15:00 2022 GMT
        Subject: CN=2307D59D92E5846F8BFA5D77A0531D418CC4AED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:74:d3:81:82:bc:0d:c5:5f:92:5a:28:74:
                    3c:1c:0a:6c:64:4d:16:bf:eb:07:f8:70:58:c7:33:
                    07:5b:a9:d6:12:50:91:71:a9:43:ad:ee:d5:b8:94:
                    e9:80:10:2d:b3:b2:ec:e0:f5:96:02:91:6c:44:f6:
                    32:dd:42:72:59:6e:06:1c:7a:b0:4d:76:3a:d1:46:
                    3a:2d:64:02:3f:6e:d2:c8:5a:68:05:e9:f8:3b:1a:
                    27:c8:22:2c:94:a4:07:08:4a:5b:0a:3c:06:13:f0:
                    53:47:fc:c1:9a:26:ed:7e:33:99:b4:ff:59:56:7d:
                    36:9c:09:46:db:b6:5e:f3:dd:5f:6c:d9:60:53:7f:
                    d0:8b:75:41:45:57:16:14:7d:e1:a8:ab:a5:f3:8b:
                    ae:f1:d6:e2:b8:fb:20:1c:78:99:23:3b:52:c0:3c:
                    c6:da:40:69:18:a3:27:38:1c:b7:df:35:85:ae:96:
                    3c:70:67:54:8f:dd:dc:e6:7e:da:27:68:72:29:5b:
                    6f:69:55:f8:c1:ac:8a:2c:80:24:e1:a8:10:56:fc:
                    b5:9a:a2:61:03:70:49:ba:11:7e:1f:33:55:49:62:
                    9c:20:12:f9:e4:b0:c0:a4:5d:a9:9b:d9:d0:71:6f:
                    22:fe:2c:e4:2b:85:e5:b1:55:32:92:d9:b5:c6:15:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:D5:9D:92:E5:84:6F:8B:FA:5D:77:A0:53:1D:41:8C:C4:AE:D4
            X509v3 Authority Key Identifier:
                keyid:65:B1:AA:51:FD:5A:08:CF:DF:82:7F:BF:62:DB:B4:40:CF:EB:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/65B1AA51FD5A08CFDF827FBF62DBB440CFEBEFED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:21:d9:77:5f:99:26:e6:95:e0:29:d6:d8:b0:ba:5f:54:
         df:a1:d4:b5:2f:ea:55:ee:23:70:80:cf:47:49:22:ad:24:9c:
         b4:07:4a:b3:5a:70:61:00:82:6d:e8:10:40:1f:48:8c:31:f4:
         64:40:89:c4:5f:0b:b0:a9:cf:51:f9:4f:f3:d5:85:18:ec:89:
         c6:6c:3f:d3:b0:9d:f7:35:36:28:99:15:f9:fe:5c:59:7f:d5:
         bb:da:92:72:8f:4d:1b:14:34:cf:68:5b:28:b5:e7:16:a1:75:
         01:b9:16:82:bc:cc:aa:d4:90:90:bf:3d:4b:98:37:e6:1d:01:
         0f:8a:4e:fb:45:72:80:ad:4f:65:a9:ed:58:89:d9:02:8b:af:
         3b:09:47:90:b6:29:83:6c:96:76:8f:37:2f:a5:c2:6c:3d:ca:
         64:cc:34:56:4f:48:fa:87:92:67:bf:62:81:07:3c:b6:97:2b:
         a5:5a:8c:b0:85:57:69:6d:3b:24:cc:3f:f0:02:c4:e4:dc:9f:
         b9:71:40:9d:8d:71:ef:7f:94:21:ee:d9:cd:da:ca:66:e5:4c:
         8d:e1:5c:85:31:84:9b:e4:66:57:73:e3:4f:c0:b4:3c:df:b9:
         00:9b:ba:07:f6:42:ae:2f:4f:64:c4:ec:33:45:0b:cf:6f:f7:
         96:9d:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----