Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.mft
File:                     E6E99B76C28F539A3F44FFE68785195ADB3B5A33.mft (raw, json)
Hash identifier:          uB7BAda4DFEr/xSiLUP+5Z+WOv4SJcgn4qQ21LemPIs=
Subject key identifier:   5E:1F:BA:52:F8:AE:D6:06:75:C9:87:5A:0A:83:DC:03:0B:48:C7:59
Authority key identifier: E6:E9:9B:76:C2:8F:53:9A:3F:44:FF:E6:87:85:19:5A:DB:3B:5A:33
Certificate issuer:       /CN=E6E99B76C28F539A3F44FFE68785195ADB3B5A33
Certificate serial:       1789C9D1A361D505E7678CA8CB140BA0A2E8434D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.mft
Manifest number:          022A
Signing time:             Mon 15 Aug 2022 13:10:00 +0000
Manifest this update:     Mon 15 Aug 2022 13:05:00 +0000
Manifest next update:     Tue 16 Aug 2022 13:10:00 +0000
Files and hashes:         1: 323830343a366262303a3a2f33322d3438203d3e20323730343137.roa (hash: 3XOf9FdR7lvDd1zqrN3bnnxUbTyS+S96p8ZMGSV+8xU=)
                          2: E6E99B76C28F539A3F44FFE68785195ADB3B5A33.crl (hash: B9QjgGXMN1wkhL18PM48d7gDGtlpKB2PboAwwndDGgE=)
                          3: 3139302e3131312e3130382e302f32322d3234203d3e20323730343137.roa (hash: Q6bnRbKRPDxslnXo9uHGmMGyENZwjgK6IjFhq8cguWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:89:c9:d1:a3:61:d5:05:e7:67:8c:a8:cb:14:0b:a0:a2:e8:43:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E99B76C28F539A3F44FFE68785195ADB3B5A33
        Validity
            Not Before: Aug 15 13:05:00 2022 GMT
            Not After : Aug 22 13:10:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:81:fc:df:e5:b8:22:68:b6:29:b6:9a:74:
                    1e:14:14:cd:68:b5:8b:73:94:3b:90:d4:03:fd:f9:
                    4f:84:83:b2:91:8e:b5:e1:ce:17:fa:21:79:83:3b:
                    06:c8:a1:00:c3:4f:bc:af:57:70:b5:d3:f0:a1:98:
                    10:14:36:35:10:0e:ce:aa:ee:7d:4e:c0:7c:7d:d0:
                    a1:b5:8d:bd:0a:2d:20:57:95:cb:aa:17:a8:56:f4:
                    45:ab:15:66:3f:54:81:cd:61:ee:80:9e:cc:9d:56:
                    24:5b:17:07:56:ae:52:61:be:5a:05:f9:5d:06:f5:
                    12:7b:13:17:92:2e:11:ba:21:39:b6:e8:f4:13:70:
                    52:61:c5:6e:53:9f:e9:ed:66:53:26:e0:b3:3f:7a:
                    6b:60:ed:b4:27:eb:ad:47:6b:69:f2:5a:b9:8e:5c:
                    fa:8c:0f:7f:35:06:18:6f:24:56:1f:3f:dd:59:ba:
                    e3:85:ed:c5:98:59:84:c8:c9:1e:14:ed:40:c3:1a:
                    f9:19:75:ae:d2:13:e6:01:47:cb:1b:4a:43:ac:a5:
                    ec:25:f0:ab:5c:5a:c6:f2:20:63:a2:6d:06:da:02:
                    4b:0b:e0:39:0d:b6:92:2a:0e:33:bb:fb:3a:f8:4f:
                    d5:d8:ce:0c:2a:4a:36:fe:e5:98:cf:12:cb:79:c8:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:BA:52:F8:AE:D6:06:75:C9:87:5A:0A:83:DC:03:0B:48:C7:59
            X509v3 Authority Key Identifier:
                keyid:E6:E9:9B:76:C2:8F:53:9A:3F:44:FF:E6:87:85:19:5A:DB:3B:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/E6E99B76C28F539A3F44FFE68785195ADB3B5A33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:d7:bf:4b:b0:e4:b5:a7:d7:05:8f:e4:02:b8:bd:96:1f:
         b0:84:c3:cb:10:e8:48:7b:45:fa:17:34:c9:e9:45:be:d8:eb:
         95:14:c9:6c:e4:7c:a2:c8:53:c1:f0:11:76:1d:54:19:f1:42:
         a5:83:66:8a:59:3d:11:7f:1e:04:b3:e1:8a:64:dd:70:38:fb:
         d7:df:e4:ea:be:d2:83:40:9a:5c:1a:ea:e4:ad:27:d7:6d:5d:
         f2:26:71:df:89:31:2a:ac:88:6a:8f:be:5e:c2:88:1b:f5:11:
         21:af:ef:de:da:4b:4c:18:62:14:04:81:24:84:59:5e:42:0f:
         23:f7:5d:0e:77:86:bd:2a:43:c5:95:6c:aa:af:05:18:0e:28:
         76:d3:d7:e5:02:ff:63:87:5c:1d:ba:33:fc:19:04:36:7d:24:
         4e:b9:84:1d:94:16:b6:ef:97:5e:32:ac:d0:ca:22:4c:05:c2:
         e7:a1:61:f9:3e:bd:05:10:19:0b:88:c3:bf:db:b7:45:27:68:
         1a:f3:d2:1c:a5:ee:3a:69:f5:02:a1:c2:2c:b5:ca:39:66:d4:
         56:36:17:98:97:9d:d6:0d:07:11:c8:f5:34:bd:49:03:cb:6a:
         90:f4:b3:af:4c:0c:20:7a:b6:12:11:e1:6f:b2:c1:71:e5:f4:
         a0:40:c3:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----