Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.mft
File:                     594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.mft (raw, json)
Hash identifier:          65BtYysEOluB4u44aFRzU3fKkZVRDkuMpLf+jKHcyE4=
Subject key identifier:   41:3D:CF:8E:AF:17:EB:16:66:95:02:4F:DF:86:59:C1:10:10:88:D4
Authority key identifier: 59:4C:B2:FC:4D:9A:9B:05:8D:BD:D2:88:F8:00:FF:F3:2B:19:B6:4A
Certificate issuer:       /CN=594CB2FC4D9A9B058DBDD288F800FFF32B19B64A
Certificate serial:       6656E72F8D62679AE3C7EC096611BC3F3A6EAF13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.mft
Manifest number:          8A
Signing time:             Fri 28 Jul 2023 21:05:24 +0000
Manifest this update:     Fri 28 Jul 2023 21:00:24 +0000
Manifest next update:     Sat 29 Jul 2023 23:04:24 +0000
Files and hashes:         1: 594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.crl (hash: QLzXGnC1w3ITysguBugyqFdIZtFBHsGwZg4NM9zeHYI=)
                          2: 323830343a336164633a3a2f33322d313238203d3e20323636313134.roa (hash: nQtKX2PIxnRqdQGlRGiNPUYCQ9MmxWKqwWmnayXeQdY=)
                          3: 34352e352e3135362e302f32322d3332203d3e20323636313134.roa (hash: QnZ6A/8tj7aagZfT2PMUVBZ7Utcp3VmA1B+YWUJjWKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:56:e7:2f:8d:62:67:9a:e3:c7:ec:09:66:11:bc:3f:3a:6e:af:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594CB2FC4D9A9B058DBDD288F800FFF32B19B64A
        Validity
            Not Before: Jul 28 21:00:24 2023 GMT
            Not After : Jul 29 23:04:24 2023 GMT
        Subject: CN=413DCF8EAF17EB166695024FDF8659C1101088D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:38:9e:7c:f8:30:1d:79:31:b4:e5:75:4f:
                    1a:52:09:ed:ab:1f:30:d4:a9:ef:85:e5:6e:24:fb:
                    43:60:ea:c7:d7:74:5d:c1:d0:ce:47:33:8f:cb:c5:
                    26:93:3e:8a:d2:85:80:02:31:69:87:ac:1b:4c:4a:
                    b1:fe:e9:dc:01:d5:84:12:96:41:b5:22:6d:1c:90:
                    27:6f:20:13:28:e8:e2:1a:8c:04:4e:d2:72:15:34:
                    6f:1f:84:fa:27:5b:41:d0:69:3a:57:57:ab:ce:7b:
                    5a:a6:4e:d1:ca:ea:b2:5e:f3:0e:d1:31:c1:e1:5b:
                    f2:60:76:39:6b:f6:fc:30:ea:55:4a:7d:1e:75:fd:
                    54:39:01:38:01:ac:4a:a8:9f:3c:3c:fb:79:91:b8:
                    38:48:50:60:c2:08:7e:2a:20:82:92:00:80:f2:34:
                    e6:23:82:95:c2:32:d6:b7:52:ea:7f:a6:be:e9:d8:
                    a7:1d:be:0a:25:83:a8:95:a5:a6:15:dd:ab:62:b7:
                    da:c2:02:c7:15:84:54:72:14:58:f1:9b:3d:89:6d:
                    b1:ad:27:2a:56:b3:90:07:1e:ff:48:8f:a5:f1:7f:
                    33:f2:d6:a2:40:7a:cc:32:07:5f:73:3e:96:09:9f:
                    81:ab:dd:c9:d7:c0:8d:86:1c:eb:2c:ce:12:2d:bd:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3D:CF:8E:AF:17:EB:16:66:95:02:4F:DF:86:59:C1:10:10:88:D4
            X509v3 Authority Key Identifier:
                keyid:59:4C:B2:FC:4D:9A:9B:05:8D:BD:D2:88:F8:00:FF:F3:2B:19:B6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/594CB2FC4D9A9B058DBDD288F800FFF32B19B64A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:20:f9:a7:d5:d3:68:f8:92:31:6a:55:c3:b6:c3:fc:e1:
         51:00:7b:92:30:6d:a2:ab:64:5d:e0:a7:55:89:89:54:db:fa:
         d6:77:2e:2c:0a:ce:74:ae:16:20:d7:75:01:61:e4:be:85:f4:
         01:b7:d6:26:de:b6:71:62:8d:bd:f1:ab:4a:ee:cf:9b:e2:25:
         80:2b:52:ab:36:10:04:b0:64:db:18:71:0a:b4:54:09:4a:7f:
         41:9d:86:1e:a5:56:d4:8b:69:53:bb:eb:81:80:cf:65:0e:2c:
         71:2e:30:b0:89:a2:9a:3c:d2:09:cc:61:03:54:dd:05:ec:19:
         dc:a8:85:8f:72:32:5a:8b:7f:8f:15:75:b3:04:65:30:41:b3:
         b1:6e:95:6e:9b:b3:32:97:26:ef:e8:48:35:fd:ac:f7:b6:dc:
         12:1e:fb:ea:b8:92:88:a4:c0:eb:da:04:2d:e3:cb:4f:3a:ad:
         17:a1:f5:c9:c8:5b:2e:9f:e8:a5:ad:29:87:97:e3:67:7b:83:
         cb:54:6a:a8:9d:86:0f:68:dd:e9:ae:d2:a9:0d:ea:59:5f:5b:
         18:5e:1d:85:0c:c9:88:42:c4:f4:ec:86:5c:be:07:d1:e9:f1:
         a3:3c:02:94:f9:8f:9f:c1:df:76:4d:62:68:b7:54:bb:bf:d6:
         89:4a:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----