Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.mft
File:                     B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.mft (raw, json)
Hash identifier:          pAuTkNyfyJ9UQj/aHE9NJvyw0oc+gRl8T5v2Jd7ClDM=
Subject key identifier:   33:B3:E4:FC:45:BC:BB:BF:A9:B4:5F:5B:21:28:51:66:C6:D8:95:8A
Authority key identifier: B8:DE:D0:BB:11:A7:9F:1A:40:E8:D4:D5:A7:BF:83:BC:EF:BE:4F:91
Certificate issuer:       /CN=B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91
Certificate serial:       2DD9419F051FB9A9E249B44CDAFC1CA2BAEFD951
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.mft
Manifest number:          72
Signing time:             Fri 10 Mar 2023 09:23:34 +0000
Manifest this update:     Fri 10 Mar 2023 09:18:34 +0000
Manifest next update:     Sat 11 Mar 2023 11:45:34 +0000
Files and hashes:         1: B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.crl (hash: H3sSF7I07yvfnMBN9b66gG42tCFBaTp3BZL7ip3/Ke0=)
                          2: 34352e3136322e34382e302f32322d3234203d3e20323638353239.roa (hash: P/LbvZ7FCWrRjIpLsuuNQEEdxB32Gy5pf7hZ7/csi20=)
                          3: 323830343a353239633a3a2f33322d3333203d3e20323638353239.roa (hash: PAYhX5kIQzNOaFN8LD3JO0Ve8er2c2UJQKdOfsn9oPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d9:41:9f:05:1f:b9:a9:e2:49:b4:4c:da:fc:1c:a2:ba:ef:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91
        Validity
            Not Before: Mar 10 09:18:34 2023 GMT
            Not After : Mar 11 11:45:34 2023 GMT
        Subject: CN=33B3E4FC45BCBBBFA9B45F5B21285166C6D8958A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:68:30:9c:98:e1:7c:94:37:64:1a:3e:8a:
                    fe:74:fa:c0:5f:ed:db:0c:a2:ae:00:c4:7b:c7:dc:
                    eb:c8:42:7b:97:8a:e1:66:a4:e7:0b:94:9a:c4:01:
                    09:2e:66:fe:12:ad:21:6c:e7:e9:72:5c:76:cf:56:
                    c1:0e:27:5b:d8:f9:c1:9d:fc:66:40:6f:fd:f5:20:
                    bf:04:71:85:50:ea:63:90:cd:14:d7:92:e8:a1:5a:
                    6b:c8:bd:f5:11:d4:3d:ee:90:90:b6:9e:eb:99:81:
                    41:30:e6:21:5e:26:c9:2d:54:08:90:ea:0a:2d:de:
                    21:ed:d3:31:01:93:b3:6e:52:0e:be:9f:d9:02:86:
                    10:1d:4d:c5:45:56:54:b6:ce:f4:50:a1:4d:3d:b1:
                    57:4a:d3:66:ce:90:fd:cc:ce:be:98:83:e9:bb:a3:
                    a3:3d:e1:bc:6f:5a:ed:d2:a5:b7:b9:64:57:10:3b:
                    93:ea:5b:f9:62:39:0c:e7:a0:68:7d:2b:8e:42:8f:
                    f0:d8:f7:bd:69:0b:90:ab:d5:5c:af:fc:17:0a:c4:
                    69:f0:7d:de:97:bc:63:b9:d3:4c:33:a8:91:11:85:
                    a0:9e:19:3d:4a:39:b1:e1:71:05:fd:b0:dc:c7:1d:
                    12:29:ed:be:da:7e:d6:8a:3d:c7:02:b1:f6:c1:98:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B3:E4:FC:45:BC:BB:BF:A9:B4:5F:5B:21:28:51:66:C6:D8:95:8A
            X509v3 Authority Key Identifier:
                keyid:B8:DE:D0:BB:11:A7:9F:1A:40:E8:D4:D5:A7:BF:83:BC:EF:BE:4F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e0:c1:72:f5:23:99:13:86:37:95:e3:77:7a:a9:95:85:d4:
         5d:b8:ed:ed:7d:b5:d8:6a:4a:29:99:9b:35:37:91:0b:ce:f1:
         d4:43:6e:50:3f:d4:0b:18:42:43:97:75:97:3c:8f:5b:c5:28:
         be:d2:70:f6:f5:84:df:4f:88:6d:63:59:a7:7d:19:94:c9:45:
         e2:07:28:2e:66:f8:d7:0f:e0:fe:21:74:83:86:f9:6e:8e:08:
         55:d3:82:5a:21:59:cd:9e:aa:e7:39:76:86:08:bf:42:aa:ae:
         f8:78:3a:ed:53:d8:ec:49:1d:3a:a0:76:37:f1:ed:0c:74:78:
         bd:71:ad:6c:e9:f3:b3:34:72:01:be:96:b7:a2:b3:b0:9a:29:
         79:b7:77:0d:f0:d7:84:ae:a5:08:de:a7:69:d1:e3:99:97:b1:
         5b:e8:b9:e4:40:c4:8c:90:38:26:ed:c5:9b:af:c3:ba:6d:3a:
         cb:5c:67:45:09:37:2b:6c:2b:1b:b2:56:8b:6d:33:c9:77:e9:
         4d:51:cc:71:b8:8f:04:fc:62:56:aa:16:ab:fb:4d:0b:6d:ad:
         ff:27:d8:cd:5d:36:6c:0c:cc:97:d2:28:df:09:ea:28:30:42:
         8e:68:44:ff:0b:49:85:26:9f:90:09:61:d2:55:8a:52:66:1b:
         2c:de:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----