Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.mft
File:                     5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.mft (raw, json)
Hash identifier:          A2VaWSfhgIsoiMDqKRF+7PTu6OqEwL7tHuvBICP85uU=
Subject key identifier:   0D:AB:B8:C2:DD:E8:06:24:8A:4C:5F:19:09:44:0D:F0:B9:1C:FE:FC
Authority key identifier: 5D:E2:7C:AC:76:D0:2D:07:B1:A1:EC:1E:10:81:0E:D5:D7:5B:A7:6C
Certificate issuer:       /CN=5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C
Certificate serial:       0EEE42EAEF3AAC70A716BCBA544B30C1264CD460
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.mft
Manifest number:          02A1
Signing time:             Sun 11 Jun 2023 03:58:57 +0000
Manifest this update:     Sun 11 Jun 2023 03:53:57 +0000
Manifest next update:     Mon 12 Jun 2023 04:36:57 +0000
Files and hashes:         1: 323830343a366266633a3a2f33322d3334203d3e20323730343338.roa (hash: Jnvj7nppyS3yb2vJ38piiJF5rL1KZzf0FU3GPJudt/4=)
                          2: 3230302e31312e3130382e302f32322d3234203d3e20323730343338.roa (hash: ApgF3WeD7xpEAUfx9S6F7aV7mW7X4T4Nj3GpW+BhRQg=)
                          3: 5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.crl (hash: J7rpQnS+5u082FCDqsUnIY5tjHdNgcf/k9WnyZ08/Ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ee:42:ea:ef:3a:ac:70:a7:16:bc:ba:54:4b:30:c1:26:4c:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C
        Validity
            Not Before: Jun 11 03:53:57 2023 GMT
            Not After : Jun 12 04:36:57 2023 GMT
        Subject: CN=0DABB8C2DDE806248A4C5F1909440DF0B91CFEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:f9:62:0f:71:24:c5:78:1d:e0:57:b2:cd:
                    bc:4f:bd:16:ae:c3:4b:2a:d9:28:aa:c9:dd:34:54:
                    27:00:48:04:c2:c3:73:f0:8c:81:c0:a4:be:25:43:
                    f1:5a:1e:9a:77:f6:d4:17:07:70:af:9d:29:6f:6b:
                    55:e6:3f:d9:73:c1:88:15:0b:77:40:c1:1d:60:45:
                    c1:f3:36:14:7b:07:df:fb:3d:1f:ee:78:80:96:3c:
                    27:5f:cb:e4:d5:97:7f:0e:69:37:97:17:9a:00:64:
                    75:99:0a:5b:9f:46:82:3d:30:26:81:43:88:77:1b:
                    3d:8c:d7:b4:2e:f9:da:10:24:5d:83:74:13:30:6e:
                    01:82:cd:eb:9b:e1:c3:1f:fa:c5:79:31:3c:c7:4f:
                    fd:8b:e9:90:86:38:94:c2:c7:07:6c:10:ae:c1:99:
                    bc:1e:de:3b:0f:9b:64:5a:c0:e1:6b:8e:86:eb:67:
                    83:6c:09:32:21:b4:8a:df:41:db:d9:8a:c7:55:57:
                    d1:12:0d:2e:36:73:a5:06:d9:81:32:be:1b:ad:4f:
                    07:83:fb:01:c4:de:37:05:fa:fa:91:5e:74:5f:b8:
                    fe:c2:00:75:da:1d:cd:96:2d:31:ca:67:62:b5:e7:
                    18:47:f1:86:98:50:51:b9:7f:25:0e:d4:ba:b9:05:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:B8:C2:DD:E8:06:24:8A:4C:5F:19:09:44:0D:F0:B9:1C:FE:FC
            X509v3 Authority Key Identifier:
                keyid:5D:E2:7C:AC:76:D0:2D:07:B1:A1:EC:1E:10:81:0E:D5:D7:5B:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/5DE27CAC76D02D07B1A1EC1E10810ED5D75BA76C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:5b:e4:66:69:8c:6f:67:08:55:57:9a:a6:ac:10:a1:65:
         a5:6c:32:63:84:c5:ee:3b:68:96:53:30:24:43:f1:be:48:fc:
         ac:ab:2f:0d:38:20:06:26:64:79:9c:6e:00:05:09:10:d2:a5:
         6f:94:18:9d:cc:35:e5:6e:5d:8b:13:62:49:26:56:31:21:f1:
         c2:26:44:2b:a0:7d:ce:50:bd:4f:d6:c4:6c:1b:19:df:1e:3e:
         10:98:08:81:41:ad:7e:7c:36:ac:a4:5c:5a:ff:8e:9d:09:da:
         79:f9:e3:8f:91:07:93:8e:87:62:81:a0:35:c1:fd:97:60:d9:
         bf:d5:91:10:1f:fc:22:6e:6a:1f:63:a1:e5:c1:bd:36:48:30:
         b1:0b:1c:3f:c1:22:af:e9:ef:ba:16:ee:1c:86:2f:bb:8c:70:
         dd:41:eb:5f:c2:45:a9:d5:c7:37:48:0a:d3:f2:a5:9f:0b:26:
         27:5a:59:c8:73:36:3d:9b:5d:14:9d:c8:a0:f6:a9:90:8f:f2:
         44:0d:e1:f8:de:f3:35:0b:74:b5:22:b3:55:e6:86:6b:ef:c6:
         d4:cd:06:93:98:71:32:9b:c6:46:2c:0a:0c:9f:c1:6e:6b:b5:
         95:8c:2d:d5:ca:77:df:d1:e9:93:0d:e8:7b:0c:60:39:44:5f:
         58:11:58:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----