Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.mft
File:                     1F9A49C248A696B5167DAB1D9B36795298FC2EC1.mft (raw, json)
Hash identifier:          uXCQoOeo37Rdv+rBMZ0KvAOhM3h9vfHLD4G5NCEBY1I=
Subject key identifier:   EB:2A:11:CD:BB:21:1C:1D:18:AD:90:D5:50:D6:D7:5E:C9:0F:4A:BB
Authority key identifier: 1F:9A:49:C2:48:A6:96:B5:16:7D:AB:1D:9B:36:79:52:98:FC:2E:C1
Certificate issuer:       /CN=1F9A49C248A696B5167DAB1D9B36795298FC2EC1
Certificate serial:       0A24C66F428AA7F28D34B814226AABC9C4B91B91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.mft
Manifest number:          16
Signing time:             Tue 17 Oct 2023 11:51:18 +0000
Manifest this update:     Tue 17 Oct 2023 11:46:18 +0000
Manifest next update:     Wed 18 Oct 2023 14:05:18 +0000
Files and hashes:         1: 1F9A49C248A696B5167DAB1D9B36795298FC2EC1.crl (hash: eOpYIw8LbbtnqU+vsUrcPHB18kaJOxh0pu4VRQMAJRY=)
                          2: 3137392e3132352e31362e302f32322d3332203d3e20323633363235.roa (hash: JfcoAMR+PLyPY+y7+Zmh/u0dpoYBSWOy/YgsS0HGxPg=)
                          3: 323830343a313033383a3a2f33322d313238203d3e20323633363235.roa (hash: JYGHzSoiw1e4f4PmjkvS890avpbRErHYVyusN+XP9oo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:24:c6:6f:42:8a:a7:f2:8d:34:b8:14:22:6a:ab:c9:c4:b9:1b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9A49C248A696B5167DAB1D9B36795298FC2EC1
        Validity
            Not Before: Oct 17 11:46:18 2023 GMT
            Not After : Oct 18 14:05:18 2023 GMT
        Subject: CN=EB2A11CDBB211C1D18AD90D550D6D75EC90F4ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:07:f1:c1:f5:cc:67:f5:87:46:38:d6:55:
                    88:66:06:11:9d:43:e3:5a:62:87:2d:7e:4c:07:bc:
                    ed:94:10:6d:ba:c2:cb:a0:54:01:9b:c8:fb:be:60:
                    be:21:93:2f:e1:b8:45:58:af:7a:72:4f:80:fa:65:
                    d0:69:d3:50:f4:2e:77:0f:83:80:a0:a2:38:0e:41:
                    6d:25:4b:c8:72:12:15:af:7c:8e:30:76:91:1f:bd:
                    f0:74:eb:ad:20:a6:12:9d:d3:c1:fc:c1:8e:81:a6:
                    85:a9:29:65:65:04:0c:a4:bc:5a:6a:f4:88:fc:c6:
                    d4:ac:c5:16:a2:66:b0:11:fb:21:f2:bd:d3:e8:b2:
                    a6:45:84:8f:b3:07:ce:f4:94:59:4f:f7:8c:d5:37:
                    9d:1a:d9:dc:c4:22:08:2f:66:26:34:fd:3e:04:fe:
                    ee:e2:99:2d:1b:2c:86:17:1d:b7:f9:8b:17:41:e8:
                    86:55:ce:1c:43:7e:ef:94:88:27:d2:b8:b8:15:ac:
                    03:0f:58:68:54:fd:3a:a8:2a:ad:d3:1e:13:2f:8c:
                    6b:70:a1:90:6e:95:da:da:a9:9b:31:b4:00:1d:0c:
                    bf:24:8c:a1:34:36:2a:5c:5b:8a:14:19:4b:8d:2a:
                    a9:19:f7:cd:b5:be:9a:e5:e2:0c:08:47:bf:90:d8:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2A:11:CD:BB:21:1C:1D:18:AD:90:D5:50:D6:D7:5E:C9:0F:4A:BB
            X509v3 Authority Key Identifier:
                keyid:1F:9A:49:C2:48:A6:96:B5:16:7D:AB:1D:9B:36:79:52:98:FC:2E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4d:37:86:f4:bd:5d:a6:20:15:ff:7a:5f:4a:ad:a7:c7:ef:
         f2:43:a4:c8:15:72:e4:aa:d9:d6:a3:9e:79:bc:0a:ad:a9:12:
         cc:bc:31:1a:0e:dd:d9:f0:0a:3d:a3:1f:33:22:e7:09:61:71:
         35:90:70:8c:8a:68:da:4c:d2:26:a3:8b:bf:f0:e3:21:c8:9b:
         08:8b:a9:86:42:63:77:84:ea:7e:9b:51:96:e1:7b:59:e1:02:
         9f:aa:d9:dc:30:01:b1:5e:4d:58:8f:e8:9f:c2:70:75:d1:1b:
         9b:51:47:49:11:9c:67:fb:91:38:9a:b1:96:e9:ec:0b:04:13:
         b4:f5:0d:44:aa:d3:99:51:32:ff:2d:73:75:4b:8c:b3:ae:05:
         5c:11:c4:bc:a7:cf:9e:4e:40:6e:0d:ee:4e:f0:66:a9:00:08:
         46:c7:8b:63:34:4b:0c:eb:7f:e4:1e:50:0b:70:40:fa:ce:e0:
         90:3c:b3:15:02:35:62:be:a5:dd:6c:d6:15:4a:8c:15:4c:d6:
         4f:64:d7:f9:af:6b:8f:55:2d:ec:cd:01:a0:99:bc:1b:4e:b0:
         83:ea:4b:e1:16:a2:f6:fe:c6:c7:6b:f8:a4:a3:80:47:a5:92:
         ad:db:b8:9d:da:1b:48:aa:48:01:3c:b2:e0:63:ff:35:a4:9b:
         07:be:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----