Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.mft
File:                     61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.mft (raw, json)
Hash identifier:          HG/WSJjvLWBT7qYT+i5lWx2D2HzMkW9NWX2P0DoHoFo=
Subject key identifier:   23:98:73:A4:96:B5:35:D2:93:18:92:57:9C:6C:F5:48:78:0C:7F:BC
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       69A636D883EF297576ABBD0D18EC60A82B107493
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.mft
Manifest number:          0422
Signing time:             Fri 22 Sep 2023 09:20:00 +0000
Manifest this update:     Fri 22 Sep 2023 09:15:00 +0000
Manifest next update:     Sat 23 Sep 2023 09:20:00 +0000
Files and hashes:         1: 3133382e3230342e3234332e302f32342d3234203d3e20323633393133.roa (hash: qh/zZrl0ZuPO7TW6NLs9OjV3bGlzQV64Gu8MtN98t+Q=)
                          2: 323830343a323739633a3a2f33322d3332203d3e20323633393133.roa (hash: urc82SbqwybhbBWfZotITn9yEygYAWCz2+aW5KYx3ZU=)
                          3: 3133382e3230342e3234322e302f32332d3233203d3e20323633393133.roa (hash: 6GyF3QMVyeeu6fmjBWHUEwtTKUsQ1HrEWGLvpQ6mXUw=)
                          4: 61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl (hash: MIZd4071khxkfKOGILcdQzO9iZ24qsQpDJI/gcE+Y4o=)
                          5: 3137302e3233312e3231392e302f32342d3234203d3e20323633393133.roa (hash: rxIRzbeKm7l9Kozk3QvgGGimY/J2XL+6cPasMEtRNOo=)
                          6: 3137302e3233312e3231382e302f32342d3234203d3e20323633393133.roa (hash: EURbavaTtywS3s1uzmrD5T1jlxNVfhcead5PcPR3CSY=)
                          7: 3137302e3233312e3231362e302f32322d3232203d3e20323633393133.roa (hash: UZEBR+yBxr1xUVKTN98OPAPoi7s/KWNJxvk9/WHOg0M=)
                          8: 3133382e3230342e3234312e302f32342d3234203d3e20323633393133.roa (hash: asS7hbZt0F5zIS2t6WRap4vLJ7G5rwtEfvC1DpQNdNc=)
                          9: 3133382e3230342e3234302e302f32332d3233203d3e20323633393133.roa (hash: 2WY0+CWOOlxcu5JMGThLZ8XQudZlyKh2Kmwtdhn+1+M=)
                          10: 3133382e3230342e3234302e302f32342d3234203d3e20323633393133.roa (hash: 2sVl5+/6s4WSqDHBChAvsqfOwV73McQGrlOJtL8IdNQ=)
                          11: 3133382e3230342e3234322e302f32342d3234203d3e20323633393133.roa (hash: PTLdxagYLPzr3/0lkB4QFpg/58/I+rMtkM/zXs99SBg=)
                          12: 3137302e3233312e3231372e302f32342d3234203d3e20323633393133.roa (hash: iRQCi/Ri2Om80fMRnFXFdRtNwMiyIPFkvidOV7qTMAk=)
                          13: 3137302e3233312e3231362e302f32342d3234203d3e20323633393133.roa (hash: JbcOkOlv2wIr01PkIEiFHo0bmkEHlRqOdJIkBO3pZjg=)
                          14: 3133382e3230342e3234302e302f32322d3232203d3e20323633393133.roa (hash: 3h4Rk4u4zR+KOpPwm4fpZG7DMudu6CyUBJJteQ3UWxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a6:36:d8:83:ef:29:75:76:ab:bd:0d:18:ec:60:a8:2b:10:74:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Sep 22 09:15:00 2023 GMT
            Not After : Sep 23 09:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:07:e7:22:75:75:59:88:b9:45:28:ee:73:
                    86:76:30:d8:d3:fb:05:a9:36:17:b0:30:ae:82:d3:
                    bd:f1:b5:d4:64:55:5c:7c:b7:41:3e:7f:a8:c8:80:
                    31:c7:38:05:5e:1c:a6:12:6b:2d:2a:f7:1d:01:14:
                    2b:8e:71:c5:6b:8c:94:70:28:78:1a:89:b9:53:01:
                    87:3e:7e:39:4c:86:a5:04:f6:10:1e:52:58:21:73:
                    84:3a:20:17:82:67:20:55:d7:5b:1c:a1:fc:5b:46:
                    fa:dd:46:52:89:97:1e:70:f9:be:ed:79:ba:fc:49:
                    4b:7f:d5:19:cc:1e:62:c1:8d:af:92:07:48:3f:89:
                    28:c0:03:ee:17:04:e3:6e:73:c6:0a:06:f8:6f:33:
                    13:b1:57:6b:55:80:46:9f:3b:3d:cf:e1:f0:96:84:
                    92:cd:1a:a9:81:c9:1d:24:c0:1e:2f:63:21:c9:d1:
                    06:28:ae:a0:76:0d:67:86:45:a3:46:9f:35:e5:96:
                    ad:ad:44:cd:f4:cd:05:c6:81:c4:bb:3e:68:9b:3f:
                    a0:92:38:36:de:ae:b6:bd:42:77:c5:41:97:a3:38:
                    9e:95:e8:32:c6:44:cb:e3:68:f1:31:f5:f6:c8:9d:
                    00:cc:e4:bf:d1:74:be:90:4a:89:dc:d6:a2:66:83:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:98:73:A4:96:B5:35:D2:93:18:92:57:9C:6C:F5:48:78:0C:7F:BC
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:03:e7:cf:82:a3:ee:d3:8e:31:d1:8c:1e:ed:59:1f:1e:7d:
         98:fb:21:d5:f8:ea:46:eb:20:a8:fc:33:0f:12:6e:a8:bb:df:
         a3:e2:60:c1:a6:7d:7f:65:c5:6b:77:ca:fc:d9:a7:ea:cc:79:
         a3:bb:95:f5:18:01:f8:89:34:e5:eb:b5:dc:8f:8a:ad:b6:37:
         32:d1:1c:c9:14:bc:ac:24:8d:79:af:50:44:08:f4:46:25:a9:
         13:49:73:fa:0c:0d:6a:ec:1f:1e:67:d0:0f:c5:b3:e6:1c:87:
         f6:4b:62:4c:2d:6b:c3:c5:ab:3d:8e:91:ce:bf:34:45:63:2f:
         c0:1e:91:eb:62:43:a3:f1:de:ab:1e:13:6a:dc:54:1f:76:1e:
         79:fd:c3:03:ff:78:26:1e:f9:4e:03:34:83:78:8f:b3:6b:25:
         94:70:18:9b:ac:6a:e8:84:1a:5a:75:11:21:0c:41:dc:93:98:
         a4:43:60:cc:fd:65:fe:20:32:2e:78:58:e4:7f:bf:f5:d4:25:
         a2:ad:78:c1:76:18:fd:4e:df:bf:08:6f:32:1f:60:fd:dc:63:
         e4:72:b4:a0:4e:09:8b:a2:82:3f:54:9f:68:87:71:cc:4b:3e:
         7c:f9:2d:ea:55:3a:2f:2a:ff:0c:3e:eb:2b:8a:a1:db:70:fe:
         0f:00:14:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----