Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft
File:                     8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft (raw, json)
Hash identifier:          UtAMW8Nu9T4dC0mZShV/vDU1W1yZ7W8hQ8TprVdB1tk=
Subject key identifier:   EC:0E:F0:4B:5D:66:6E:FA:68:77:14:19:3F:C2:FF:10:6F:5C:0F:54
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       1C7E0B3D1ABD274E825ECFAA0B980D8773484D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft
Manifest number:          55
Signing time:             Fri 16 Jun 2023 05:16:37 +0000
Manifest this update:     Fri 16 Jun 2023 05:11:37 +0000
Manifest next update:     Sat 17 Jun 2023 08:24:37 +0000
Files and hashes:         1: 3133382e302e3131322e302f32322d3234203d3e20323634353434.roa (hash: iDpdGwzW9hFuS7WrsH3xHNQZT9FgBbfLO6PSP8QG/v0=)
                          2: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (hash: qxGDIm2mFjD+/MquqDueOLn1SaFOKdi4FbowaYrYJxw=)
                          3: 8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl (hash: O2bRbd3BXercOTFX+lgHpKjhs5Z7sLWpaahkxjyeyEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7e:0b:3d:1a:bd:27:4e:82:5e:cf:aa:0b:98:0d:87:73:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Jun 16 05:11:37 2023 GMT
            Not After : Jun 17 08:24:37 2023 GMT
        Subject: CN=EC0EF04B5D666EFA687714193FC2FF106F5C0F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:cb:1b:c6:12:14:2f:f5:9a:e1:b6:cc:60:
                    d4:59:c1:01:d9:cd:ac:1d:e4:16:b4:8d:a1:7c:67:
                    cc:57:15:84:9f:08:3e:49:b1:ba:30:e6:5c:18:5e:
                    80:3e:e6:d4:4c:36:b0:8c:ee:4d:b1:99:a9:3b:50:
                    61:08:44:c4:ce:aa:7e:b7:a4:b2:57:61:ce:aa:0f:
                    f0:b2:68:90:39:c4:f8:93:36:c7:c8:91:f3:31:ee:
                    81:6d:b2:49:71:3f:73:a9:56:84:81:0f:62:f5:6a:
                    42:e8:64:7a:7d:cc:83:a4:e8:3b:3b:93:bc:dc:d8:
                    d1:9e:4c:98:5f:5e:11:d0:7f:72:a0:ca:13:b6:b7:
                    69:da:bb:e7:d2:05:3b:91:b6:41:5d:74:52:0e:98:
                    c6:97:17:a3:32:a9:d0:16:fb:d4:1e:42:f5:9e:6a:
                    f3:04:9c:bd:66:ba:30:09:1c:53:bd:40:61:0c:15:
                    a3:14:8c:48:43:15:d5:4e:b3:90:08:ed:07:31:73:
                    e2:c7:f1:11:ba:e8:9b:4e:f2:d7:92:c5:dd:f7:dc:
                    6b:d3:c6:04:e4:a1:c0:c0:af:aa:01:19:5d:04:02:
                    d8:b5:32:5f:88:9f:62:92:02:81:0d:c6:d5:7f:77:
                    32:1c:f4:09:ed:13:1b:b1:74:b5:32:2e:39:94:96:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:F0:4B:5D:66:6E:FA:68:77:14:19:3F:C2:FF:10:6F:5C:0F:54
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e5:4d:79:26:4e:f9:5c:22:d5:68:4c:40:f3:50:50:fb:53:
         55:d4:4e:ee:99:94:3c:7b:79:2c:dc:bf:d7:bb:2c:74:3a:22:
         f6:ed:11:a0:4a:69:89:17:47:8e:80:1e:0a:3f:36:29:24:31:
         c9:42:28:6e:32:f7:0d:90:6d:08:b9:f5:b4:e2:63:97:93:e8:
         fc:af:2c:64:fb:de:d2:dc:3f:89:a0:70:e6:2a:c4:06:f0:c3:
         43:bb:1c:f6:96:13:00:6b:80:d2:29:56:42:07:8f:16:e6:92:
         e7:51:b9:59:a3:4e:55:0c:12:67:8c:b4:6c:a9:67:f8:d3:c3:
         d3:27:ad:22:22:50:55:65:1c:4f:dc:cf:ac:af:f8:7a:66:7c:
         5e:05:27:b3:b2:04:9c:63:9c:57:98:8c:06:d3:93:14:ea:62:
         75:55:24:ec:ca:b8:96:6a:81:63:f0:e1:04:19:80:3e:66:53:
         10:2d:3c:be:1f:0e:4d:8e:59:c1:f6:5b:ea:9b:6d:65:42:8e:
         6f:c0:98:85:aa:78:9f:e5:f7:1d:48:e4:27:93:e5:fa:aa:87:
         3f:a0:d7:2f:15:7c:b6:58:fe:67:be:c6:79:5f:39:42:ef:2c:
         f8:52:f0:fc:e7:5e:e3:cb:d3:4c:77:e1:e3:59:c0:25:1d:aa:
         02:e8:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----