Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/4C8845E4E384AABFB0CDE270138FDC9D17E08A17.mft
File:                     4C8845E4E384AABFB0CDE270138FDC9D17E08A17.mft (raw, json)
Hash identifier:          nQYC9hDVi5oVHsv6RuO04+UbLmmLia4s3RtSr6JbdHE=
Subject key identifier:   43:37:A0:71:7D:E8:0C:4C:F9:50:43:E6:DE:61:B5:5E:F0:84:BB:4E
Authority key identifier: 4C:88:45:E4:E3:84:AA:BF:B0:CD:E2:70:13:8F:DC:9D:17:E0:8A:17
Certificate issuer:       /CN=4C8845E4E384AABFB0CDE270138FDC9D17E08A17
Certificate serial:       27C7C7997A9A506101955F8A8E1D88295C83175C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8845E4E384AABFB0CDE270138FDC9D17E08A17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/4C8845E4E384AABFB0CDE270138FDC9D17E08A17.mft
Manifest number:          1B
Signing time:             Sun 22 Oct 2023 22:05:20 +0000
Manifest this update:     Sun 22 Oct 2023 22:00:20 +0000
Manifest next update:     Tue 24 Oct 2023 01:17:20 +0000
Files and hashes:         1: 3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa (hash: wzvUoIyMNqK47zUk0LKbW4tb8K6YIYRcMr7UvrafLGg=)
                          2: 323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (hash: NhrGRCy2nHoPv3vFfat/KUInnxpZAkoFn8dc5i3xOdE=)
                          3: 4C8845E4E384AABFB0CDE270138FDC9D17E08A17.crl (hash: KzhclM4qgNoqs3FUTsVcBK5wcqjP4CWo+6DkdczhHyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c7:c7:99:7a:9a:50:61:01:95:5f:8a:8e:1d:88:29:5c:83:17:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8845E4E384AABFB0CDE270138FDC9D17E08A17
        Validity
            Not Before: Oct 22 22:00:20 2023 GMT
            Not After : Oct 24 01:17:20 2023 GMT
        Subject: CN=4337A0717DE80C4CF95043E6DE61B55EF084BB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:80:99:9e:ff:6c:bc:61:80:8e:e0:6b:92:
                    9d:9d:4c:52:74:6a:3e:cf:34:3b:6a:30:29:20:10:
                    34:04:ab:71:ad:ee:0f:ee:1e:73:63:57:8f:f8:10:
                    5f:51:f5:d7:1a:b6:a9:e2:89:ef:dd:81:e6:21:da:
                    07:ea:51:66:69:24:92:32:ed:ba:bd:de:e7:7b:6e:
                    49:15:00:23:2e:cb:5b:76:dd:b4:17:97:c9:3e:17:
                    c5:5f:e6:a5:79:85:df:ab:94:62:a9:0e:56:50:2a:
                    d0:94:b0:1a:9b:1f:5b:62:fd:17:43:9f:20:e0:56:
                    a8:8a:fc:08:f8:92:ec:b4:43:6d:4c:4d:54:40:d5:
                    64:4c:32:26:a9:93:3b:bd:61:f4:02:1b:6a:d7:38:
                    30:9d:ba:6e:e5:31:92:8d:d5:99:ef:66:5e:b1:74:
                    83:4a:13:4d:f0:40:e5:f7:91:90:61:cb:47:02:66:
                    74:d2:b2:40:6d:74:4e:72:83:f2:13:70:15:5e:27:
                    32:f9:c0:7d:57:13:17:0c:14:6b:7d:b3:2e:44:8f:
                    fb:40:b3:9d:40:cc:a4:c0:6e:9f:7f:f4:b0:ff:6b:
                    49:e4:7b:1f:f8:f3:aa:80:e3:1f:bf:13:26:0e:fe:
                    e4:4b:5e:2f:89:7d:b0:78:38:b5:07:a7:67:30:94:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:A0:71:7D:E8:0C:4C:F9:50:43:E6:DE:61:B5:5E:F0:84:BB:4E
            X509v3 Authority Key Identifier:
                keyid:4C:88:45:E4:E3:84:AA:BF:B0:CD:E2:70:13:8F:DC:9D:17:E0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/4C8845E4E384AABFB0CDE270138FDC9D17E08A17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C8845E4E384AABFB0CDE270138FDC9D17E08A17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/4C8845E4E384AABFB0CDE270138FDC9D17E08A17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:54:d2:e2:fd:69:0d:25:dc:e9:f9:d5:45:aa:d2:35:96:
         cd:cd:8a:ac:66:39:92:e0:74:2f:77:04:74:a2:aa:93:e3:56:
         e9:a9:ff:9a:36:32:04:ac:a6:b2:fb:18:23:b8:ee:14:db:87:
         be:2a:7e:c9:27:2b:ec:a6:ab:ff:3e:5f:5e:8b:a9:b5:58:9d:
         89:f9:7e:81:ac:7d:8e:4c:63:99:7d:12:29:f9:ac:65:36:cc:
         d1:5b:18:c0:89:96:b0:93:59:82:6d:66:14:68:c3:43:d7:ed:
         44:86:51:03:5a:3e:bd:81:f7:4c:b5:d4:b7:21:88:e1:6b:9d:
         fc:11:23:66:e5:c0:ee:88:e8:1e:d5:06:f7:f2:73:39:54:da:
         3b:b1:e3:0f:3e:38:a1:f4:f4:10:21:0a:93:30:65:a4:43:58:
         01:d5:c2:82:1b:87:9b:b9:9a:81:18:b0:f1:a6:be:b6:dd:71:
         b6:35:d3:e9:5a:1c:d4:71:6a:b4:7f:36:a0:16:3b:4a:80:00:
         79:47:ab:98:00:41:dd:ba:0a:cc:9d:16:3a:ff:ae:03:af:6b:
         84:ed:da:69:37:73:eb:6d:2b:31:85:9b:9b:be:fb:20:4b:20:
         a9:c7:89:98:23:15:dd:54:a1:40:48:70:e3:ec:50:95:73:6d:
         5c:98:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----