Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.mft
File:                     CB79DFC1DF1822D301F97D5B20B19091DB3700ED.mft (raw, json)
Hash identifier:          q0WvTPx5iUvMv5ujAp3620peI7n0PSKZJT4NYbGx3as=
Subject key identifier:   B4:BD:9C:2C:F0:5B:7D:19:40:77:D1:7F:C6:17:27:48:1D:78:59:3B
Authority key identifier: CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Certificate issuer:       /CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
Certificate serial:       1773546AD0D81FC14C992ECF727CC954CB8404B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.mft
Manifest number:          AF
Signing time:             Tue 16 May 2023 12:44:34 +0000
Manifest this update:     Tue 16 May 2023 12:39:34 +0000
Manifest next update:     Wed 17 May 2023 13:36:34 +0000
Files and hashes:         1: CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl (hash: 3MqAw1c7oFbifco62DMt5oHl6faROnmejyqCInYDtg0=)
                          2: 3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa (hash: CP5dettH5Dghp+9TzZzpl4bobeI5ZGsWHMU9oKCVA9Q=)
                          3: 323830343a323663343a3a2f33322d313238203d3e20323633383535.roa (hash: 6Sg8O4GrYp+Bw+oKTE4yhyzi/sSuwpDTLEzNh/U+dU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:73:54:6a:d0:d8:1f:c1:4c:99:2e:cf:72:7c:c9:54:cb:84:04:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Validity
            Not Before: May 16 12:39:34 2023 GMT
            Not After : May 17 13:36:34 2023 GMT
        Subject: CN=B4BD9C2CF05B7D194077D17FC61727481D78593B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:a9:8e:d3:38:85:56:22:86:b2:ef:e4:f2:
                    bd:3e:dc:0a:2f:ba:f6:66:2c:8c:e9:a5:81:1a:91:
                    f9:75:df:54:21:8e:ac:3b:c4:49:e6:1a:46:68:99:
                    db:98:88:86:b2:c4:31:a0:57:a2:8b:c5:22:cd:18:
                    42:26:3e:ad:b2:de:3b:7d:46:c2:20:81:2b:00:80:
                    33:36:1f:d4:97:3a:d7:ca:dd:bc:37:4c:0f:43:97:
                    cd:42:43:f1:0f:95:ac:ec:d1:7c:76:9a:3d:9e:d8:
                    f4:76:6f:3c:17:27:ac:f5:86:90:71:1c:53:7e:18:
                    5c:06:ce:63:1f:c6:f7:97:fe:62:f1:39:6c:67:b8:
                    4e:2d:00:89:6e:e2:7f:e8:cb:de:c0:8e:66:65:0c:
                    fa:f6:11:0f:34:f7:6a:3f:a5:de:62:74:df:6d:28:
                    41:a2:b8:10:2d:c5:dc:a5:32:34:cf:56:80:ef:15:
                    a2:54:5b:5c:7c:3f:70:c9:c9:ab:6b:d7:06:97:ff:
                    df:73:8c:fc:87:84:e4:b1:67:72:61:15:9c:df:29:
                    af:0a:f6:17:7e:e2:88:93:36:bf:03:33:39:23:3d:
                    43:aa:78:a9:65:0c:d0:9f:82:30:b7:73:d8:e1:a6:
                    99:4c:02:17:6b:08:03:35:fc:31:58:d3:42:7a:a4:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BD:9C:2C:F0:5B:7D:19:40:77:D1:7F:C6:17:27:48:1D:78:59:3B
            X509v3 Authority Key Identifier:
                keyid:CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:22:e9:e1:1b:20:ef:6e:4c:93:23:5b:5a:e3:4d:ae:2a:ad:
         0e:10:ff:70:03:77:a1:fc:3b:d2:72:45:53:87:a3:c6:6f:4d:
         37:75:86:32:fb:45:a4:ef:be:15:6b:27:21:59:3c:86:d5:31:
         37:c7:57:ea:28:80:5e:3e:49:08:30:1f:86:89:58:a5:b4:75:
         ef:d7:17:cb:fc:f1:3a:e7:de:a0:9e:52:0f:52:7d:42:52:54:
         da:93:20:94:97:51:92:54:3a:c9:b5:b8:5c:0f:be:90:e0:53:
         6c:d7:be:bd:7e:07:e3:f5:80:30:41:23:15:ae:4f:c5:1e:3d:
         77:70:2e:e3:d8:ca:f3:85:89:00:b9:bd:cf:02:a8:ab:30:30:
         da:a3:cd:dd:a9:69:c0:d6:76:20:2f:19:69:cc:23:d1:09:98:
         de:b1:1b:2e:9d:35:a3:ea:ca:ad:e3:6e:03:6e:18:7f:b9:a9:
         33:1f:13:6b:58:ba:cb:18:2c:59:73:a5:27:47:d9:02:ca:de:
         64:49:ed:d7:4e:e1:8c:f4:4a:eb:68:7d:de:5c:de:49:c6:13:
         e6:eb:93:81:80:bf:a5:91:7b:4d:d3:a8:59:68:9f:d9:58:6c:
         7e:d8:12:21:ee:f6:06:f0:21:66:16:a0:ce:7b:37:4a:1b:d8:
         d1:db:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----