Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/14AD04B7B12E0FB321FDAA7C53B69773656F3341.mft
File:                     14AD04B7B12E0FB321FDAA7C53B69773656F3341.mft (raw, json)
Hash identifier:          5OkBlJ4o+RevM/wo8arGhJBYXo8qimx7+ZPBYftJgnE=
Subject key identifier:   FA:8F:4A:06:48:C1:30:B3:55:96:E6:D1:FB:1E:AA:F3:B6:69:08:09
Authority key identifier: 14:AD:04:B7:B1:2E:0F:B3:21:FD:AA:7C:53:B6:97:73:65:6F:33:41
Certificate issuer:       /CN=14AD04B7B12E0FB321FDAA7C53B69773656F3341
Certificate serial:       098336DCB5ADA1567692936EBD0452B039194932
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AD04B7B12E0FB321FDAA7C53B69773656F3341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/14AD04B7B12E0FB321FDAA7C53B69773656F3341.mft
Manifest number:          13
Signing time:             Wed 22 Jun 2022 08:53:21 +0000
Manifest this update:     Wed 22 Jun 2022 08:48:21 +0000
Manifest next update:     Thu 23 Jun 2022 12:00:21 +0000
Files and hashes:         1: 323830343a363061343a3a2f33322d3332203d3e203532393339.roa (hash: egXIIcNkIXChtOv/g/XTtDZOv+upn4P3qO71vK5zw20=)
                          2: 14AD04B7B12E0FB321FDAA7C53B69773656F3341.crl (hash: EC5kccbFIiVlfYfVPkk36QS7U0UKXYl4jQGkuAqKnC0=)
                          3: 3137372e31312e38342e302f32322d3232203d3e203532393339.roa (hash: aX9eMmWEJkvTnYFnbyddbCAi7upqRijBF30T7f1WrWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:83:36:dc:b5:ad:a1:56:76:92:93:6e:bd:04:52:b0:39:19:49:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14AD04B7B12E0FB321FDAA7C53B69773656F3341
        Validity
            Not Before: Jun 22 08:48:21 2022 GMT
            Not After : Jun 23 12:00:21 2022 GMT
        Subject: CN=FA8F4A0648C130B35596E6D1FB1EAAF3B6690809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:7e:c9:6a:82:2c:f6:21:2b:48:f6:8d:ac:
                    4a:73:14:f0:ba:22:b0:2c:2e:30:4b:ae:53:41:4e:
                    b3:39:b7:03:b8:48:27:d4:eb:f9:70:2f:e9:31:4d:
                    5b:0b:e6:52:53:4d:52:29:21:1e:d4:ba:19:04:c5:
                    62:c7:53:72:28:bc:b8:2c:ee:f4:09:dc:ed:d5:02:
                    21:e7:e0:f5:9b:1d:98:43:45:a2:38:35:7b:f3:b5:
                    60:db:eb:e9:11:37:a5:0c:d4:d6:54:42:4f:14:5d:
                    da:00:6c:f8:5f:0f:6c:4f:f9:33:86:4f:fe:ad:61:
                    26:e6:a8:eb:9a:f6:ad:69:12:4c:d5:a4:bd:56:bc:
                    2f:53:17:c1:3f:9b:c6:65:8a:60:8e:6e:16:cd:81:
                    6f:e9:16:90:b2:6c:0d:5a:c3:f3:9f:67:97:84:1f:
                    03:19:cc:0a:c0:e1:86:de:02:c9:2c:a2:e8:83:5c:
                    f6:40:80:ed:60:07:d8:ef:33:c2:a3:7b:10:2b:6e:
                    a4:75:fb:1f:b3:51:75:93:4d:4b:a1:de:32:9e:01:
                    9e:e5:4a:33:75:0e:44:da:80:e1:ab:ec:83:03:8d:
                    2c:f7:a5:62:82:26:ec:8e:fe:8b:d3:ce:ed:77:d3:
                    61:7f:21:14:7b:b4:c6:75:25:99:06:1f:fe:95:fc:
                    c6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:4A:06:48:C1:30:B3:55:96:E6:D1:FB:1E:AA:F3:B6:69:08:09
            X509v3 Authority Key Identifier:
                keyid:14:AD:04:B7:B1:2E:0F:B3:21:FD:AA:7C:53:B6:97:73:65:6F:33:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/14AD04B7B12E0FB321FDAA7C53B69773656F3341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AD04B7B12E0FB321FDAA7C53B69773656F3341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/14AD04B7B12E0FB321FDAA7C53B69773656F3341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:7a:bd:29:26:3a:76:15:44:01:c5:f5:04:07:39:8a:2d:b6:
         f4:0e:0d:23:24:1f:40:b9:cc:87:2f:00:dd:8e:d0:b0:e0:81:
         57:db:dc:79:e2:ea:f9:6d:4d:2a:f5:9a:fb:73:c3:dd:b3:32:
         36:47:04:44:05:73:33:cf:ec:99:0a:f0:db:36:15:18:3c:7e:
         66:3d:ad:21:57:04:a3:3d:bd:b1:3d:ae:78:5b:63:d6:48:d9:
         4f:22:df:f2:e3:cf:fe:65:ab:a0:b8:17:2c:1c:a5:82:8c:4e:
         8c:0e:1e:e3:8c:b2:ac:0c:f9:e8:2b:32:33:98:39:db:98:c9:
         6e:a9:9b:52:02:ff:1c:52:7b:68:d6:f2:55:62:eb:38:2b:18:
         95:50:34:87:a1:fb:6e:b8:3e:4b:62:5b:4e:30:a6:57:26:33:
         b5:f9:f3:2d:25:ea:6f:c2:68:1b:c9:73:c8:13:1a:c0:ad:04:
         ab:27:44:af:ef:3c:4a:92:4c:37:2c:fb:a6:97:ec:b1:16:94:
         40:3a:51:ac:46:a5:cf:8f:8b:d1:41:01:88:54:fa:d6:96:18:
         07:86:91:86:5c:23:fb:a9:78:10:a8:b0:80:27:84:09:92:97:
         2b:32:41:20:12:c8:98:90:a0:19:28:1d:90:80:6a:7f:0d:a4:
         be:35:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----