Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.mft
File:                     43A0CC77B7FDD53F8542952069B48C25D2B5F450.mft (raw, json)
Hash identifier:          Lk7oQQeyo0QWTNANt80NbSX8k86yWOEquVeauuNpEbE=
Subject key identifier:   0D:52:4A:D0:32:75:5F:5F:A9:AF:F0:5C:A7:E4:86:E7:3D:C2:87:30
Authority key identifier: 43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50
Certificate issuer:       /CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
Certificate serial:       1B50CC283B7234191B32A3F94EFE7F2B20B91CC1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.mft
Manifest number:          69
Signing time:             Mon 17 Jul 2023 10:06:02 +0000
Manifest this update:     Mon 17 Jul 2023 10:01:02 +0000
Manifest next update:     Tue 18 Jul 2023 10:49:02 +0000
Files and hashes:         1: 3139302e35322e37362e302f32342d3332203d3e20323731333533.roa (hash: lLqetP5nER6DxptMtvfVvPFdi0KKpoeqO5w+FdRe6qA=)
                          2: 43A0CC77B7FDD53F8542952069B48C25D2B5F450.crl (hash: 6EAfiZYa6YXGRszR5bbpLAUmWdcYVdwwtUXOC9Q9R6o=)
                          3: 323830343a376133303a3a2f33322d313238203d3e20323731333533.roa (hash: ZYjxQBfXkBkLqj6wppXote3L6Vvkp8yOC3sC2Cpyg7s=)
                          4: 3139302e35322e37372e302f32342d3332203d3e20323731333533.roa (hash: O4/IEw9sYwlj0bYSzmp++GmqFq/ppHETYlMfjshtwnI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:50:cc:28:3b:72:34:19:1b:32:a3:f9:4e:fe:7f:2b:20:b9:1c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A0CC77B7FDD53F8542952069B48C25D2B5F450
        Validity
            Not Before: Jul 17 10:01:02 2023 GMT
            Not After : Jul 18 10:49:02 2023 GMT
        Subject: CN=0D524AD032755F5FA9AFF05CA7E486E73DC28730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:ad:ab:39:a5:e7:01:a6:31:44:c1:54:85:
                    59:4b:a3:11:05:97:0d:2c:82:69:a9:74:b8:fb:b6:
                    40:27:3f:bc:19:85:b4:8e:b4:26:b3:fb:d3:74:18:
                    8e:a3:3c:73:d7:68:e7:87:89:f5:2a:52:7a:5b:9b:
                    40:55:25:20:b2:72:ca:ff:9f:05:ca:43:ce:3d:a2:
                    02:db:42:da:e7:c6:14:aa:10:11:80:33:33:7e:04:
                    43:ff:15:8c:21:b1:c5:2f:ed:9f:66:f6:0f:f4:02:
                    1e:7f:e7:54:19:3e:78:dd:65:24:db:f2:a5:71:94:
                    1c:0c:4f:cd:35:53:9a:ad:f1:af:7c:9b:a5:bf:3b:
                    24:b7:1a:75:e5:3b:ee:b7:9c:4b:57:51:e0:06:7d:
                    b3:5f:01:35:78:7f:b0:82:89:30:a2:e2:da:a6:fd:
                    5c:1d:b0:c1:f2:cc:a4:37:b9:e8:85:06:2b:2f:91:
                    af:ab:97:36:fc:d5:57:86:2b:e9:31:6f:05:6c:26:
                    b2:de:28:1d:cf:72:9c:2d:b4:83:8e:42:ec:f2:f2:
                    eb:02:c1:44:f1:14:b5:1c:6f:53:21:d6:6e:40:9d:
                    fc:43:78:af:f4:c8:f9:63:ea:33:60:b7:f5:9f:68:
                    ae:1d:01:cd:83:c3:c3:87:e0:16:77:19:5a:c5:09:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:4A:D0:32:75:5F:5F:A9:AF:F0:5C:A7:E4:86:E7:3D:C2:87:30
            X509v3 Authority Key Identifier:
                keyid:43:A0:CC:77:B7:FD:D5:3F:85:42:95:20:69:B4:8C:25:D2:B5:F4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/43A0CC77B7FDD53F8542952069B48C25D2B5F450.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:59:c2:6e:7f:c9:87:d0:1d:45:bd:4b:64:b5:5c:cc:f1:47:
         b1:3f:0a:c9:20:5a:61:77:12:28:28:ee:f2:9b:e4:78:79:e3:
         9f:67:52:ef:5f:de:4d:2a:4d:c7:97:e9:2d:34:93:cc:f7:0c:
         70:65:fa:90:5b:7e:76:ee:74:a4:cc:35:03:50:79:cc:87:e3:
         05:d6:b5:a9:46:32:58:49:5f:28:c6:bd:91:33:1f:22:d9:d1:
         e4:bd:1a:09:7e:f1:3b:23:5d:18:27:04:a6:85:f7:bd:10:20:
         0b:99:46:c7:5c:ae:66:f8:b2:93:1a:09:28:c8:d3:9c:de:d6:
         77:05:a4:13:9c:2c:d2:89:ad:bf:2c:91:7d:1a:f8:40:2e:7f:
         37:b3:0c:f3:8e:94:be:a3:2a:4d:43:66:ba:bb:7d:75:a3:42:
         6e:a4:c0:33:d5:6c:65:01:a4:1d:2c:7b:d5:b5:1c:dc:63:69:
         5a:aa:e5:2c:a4:3e:77:ee:4f:6b:0b:4c:1e:ac:4e:a1:88:df:
         66:98:7b:7d:70:9b:e3:50:b8:32:74:5a:c3:1e:6a:29:ac:fb:
         2c:cf:6e:54:42:ca:be:c9:2f:3a:fb:a1:f4:40:f1:00:eb:be:
         06:aa:d9:d3:30:fb:f2:77:1c:3b:1d:76:cd:46:66:1e:a8:aa:
         d1:01:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----