Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.mft
File:                     8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.mft (raw, json)
Hash identifier:          xopDAfKD52wdhSF6i2eCOvtMjsAxKexvKvQwaWLjQ4c=
Subject key identifier:   33:DD:1E:30:B4:CE:F7:98:43:67:29:46:7F:54:76:B4:AA:3B:EC:C5
Authority key identifier: 8C:36:35:11:7A:A3:02:D6:35:E8:2C:C0:D2:A2:FB:1E:7A:1E:98:7D
Certificate issuer:       /CN=8C3635117AA302D635E82CC0D2A2FB1E7A1E987D
Certificate serial:       0F554EF56ACCCB43578ECBF2AA9CBDE50166A388
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.mft
Manifest number:          01AA
Signing time:             Tue 13 Sep 2022 06:48:19 +0000
Manifest this update:     Tue 13 Sep 2022 06:43:19 +0000
Manifest next update:     Wed 14 Sep 2022 07:35:19 +0000
Files and hashes:         1: 8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.crl (hash: Cf4sBAK9UZjr9/VOanx+VUGY8gzobf9R8umWrosJv94=)
                          2: 323830343a363235633a3a2f33322d3334203d3e20323639323932.roa (hash: qoZvMRVGWrcCTDUoh5xh5ebpLKoBEdTMnH+9jFp95Yg=)
                          3: 34352e3138332e3231322e302f32322d3234203d3e20323639323932.roa (hash: 2OC+GAl2LKrUPRTZS4B2MCA/wduMAlI72p/HTjO8VtY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:4e:f5:6a:cc:cb:43:57:8e:cb:f2:aa:9c:bd:e5:01:66:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3635117AA302D635E82CC0D2A2FB1E7A1E987D
        Validity
            Not Before: Sep 13 06:43:19 2022 GMT
            Not After : Sep 14 07:35:19 2022 GMT
        Subject: CN=33DD1E30B4CEF798436729467F5476B4AA3BECC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:5d:0f:83:39:cc:80:40:67:16:30:44:95:
                    6f:d0:6b:f2:36:2e:87:c4:b4:36:e4:44:ba:8b:5f:
                    bc:a9:ac:93:94:67:7a:fb:42:92:28:9d:d5:a1:08:
                    a9:32:ae:f2:9c:51:8d:c5:d2:24:ba:c9:d3:35:3a:
                    4c:9a:2e:e6:5e:5c:80:d3:92:5f:f8:1f:f6:68:04:
                    d7:c6:45:f3:59:c9:90:2a:51:92:62:62:2d:d5:15:
                    45:57:af:31:91:a8:56:ca:9f:36:bc:5d:73:1f:30:
                    34:d0:6e:f0:48:d8:ab:54:04:4b:e0:a2:05:68:7a:
                    9b:5b:ff:d3:e8:d2:76:6f:dc:04:55:d6:72:80:c4:
                    e9:3d:ef:7c:ba:8b:7c:29:6f:12:30:2c:aa:d5:de:
                    80:eb:b2:72:62:b0:f1:3b:ad:e7:cd:16:e4:10:31:
                    c2:0c:c9:f8:4f:40:34:84:95:01:a1:4e:86:c1:79:
                    72:c4:98:20:74:a6:53:ab:28:51:77:a8:97:fe:89:
                    ce:15:4e:78:21:ac:a1:b7:f0:ce:a1:f0:87:e0:67:
                    37:dd:4f:34:f6:51:35:79:e9:c3:fc:6c:63:79:dd:
                    3e:fd:6b:fb:c2:c9:5e:ad:37:53:80:d8:93:9f:eb:
                    85:5b:60:cb:b0:e5:fd:48:9f:b6:6d:c1:07:9c:82:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DD:1E:30:B4:CE:F7:98:43:67:29:46:7F:54:76:B4:AA:3B:EC:C5
            X509v3 Authority Key Identifier:
                keyid:8C:36:35:11:7A:A3:02:D6:35:E8:2C:C0:D2:A2:FB:1E:7A:1E:98:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/8C3635117AA302D635E82CC0D2A2FB1E7A1E987D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:83:70:2f:0c:87:85:35:2a:51:75:dc:22:58:3c:dc:db:b2:
         33:ce:6b:58:f2:e4:1f:d2:d8:74:ec:53:98:d3:ed:3e:a0:07:
         74:3e:a1:81:ed:ad:8e:aa:e7:eb:f4:cc:40:86:ca:31:c0:94:
         77:d2:43:30:e3:5d:da:c1:d7:8f:0b:bc:44:63:41:ac:a2:f0:
         1b:d6:1a:2e:89:a4:1c:dc:9e:5c:b9:a3:a1:55:0d:57:a2:5c:
         3c:90:a9:46:09:ba:b9:ac:88:de:52:23:6a:9f:0b:dc:1d:02:
         2e:5b:0d:75:6c:42:53:7b:2b:d4:e3:58:55:e1:56:93:a4:c8:
         2d:61:b2:2d:7e:dd:5c:92:74:89:74:d9:12:09:db:90:a0:18:
         b0:74:e9:f0:a5:07:82:87:52:9a:c1:ff:52:af:10:cf:96:ce:
         1e:3d:ad:f7:85:ca:14:3d:5e:0d:24:2b:5e:44:e5:66:2a:c3:
         8c:71:06:2b:fb:a6:40:56:ff:ff:02:08:30:fb:4f:86:9b:e9:
         5f:44:d8:ee:17:f6:81:c0:1d:a4:55:2e:d6:c5:06:c8:6e:02:
         bf:90:c4:9f:1c:98:b1:5e:67:82:fd:d1:af:4d:25:68:35:e7:
         f2:5c:11:f0:02:06:9f:f1:30:7b:20:41:b7:dc:3a:b7:ac:02:
         ec:c6:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----