Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.mft
File:                     493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.mft (raw, json)
Hash identifier:          ZjKcmyASn7L/ZO6SuZQl3P2Eb5Ial3GEt4rbuWT5ygg=
Subject key identifier:   1F:F4:FC:57:5C:E1:24:D4:46:08:2A:80:9E:B1:A1:B6:EF:C0:7E:7B
Authority key identifier: 49:3A:B8:FA:FE:E0:A9:2C:1F:9E:AB:99:F4:18:E3:C8:AC:77:C5:05
Certificate issuer:       /CN=493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505
Certificate serial:       242AA18C011851D3327ADA9C12A20456F30F3C96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.mft
Manifest number:          19
Signing time:             Sun 27 Nov 2022 11:03:13 +0000
Manifest this update:     Sun 27 Nov 2022 10:58:13 +0000
Manifest next update:     Mon 28 Nov 2022 13:30:13 +0000
Files and hashes:         1: 323830343a3531343a3a2f33322d3438203d3e20323632343930.roa (hash: Qhle0zP2oF3zGfrEhnwtmvF0BSQF+qIQdovXeHUvj7s=)
                          2: 3137372e36362e38302e302f32312d3234203d3e20323632343930.roa (hash: WlSGscxni/FrdfPtnLtFT28iLpcmaz1FOor5+8GLoC4=)
                          3: 493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.crl (hash: SvLvFsALsT0Uorw2EABwIpQWmVK8mwQMIHN+VqQ5I1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:a1:8c:01:18:51:d3:32:7a:da:9c:12:a2:04:56:f3:0f:3c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505
        Validity
            Not Before: Nov 27 10:58:13 2022 GMT
            Not After : Nov 28 13:30:13 2022 GMT
        Subject: CN=1FF4FC575CE124D446082A809EB1A1B6EFC07E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:0c:18:f5:ec:a5:ed:44:05:fc:a9:0d:c2:
                    0f:fa:40:8c:7d:ac:6c:81:0a:da:f3:cd:16:7f:c9:
                    67:8c:4b:92:65:56:11:a5:19:60:f3:60:b2:12:40:
                    6e:0a:b0:ef:d0:2e:bd:fe:23:47:3d:9e:55:b7:41:
                    ed:eb:f3:cc:78:85:c8:ee:d8:35:66:2a:1b:d2:a5:
                    11:41:49:9c:59:75:a2:32:ac:50:94:dd:90:b7:d9:
                    67:48:2e:cc:4c:33:2e:5d:f1:a9:ca:24:41:da:de:
                    8f:72:ee:9e:9f:f6:5f:75:1c:3b:c7:f0:61:ee:39:
                    68:fd:d2:6d:0e:17:3f:39:85:9d:9a:d6:c4:b8:ea:
                    4f:a3:cf:db:1d:4b:cd:da:ae:b0:4c:65:8e:9a:69:
                    92:08:f8:12:50:f4:58:95:60:9e:2f:16:4f:c1:e0:
                    0b:e1:2f:37:30:78:e8:e3:72:c5:61:0b:3e:4a:73:
                    62:a0:ba:b4:b9:aa:8a:40:80:be:eb:7c:87:d6:30:
                    7e:9b:db:07:9a:13:75:1b:78:c7:1b:5b:9e:25:2a:
                    0f:9a:f4:9a:f3:9a:7d:09:c2:5c:d1:d3:7f:d1:8c:
                    2e:a3:a7:4b:f5:1f:ae:c9:b6:ad:de:9d:0a:98:61:
                    cc:33:8f:13:de:c6:24:f8:62:e2:f4:f8:4c:4f:14:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F4:FC:57:5C:E1:24:D4:46:08:2A:80:9E:B1:A1:B6:EF:C0:7E:7B
            X509v3 Authority Key Identifier:
                keyid:49:3A:B8:FA:FE:E0:A9:2C:1F:9E:AB:99:F4:18:E3:C8:AC:77:C5:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/493AB8FAFEE0A92C1F9EAB99F418E3C8AC77C505.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:7d:96:b8:8b:24:9f:20:25:04:a5:cd:62:39:cb:14:08:
         39:9d:59:3d:a2:77:8a:12:90:6d:b0:9d:a3:bd:28:bc:03:d3:
         06:23:d8:a1:a5:c1:7f:30:2b:1d:4b:3b:69:15:e6:57:52:01:
         db:12:c0:e8:55:b2:05:64:c1:43:39:9f:f3:db:2a:55:73:29:
         6e:3d:4a:40:fc:88:e2:f0:98:1e:a3:07:69:ab:2f:44:a6:84:
         cc:c3:21:44:98:53:ba:ef:ec:3d:5a:c7:f8:2c:cd:0a:85:ae:
         94:5e:a9:11:fb:09:19:9d:c8:fa:96:1c:75:f6:be:38:a1:ab:
         4f:e5:73:17:73:06:3c:a8:2f:b5:9d:29:03:16:08:54:54:e3:
         37:7d:51:85:dc:35:b9:c3:17:dd:97:63:8b:f0:65:a5:04:94:
         13:e1:ba:7d:4f:f7:1b:0b:03:08:93:f8:c7:1e:ad:34:c8:4f:
         dc:d0:56:ba:d3:6f:7e:0d:90:03:81:ea:fb:bc:9d:72:53:91:
         81:e0:c8:91:e6:bb:e0:83:5f:38:8c:94:a3:c6:37:c3:13:1b:
         0a:9e:55:5e:57:80:2a:98:73:3e:ec:75:be:b4:7f:2d:c3:96:
         1f:68:76:a1:2c:b2:b1:7d:a4:2b:6b:35:ca:0a:4a:f2:1d:3f:
         2d:09:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----