Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.mft
File:                     B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.mft (raw, json)
Hash identifier:          N3YW3TpYx9vIcfzyEP6lZ9VTikTd9kUmqaYlUVhd6lI=
Subject key identifier:   4E:A3:40:E6:F6:AE:8D:B7:49:E2:A3:9F:3E:E9:A3:78:EF:FE:D0:FB
Authority key identifier: B1:30:42:D9:DB:CB:2D:FB:B9:09:CD:EE:DA:8F:38:A5:4C:20:67:9F
Certificate issuer:       /CN=B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F
Certificate serial:       1B57FF05F752980ED32FC610BAF3A09A07D5B139
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.mft
Manifest number:          C7
Signing time:             Fri 16 Dec 2022 03:57:20 +0000
Manifest this update:     Fri 16 Dec 2022 03:52:19 +0000
Manifest next update:     Sat 17 Dec 2022 04:31:19 +0000
Files and hashes:         1: 323830343a363362633a3a2f33322d3438203d3e20323639333830.roa (hash: nLzsK5yYXndYbg8J33TH/EsK1KG27yHl8vG9FOT1lRE=)
                          2: 34352e3138352e39322e302f32322d3234203d3e20323639333830.roa (hash: 71Mymk6QnNYFxkDK4FWK0z07H0pRnbyfWX02VGg/fUM=)
                          3: B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.crl (hash: waOSr5X9vEK1i2fVMfQNyv6AqQuNddSUuLDKOzhS67k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:57:ff:05:f7:52:98:0e:d3:2f:c6:10:ba:f3:a0:9a:07:d5:b1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F
        Validity
            Not Before: Dec 16 03:52:19 2022 GMT
            Not After : Dec 17 04:31:19 2022 GMT
        Subject: CN=4EA340E6F6AE8DB749E2A39F3EE9A378EFFED0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:3b:58:e2:67:ab:fa:9a:5c:7f:e6:b7:a6:
                    29:f7:69:89:6d:26:de:b0:7d:cb:4e:0f:6b:6f:e9:
                    a7:78:e7:7f:13:62:0b:90:7d:d0:f9:46:b3:ca:72:
                    ea:0b:c2:51:68:75:14:5f:24:4c:c7:aa:08:d2:4c:
                    66:89:b9:cd:fc:7b:a4:d9:6a:0e:50:75:f9:fc:45:
                    2c:45:3f:79:a0:dc:2f:2e:0a:e1:f9:80:ee:e9:59:
                    24:af:9e:df:4f:86:80:b5:1d:32:b7:d4:d3:6e:1d:
                    ab:67:f2:24:31:e3:e1:d4:e3:ec:1b:99:3e:1d:4d:
                    a2:5f:bc:a4:9c:d2:83:58:ab:a9:ce:3f:00:42:e1:
                    ca:4a:19:02:a2:c5:a3:e8:27:50:dd:00:75:59:d0:
                    57:b5:48:e0:79:03:1a:a4:26:b9:6b:b0:c4:df:80:
                    0d:2d:f1:e0:6d:b6:fc:40:e4:74:9d:54:38:13:83:
                    bc:cd:d5:26:c0:e5:ec:ca:97:e4:d2:b9:69:d6:24:
                    fa:dd:53:43:a8:1f:ad:48:5c:26:64:8b:1c:59:d8:
                    2b:f6:e3:64:25:13:83:6d:8e:e5:92:75:07:b0:c3:
                    8a:98:a9:3f:48:30:06:10:a6:fa:3a:aa:ea:2f:28:
                    78:3d:0a:84:74:4c:14:2c:39:1e:fe:c9:e0:d0:f2:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A3:40:E6:F6:AE:8D:B7:49:E2:A3:9F:3E:E9:A3:78:EF:FE:D0:FB
            X509v3 Authority Key Identifier:
                keyid:B1:30:42:D9:DB:CB:2D:FB:B9:09:CD:EE:DA:8F:38:A5:4C:20:67:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/B13042D9DBCB2DFBB909CDEEDA8F38A54C20679F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a6:38:8b:79:cb:9f:86:8e:76:68:08:cb:9c:18:a7:2d:31:
         2c:b1:2b:21:9d:d5:4f:ab:f4:ba:e6:e3:27:cc:58:01:ad:46:
         cd:24:fb:b6:2c:9e:40:30:b5:d5:18:38:46:d3:38:73:12:90:
         0b:08:0f:d0:ad:10:81:cf:a6:73:1a:1d:03:42:85:c9:77:c6:
         07:43:00:11:a0:18:8b:ad:32:fc:00:95:52:a1:ef:3a:3e:c4:
         fc:ab:6b:d4:e9:d3:21:6f:74:c7:3c:a2:7d:35:78:ae:d3:54:
         61:9f:f0:72:63:d8:48:dc:a5:9c:84:b2:21:2f:3a:bd:e2:15:
         2a:19:55:51:27:b6:9a:51:a5:d5:b7:2e:79:13:cc:a2:ad:42:
         c0:0e:25:d2:53:f6:16:b4:58:2b:45:6c:ff:a4:6f:b7:49:3c:
         cc:d5:50:64:b5:8c:a7:ac:5c:57:69:29:60:e9:d0:d1:9d:3f:
         50:1e:44:49:63:b2:65:56:58:3d:b3:e8:b2:f7:7c:05:f1:59:
         06:6f:a2:81:bd:47:cf:93:9e:f4:19:dd:d4:1c:9b:21:00:37:
         e0:8b:4b:93:17:c7:7c:61:cc:6f:b4:94:51:3e:81:4e:c9:65:
         37:a2:95:f7:65:8f:41:14:14:82:b6:f3:48:00:5f:03:2c:1d:
         4a:54:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----