Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.mft
File:                     B3A824543751D831EBBC079432DFEB1ADA047B7D.mft (raw, json)
Hash identifier:          I/wXInWdinDGrAsIo1AIulLUs6KITi9U8krgp0BhVhs=
Subject key identifier:   B7:EA:A2:AE:6F:0C:E0:B7:C5:5A:F0:71:EB:4D:5E:B6:7D:4D:1F:1B
Authority key identifier: B3:A8:24:54:37:51:D8:31:EB:BC:07:94:32:DF:EB:1A:DA:04:7B:7D
Certificate issuer:       /CN=B3A824543751D831EBBC079432DFEB1ADA047B7D
Certificate serial:       60DB27044E206562E8E6336427AFF67C9C0707DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.mft
Manifest number:          01DA
Signing time:             Wed 20 Jul 2022 12:34:46 +0000
Manifest this update:     Wed 20 Jul 2022 12:29:46 +0000
Manifest next update:     Thu 21 Jul 2022 15:00:46 +0000
Files and hashes:         1: 3136382e302e3136382e302f32322d3234203d3e20323635323537.roa (hash: wIwjmBGyf9hUR2Ed/AUQt/bBW1pF6mgSkxT5hSSL6zQ=)
                          2: B3A824543751D831EBBC079432DFEB1ADA047B7D.crl (hash: GX10WPpdQiAiRTf4Cxc4R83sRWtjAQWHG5B751LgzfM=)
                          3: 323830343a326430343a3a2f33322d3438203d3e20323635323537.roa (hash: g6DGPQHZfEIxdx08cGS7RGNZG49pmvxCHtg1ZKtFeBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:db:27:04:4e:20:65:62:e8:e6:33:64:27:af:f6:7c:9c:07:07:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A824543751D831EBBC079432DFEB1ADA047B7D
        Validity
            Not Before: Jul 20 12:29:46 2022 GMT
            Not After : Jul 21 15:00:46 2022 GMT
        Subject: CN=B7EAA2AE6F0CE0B7C55AF071EB4D5EB67D4D1F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:9f:40:53:71:ed:01:f7:7f:6e:b1:dd:91:
                    c5:31:d5:53:26:6d:57:06:1c:d9:c1:7f:8c:86:7a:
                    fc:9b:da:1a:bb:12:d9:fd:0e:f2:60:7a:c4:1d:ff:
                    d8:14:e6:4c:b0:93:af:f3:9a:8a:49:d8:c1:8f:fd:
                    0e:bb:27:05:a3:fa:e3:6b:2c:19:86:cd:4d:c4:5a:
                    14:52:be:51:a5:c8:29:34:ca:9e:03:7f:63:23:7e:
                    c1:ca:a0:91:32:d8:ab:66:22:11:c4:18:b9:36:cb:
                    e8:20:b0:a0:bb:d5:08:a1:fd:b2:78:1d:50:37:12:
                    8f:13:17:be:93:ca:e2:8a:79:4d:1d:46:9f:0d:00:
                    b5:23:d2:8c:67:a0:d7:6e:69:86:27:d4:f0:27:82:
                    16:0e:17:fc:4a:83:8c:64:8a:a0:e4:14:00:7d:73:
                    89:70:b0:7e:3c:8c:08:36:64:53:9e:19:63:55:09:
                    6d:e7:98:93:f3:ed:11:b7:14:0f:96:9c:5c:08:03:
                    b1:f5:2d:01:01:a5:5a:21:ac:32:2d:e7:7d:ae:a7:
                    44:66:df:c2:d1:0e:22:6d:03:92:fc:9b:e7:c8:8c:
                    24:f7:41:1e:9b:fc:6c:3d:97:6e:fd:d6:2a:50:cf:
                    af:83:d1:e0:b7:ac:8b:aa:53:79:a1:3e:b4:4f:3e:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:A2:AE:6F:0C:E0:B7:C5:5A:F0:71:EB:4D:5E:B6:7D:4D:1F:1B
            X509v3 Authority Key Identifier:
                keyid:B3:A8:24:54:37:51:D8:31:EB:BC:07:94:32:DF:EB:1A:DA:04:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:60:69:39:63:64:ff:c9:55:bc:2b:c7:d3:2f:be:6b:f8:65:
         f1:c0:1e:ed:82:33:66:04:5a:2e:cd:83:c2:52:a1:ff:52:ae:
         22:b5:0c:b9:c6:dd:23:6d:87:f0:00:92:88:7d:cc:8a:e8:35:
         7f:4c:75:01:05:0a:66:d5:8f:71:3f:fc:e4:08:70:b8:89:12:
         d0:87:9f:0d:38:9e:13:f8:e2:07:96:0d:2c:6e:8a:93:a6:84:
         e6:57:5f:31:19:62:c0:fe:31:63:33:e2:da:21:c4:fe:77:4f:
         13:93:44:73:57:6a:b6:20:a0:a1:61:26:03:d7:81:3e:5f:89:
         e5:39:d7:aa:8d:da:df:cd:12:3e:f0:b1:e2:ec:94:a3:cf:52:
         21:0d:a8:93:ff:00:61:a8:cc:e5:b3:67:9f:ac:75:68:8e:96:
         2e:6b:af:91:f0:75:61:6d:5c:78:97:03:1c:1c:59:c9:2a:60:
         06:ef:46:74:53:89:ac:14:7c:b2:06:a5:bb:05:69:1e:c4:c6:
         bc:8c:53:74:46:5d:8e:3f:14:68:7a:04:ac:23:f5:28:ac:bd:
         ed:10:dd:8a:8f:05:35:0f:5a:8f:29:46:a4:72:52:f2:27:92:
         e3:fa:ba:65:9d:94:c0:43:64:bf:92:1a:52:1d:2e:8a:8c:25:
         1a:95:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----