Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.mft
File:                     CA5C3CE8228F868189611C8BAB39E9818D40F794.mft (raw, json)
Hash identifier:          e7/nzhBYQ6PUBRSIzsc2S5Sx+nKsSS7uMCIj0yvpvkE=
Subject key identifier:   2D:A4:E3:91:C1:A8:1C:E6:81:64:41:86:F0:A2:D2:AE:01:C5:88:01
Authority key identifier: CA:5C:3C:E8:22:8F:86:81:89:61:1C:8B:AB:39:E9:81:8D:40:F7:94
Certificate issuer:       /CN=CA5C3CE8228F868189611C8BAB39E9818D40F794
Certificate serial:       3A8AC883061943E6B57691472A23AA502BD41B8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.mft
Manifest number:          69
Signing time:             Sat 14 Jan 2023 18:35:58 +0000
Manifest this update:     Sat 14 Jan 2023 18:30:58 +0000
Manifest next update:     Sun 15 Jan 2023 21:23:58 +0000
Files and hashes:         1: 323830343a383536633a3a2f33322d313238203d3e20323732353738.roa (hash: 5k99D6V/uBAKsNuP0Cy023kmTpMpBoIOeHvuyeU3+RA=)
                          2: CA5C3CE8228F868189611C8BAB39E9818D40F794.crl (hash: 52A+pkzU58+aVuDxBCVz7ghe+Qtt4uf6/sjT0uicPrk=)
                          3: 34352e3137332e32312e302f32342d3234203d3e20323732353738.roa (hash: cingFAnCHt1yNSEUWwDrohedWXbFGol9jVHdvatYfXs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8a:c8:83:06:19:43:e6:b5:76:91:47:2a:23:aa:50:2b:d4:1b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5C3CE8228F868189611C8BAB39E9818D40F794
        Validity
            Not Before: Jan 14 18:30:58 2023 GMT
            Not After : Jan 15 21:23:58 2023 GMT
        Subject: CN=2DA4E391C1A81CE681644186F0A2D2AE01C58801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:60:fa:11:05:32:b0:75:65:70:60:1e:55:
                    bc:41:63:54:36:26:ee:f8:c0:3a:cc:f4:05:9e:18:
                    ab:26:69:c7:3f:21:3e:62:1c:91:be:39:ff:5b:0f:
                    9e:60:7d:00:45:ed:8a:6c:bc:19:72:aa:7e:e0:7f:
                    08:a3:11:55:56:91:2a:e0:35:9c:7f:c9:4f:65:14:
                    7f:7d:56:f8:97:eb:74:cd:b2:d3:0b:87:0a:5c:87:
                    51:61:46:b6:fb:3a:5f:89:dc:a4:b1:81:c4:ea:23:
                    02:32:9a:ff:2f:d8:55:27:da:63:81:18:81:34:e8:
                    20:1e:10:38:4b:ee:7d:c7:26:61:3f:c5:3d:9f:b5:
                    9e:bb:14:a4:92:66:ec:be:bb:b5:f9:a2:37:36:46:
                    ce:45:e4:4f:1f:02:05:b1:fa:6c:c4:13:45:6a:16:
                    db:54:9b:54:ae:d6:a5:47:34:d7:b6:d0:91:ff:1c:
                    9d:2c:b5:05:be:67:4b:5d:37:bc:da:b9:57:43:b1:
                    a5:85:e3:30:9e:fa:71:3b:67:c0:83:19:4f:90:9d:
                    8c:97:be:df:66:77:19:0a:4a:fb:c1:40:d6:b1:8d:
                    aa:5d:be:e6:f1:a1:72:28:af:b9:9a:cb:72:dc:58:
                    1b:b5:b7:e2:55:98:52:46:14:c7:c2:ce:0e:27:4d:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:E3:91:C1:A8:1C:E6:81:64:41:86:F0:A2:D2:AE:01:C5:88:01
            X509v3 Authority Key Identifier:
                keyid:CA:5C:3C:E8:22:8F:86:81:89:61:1C:8B:AB:39:E9:81:8D:40:F7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CA5C3CE8228F868189611C8BAB39E9818D40F794.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:80:6b:90:72:82:f4:6b:67:36:f2:12:15:ea:3c:6c:ac:
         13:2a:a0:5d:de:10:ee:e0:40:f5:da:43:4b:34:37:ef:9d:ea:
         22:f7:66:7e:29:73:cd:3e:19:93:b4:32:12:55:da:8a:3e:43:
         22:15:81:13:fb:a2:e5:f9:a1:85:cf:08:69:00:6a:97:2c:97:
         a7:93:73:bb:96:37:96:33:eb:83:48:d7:d6:34:e2:73:40:a3:
         54:80:c1:4e:3c:60:8e:cf:59:25:20:67:b7:42:7a:35:9c:8c:
         1c:05:ed:13:65:ad:97:b3:ff:b2:6a:c6:43:82:4c:2d:30:ab:
         c3:ad:f5:a1:5e:24:cb:62:80:60:af:61:ec:27:84:ef:69:e4:
         74:90:18:84:15:cc:72:f3:f4:99:2e:35:a6:ee:78:4c:8f:89:
         76:6c:19:f6:db:2f:bf:53:ff:87:2f:ab:21:1a:28:00:0e:e3:
         44:2d:33:d5:e8:65:e1:01:42:77:bf:4d:63:e7:95:48:0e:49:
         65:a3:09:16:b7:df:e0:f8:b1:5c:bb:c6:31:b9:86:a6:e1:1c:
         3a:c9:24:84:86:3e:b7:ae:ca:ea:22:ca:b7:b1:d3:24:78:71:
         2f:5a:94:3a:b0:14:03:44:07:ca:15:8e:be:c5:98:77:91:2d:
         18:b9:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----