Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.mft
File:                     D8F169AAC441A89B47C87E14D1D567D129DB0224.mft (raw, json)
Hash identifier:          4a7C0EwRkq6NZ4rxlZFl87IP4AKwyyzE572jN1j6FOY=
Subject key identifier:   68:04:3C:59:62:A5:57:96:02:C5:88:3E:3E:4E:70:7A:20:ED:DA:3A
Authority key identifier: D8:F1:69:AA:C4:41:A8:9B:47:C8:7E:14:D1:D5:67:D1:29:DB:02:24
Certificate issuer:       /CN=D8F169AAC441A89B47C87E14D1D567D129DB0224
Certificate serial:       5B990DA58D6883030EA87F024B3FF1028E279688
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.mft
Manifest number:          39
Signing time:             Mon 28 Nov 2022 12:40:46 +0000
Manifest this update:     Mon 28 Nov 2022 12:35:46 +0000
Manifest next update:     Tue 29 Nov 2022 16:18:46 +0000
Files and hashes:         1: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: k+PK0V1VeasInK/1JM8kFuImP4Xb+mEwzWzGKVgbnwY=)
                          2: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: LQ/P4F8BNgk1y/zJ0OwYWtp3j5LKIi2OQUTjNnvtfWY=)
                          3: D8F169AAC441A89B47C87E14D1D567D129DB0224.crl (hash: GPcVlZvESN4qAUPx9e9J83QBqMzzGaXQ8WvOhd0g1/E=)
                          4: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: RhWb1ox42kcdr5bV85uo2Rdk9TQspRWVJKA7Sf8QtXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:0d:a5:8d:68:83:03:0e:a8:7f:02:4b:3f:f1:02:8e:27:96:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F169AAC441A89B47C87E14D1D567D129DB0224
        Validity
            Not Before: Nov 28 12:35:46 2022 GMT
            Not After : Nov 29 16:18:46 2022 GMT
        Subject: CN=68043C5962A5579602C5883E3E4E707A20EDDA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:53:c0:9c:1d:b1:a0:71:d6:b5:a4:c3:31:
                    8d:18:b5:f0:5d:80:24:70:eb:01:ee:74:37:21:e7:
                    04:6c:fb:a5:ce:16:b3:be:a9:6a:3d:86:d3:00:9f:
                    ca:e7:64:a4:c7:52:2e:0f:50:26:62:be:0a:fe:56:
                    a3:19:1c:d1:6a:fa:13:2c:e4:30:f3:eb:7d:c5:b5:
                    50:4d:f5:84:f6:98:53:27:1d:a0:df:05:f6:67:79:
                    8f:05:b9:80:0b:d2:ed:2f:b6:53:18:86:19:8e:bb:
                    e5:18:3e:bd:65:f3:90:19:9e:0c:b8:c0:fe:9e:59:
                    99:28:92:e8:fd:52:91:0e:68:b8:fa:04:aa:d2:b0:
                    b4:91:3c:84:39:a0:08:dd:39:a0:de:7f:bf:d8:66:
                    40:93:b7:0b:86:bc:ad:0d:63:68:04:77:67:a5:83:
                    c2:f2:16:17:e2:93:a6:1f:ff:5c:09:b6:14:22:0d:
                    ae:fc:54:ae:92:f7:d5:cf:2d:7a:0c:fe:ed:1b:1e:
                    60:48:54:99:28:42:53:bc:b4:23:05:3b:4b:bd:76:
                    67:97:48:bc:c1:7d:a5:cf:be:b9:34:e3:ff:c5:a5:
                    32:9c:0b:ec:5b:9f:ad:42:b4:c6:9c:e7:44:d4:dc:
                    4e:d5:f9:c0:1e:42:5c:f6:e8:a5:9b:04:ff:88:4e:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:3C:59:62:A5:57:96:02:C5:88:3E:3E:4E:70:7A:20:ED:DA:3A
            X509v3 Authority Key Identifier:
                keyid:D8:F1:69:AA:C4:41:A8:9B:47:C8:7E:14:D1:D5:67:D1:29:DB:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:84:f8:09:1a:01:fd:38:d7:08:d5:4e:9c:9d:3c:1e:f3:3f:
         e0:d3:49:db:f9:24:a0:1f:5b:87:19:46:b0:8a:1e:92:25:96:
         a4:05:64:70:d8:e0:56:d1:3e:a5:aa:9b:b1:c5:b1:bb:6f:05:
         2b:ea:9e:21:4e:30:b2:d7:40:cb:6b:8e:00:18:55:59:05:70:
         6f:0d:6f:58:48:ec:89:3b:68:36:7a:2d:47:19:9f:0d:84:3e:
         20:03:29:06:a3:f7:f7:0c:7e:55:e0:4f:40:8d:e3:57:d2:aa:
         49:dd:d4:be:ef:fe:c9:d7:25:86:e0:4f:59:1d:12:f7:98:9d:
         81:fc:7e:bb:a2:15:d9:c6:1f:7a:32:df:a3:56:7e:69:b7:8a:
         a8:c5:8b:1f:bd:3e:59:9c:cb:70:1f:6f:3c:35:b7:74:c1:c2:
         a6:af:30:e1:8a:4a:82:64:38:77:ae:b1:1e:c6:39:fc:3c:27:
         6d:ba:4a:d6:23:79:b7:47:b8:e5:f9:29:ee:04:3c:d7:1d:79:
         a2:7f:b4:d9:c7:95:05:b3:9c:d6:ee:37:d5:15:c0:3f:6d:b5:
         ee:b9:ab:d4:fb:3d:eb:09:33:96:a5:fc:13:3c:5b:f8:06:02:
         5c:f8:31:1b:e9:e3:3b:11:00:33:32:3f:98:4d:13:6b:ab:2a:
         d6:dd:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----