Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Doqb5uHwAtnGN8UnenTMyGzP7hDYueyaf6MXL5nT1gjf/0/45DB2620CE333203E69E2981DA15BAFF29829297.mft
File:                     45DB2620CE333203E69E2981DA15BAFF29829297.mft (raw, json)
Hash identifier:          QKi6AQHs6fIyqZH6uvPi9QYlZceW8ooQ3++d4No/4Hc=
Subject key identifier:   82:FE:9F:F7:8E:4B:F5:09:17:B4:45:C4:68:52:66:7F:08:E9:28:32
Authority key identifier: 45:DB:26:20:CE:33:32:03:E6:9E:29:81:DA:15:BA:FF:29:82:92:97
Certificate issuer:       /CN=45DB2620CE333203E69E2981DA15BAFF29829297
Certificate serial:       0F5D7C23B7062ABC005A0E455E45EE15E42CD0D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45DB2620CE333203E69E2981DA15BAFF29829297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doqb5uHwAtnGN8UnenTMyGzP7hDYueyaf6MXL5nT1gjf/0/45DB2620CE333203E69E2981DA15BAFF29829297.mft
Manifest number:          0167
Signing time:             Wed 14 Sep 2022 01:27:21 +0000
Manifest this update:     Wed 14 Sep 2022 01:22:21 +0000
Manifest next update:     Thu 15 Sep 2022 04:54:21 +0000
Files and hashes:         1: 45DB2620CE333203E69E2981DA15BAFF29829297.crl (hash: RRFPS7Pj+5dOv5TvbdZOX+rGPnAlwXIpWU2FaW9PxDI=)
                          2: 3138372e34392e3134382e302f32332d3234203d3e20323730353332.roa (hash: mhzWpwlh6Ois1iUCyT1TR+oD1TtgYXwPEX31hI417gE=)
                          3: 323830343a366436633a3a2f33332d3336203d3e20323730353332.roa (hash: S1pgrqVVYiLtxO1/Ygtm2DxCCJtO0+mlJbdPAdcs7/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5d:7c:23:b7:06:2a:bc:00:5a:0e:45:5e:45:ee:15:e4:2c:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45DB2620CE333203E69E2981DA15BAFF29829297
        Validity
            Not Before: Sep 14 01:22:21 2022 GMT
            Not After : Sep 15 04:54:21 2022 GMT
        Subject: CN=82FE9FF78E4BF50917B445C46852667F08E92832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:cc:c0:2f:fb:a7:06:86:53:67:7c:ef:b0:
                    ff:76:a8:4a:cd:d5:91:55:78:4c:e9:58:0d:cf:6c:
                    12:73:8d:2a:1e:9c:09:11:42:82:6a:f1:02:b0:fe:
                    c4:66:c3:84:ee:bf:2c:9b:c6:7c:fc:bf:df:d3:cf:
                    52:14:92:5e:8e:86:69:50:6d:08:7a:d9:56:15:7d:
                    2c:6e:d6:83:14:79:e2:10:63:f0:fc:16:01:33:a6:
                    31:fc:4f:b1:c7:9b:c9:d6:f2:f5:18:db:64:9d:5f:
                    22:b1:b5:11:c6:65:49:b8:57:cc:77:6e:ed:c1:74:
                    8b:a7:a7:48:42:af:71:3d:d1:16:2b:cb:b1:b3:a4:
                    34:d0:09:a9:05:38:84:b4:1d:1f:7e:e1:ec:75:46:
                    99:1a:d4:42:be:14:d5:3d:49:3e:c9:9c:f5:0e:ca:
                    d2:cc:8f:34:fb:92:98:02:4a:af:cb:75:8a:28:3b:
                    b7:70:3d:15:9d:0f:4c:4b:fa:aa:7a:71:d3:c3:e6:
                    52:3b:34:24:c6:ee:cd:ee:ef:97:ca:1e:4f:08:b4:
                    e4:a4:f6:90:07:e5:8e:f3:66:e8:44:27:64:09:cb:
                    96:6d:61:e6:e7:42:1a:d3:e6:4f:89:92:32:1a:c9:
                    1b:29:33:0a:42:93:fa:c5:13:19:be:f8:59:9a:a7:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FE:9F:F7:8E:4B:F5:09:17:B4:45:C4:68:52:66:7F:08:E9:28:32
            X509v3 Authority Key Identifier:
                keyid:45:DB:26:20:CE:33:32:03:E6:9E:29:81:DA:15:BA:FF:29:82:92:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doqb5uHwAtnGN8UnenTMyGzP7hDYueyaf6MXL5nT1gjf/0/45DB2620CE333203E69E2981DA15BAFF29829297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45DB2620CE333203E69E2981DA15BAFF29829297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doqb5uHwAtnGN8UnenTMyGzP7hDYueyaf6MXL5nT1gjf/0/45DB2620CE333203E69E2981DA15BAFF29829297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:8b:1b:51:6a:b0:eb:02:2f:af:dc:9b:4a:f1:bd:02:eb:
         7e:80:a5:49:55:ea:33:d7:49:c9:91:b1:d7:38:de:ff:ad:7e:
         ae:79:79:29:b1:83:c2:a6:46:e6:c2:67:1d:05:13:1e:72:38:
         1b:37:fe:e3:b1:d6:5a:f2:34:10:6f:b0:bd:a4:4b:5d:32:6d:
         6c:9b:87:dd:e3:60:cc:c2:b5:c8:94:0e:f7:42:c6:40:7f:48:
         5c:e4:ad:8b:0e:93:09:04:1c:e1:7b:c0:56:f3:55:ff:93:80:
         37:50:f1:54:4c:1d:93:dd:6e:7f:3e:d5:98:c7:e5:86:36:14:
         b8:b0:49:74:d5:47:26:a9:2e:5c:9a:e0:c0:54:af:83:96:46:
         f8:90:1d:2f:7e:0c:c1:bc:6c:ac:80:d0:19:41:57:61:13:33:
         be:83:c0:20:8b:7d:0f:7b:88:fc:1c:15:4f:f6:85:22:b3:54:
         83:7c:7d:80:9b:bb:1c:2a:c4:97:b6:54:8c:11:1e:e2:aa:b9:
         f3:45:4e:cb:39:ba:51:8d:6f:7b:c6:35:cb:5a:08:9c:30:cb:
         2f:e2:8c:fc:5d:7d:69:64:48:18:a0:51:4e:6a:2b:10:0e:b3:
         68:5e:f3:0a:8c:19:f8:7c:cc:28:11:5d:da:d3:a5:30:01:00:
         3a:d7:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----