Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.mft
File:                     CE68A6D76A55B9D8764712CA4B612489BCF20583.mft (raw, json)
Hash identifier:          ll0cKPR4tpj0CNNYWozSZXXqHxCkISHNDNeblxY9iOM=
Subject key identifier:   CE:4A:55:A0:35:EC:47:AF:0E:0D:F6:BD:3D:A2:B1:97:E5:E5:84:C0
Authority key identifier: CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83
Certificate issuer:       /CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
Certificate serial:       3B17BCA6B822FFA91D58D53C3EC00602F6F4308E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.mft
Manifest number:          96
Signing time:             Tue 12 Sep 2023 18:00:58 +0000
Manifest this update:     Tue 12 Sep 2023 17:55:58 +0000
Manifest next update:     Wed 13 Sep 2023 20:30:58 +0000
Files and hashes:         1: 323830343a373761633a3a2f33322d3438203d3e20323731313932.roa (hash: roQknvWaVss4MJAUvPL6gGALAhqhnJ8sLGIX3yCu2UE=)
                          2: CE68A6D76A55B9D8764712CA4B612489BCF20583.crl (hash: WQWVt3AVBjaiiDvnL2unkePB5ZeTJkYHkXIG8zRyp14=)
                          3: 3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (hash: UUEvdwq7cWFXTp1jZDzONqKjHacaxg0z+AA2dMXY0aU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:17:bc:a6:b8:22:ff:a9:1d:58:d5:3c:3e:c0:06:02:f6:f4:30:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
        Validity
            Not Before: Sep 12 17:55:58 2023 GMT
            Not After : Sep 13 20:30:58 2023 GMT
        Subject: CN=CE4A55A035EC47AF0E0DF6BD3DA2B197E5E584C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:03:ff:2a:0c:8f:c5:96:fa:fa:66:25:bb:
                    0b:d7:07:94:c1:e9:91:70:30:35:ee:a4:2e:03:57:
                    65:58:ae:29:bb:95:8a:a1:5e:a4:21:5c:6e:59:12:
                    72:b8:e5:b7:39:b0:52:9c:0d:e0:3e:c9:a1:17:09:
                    43:f8:4f:13:2b:8f:e8:8d:99:1a:a1:ff:9a:01:dd:
                    c2:ed:61:55:f2:f5:91:a2:ad:9f:80:80:6f:39:39:
                    7f:9a:e6:f2:bb:f0:44:37:71:3c:7d:6a:b1:0a:cd:
                    82:24:e5:58:00:94:4c:f3:9d:46:54:08:3d:85:d8:
                    21:14:62:f3:89:d2:4f:2f:70:67:19:d3:bd:cb:ee:
                    52:09:fa:18:3e:b3:89:35:8b:34:7b:de:4c:1d:e0:
                    52:29:3d:32:2f:a5:ec:35:e3:14:54:2b:41:f1:96:
                    29:ec:09:08:77:79:84:54:96:3e:9c:c9:91:bf:81:
                    26:c4:c6:02:d5:03:97:86:fb:1d:c5:35:a4:46:23:
                    cb:aa:8e:07:a4:d3:d7:e2:9b:8d:e5:e8:e6:25:e6:
                    f0:ae:97:65:6a:cd:94:44:28:20:09:18:37:0d:6d:
                    f2:85:16:a2:f9:cb:8b:03:76:8c:82:5d:ea:84:6b:
                    04:a4:bc:92:2d:88:5a:ba:0a:ee:a2:30:72:30:98:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:55:A0:35:EC:47:AF:0E:0D:F6:BD:3D:A2:B1:97:E5:E5:84:C0
            X509v3 Authority Key Identifier:
                keyid:CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:45:0f:5f:c2:6c:e8:f9:c0:6d:cd:c1:3b:57:ec:ce:a4:
         67:58:a9:6d:e8:57:34:bf:b0:f3:7c:92:fa:db:f0:12:06:23:
         70:3c:61:aa:a0:27:cf:16:a3:f0:8f:ab:25:d9:c2:71:f7:27:
         b3:b0:cb:6f:a6:bc:b1:3d:30:a5:f6:4c:16:bc:aa:f1:b6:79:
         cf:90:33:ce:c5:5d:33:8d:da:cb:d4:5b:99:c4:7c:50:4f:2f:
         da:ee:88:ff:e8:5e:6c:66:0c:59:5f:e0:09:1c:95:07:ab:60:
         d9:ed:ce:e5:d2:73:f5:c1:07:c9:84:c1:59:c5:ba:4c:5e:71:
         10:a5:57:5d:64:7c:7e:65:af:0a:70:87:e7:0e:b7:1c:1a:81:
         7c:69:cc:db:a0:b6:c7:98:a5:93:47:d5:b6:1b:74:94:ef:54:
         82:28:22:79:dd:cb:4d:0b:57:9a:90:c3:a0:81:07:1a:11:42:
         dd:2f:cc:a1:f0:ec:f3:a0:90:02:b2:02:cc:33:24:9e:27:37:
         8b:f9:07:cc:db:a4:b2:6a:55:78:be:1e:9a:af:e7:07:48:bd:
         91:7f:7c:31:05:7b:d2:0f:58:43:e2:19:7e:7f:73:a2:da:50:
         2c:7c:53:9b:bb:49:ba:97:77:cb:df:75:c5:f8:56:da:8a:d1:
         e5:fe:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----