Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.mft
File:                     7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.mft (raw, json)
Hash identifier:          y94DzCMD92hR9BWPfJ55A6Qu0j6x2Ztpim281rHIfjI=
Subject key identifier:   14:4E:CF:CF:1A:C4:80:DE:0C:73:BE:C6:96:36:96:08:4A:6C:B5:85
Authority key identifier: 7A:AF:88:25:92:9B:0D:01:AC:2A:8D:CD:98:94:CE:0F:93:33:77:B9
Certificate issuer:       /CN=7AAF8825929B0D01AC2A8DCD9894CE0F933377B9
Certificate serial:       242BA14DB2483842915A1E8AAFB54BEFA9E96715
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.mft
Manifest number:          36
Signing time:             Mon 15 May 2023 18:47:56 +0000
Manifest this update:     Mon 15 May 2023 18:42:56 +0000
Manifest next update:     Tue 16 May 2023 19:18:56 +0000
Files and hashes:         1: 323830343a353764303a3a2f33322d313238203d3e20323638303838.roa (hash: qLaLfXWEcQNCVcLGXOy+eF1CmjhDK7B0MrUtdXFhmpk=)
                          2: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: Z3FV47+LFdulrAn9szHMNT0QJBDrjaqxxMIHvvrEdjk=)
                          3: 7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.crl (hash: +5wBFcUdgfrGTvLE6YhKGQi07zJbLHRcLVBC3qZi7kY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:a1:4d:b2:48:38:42:91:5a:1e:8a:af:b5:4b:ef:a9:e9:67:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AAF8825929B0D01AC2A8DCD9894CE0F933377B9
        Validity
            Not Before: May 15 18:42:56 2023 GMT
            Not After : May 16 19:18:56 2023 GMT
        Subject: CN=144ECFCF1AC480DE0C73BEC6963696084A6CB585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:25:a2:f4:18:e3:81:05:5b:19:2c:de:2d:
                    5c:27:45:21:a2:9a:df:05:fd:46:32:2a:e8:2a:f7:
                    a9:d5:65:e8:db:1b:ba:df:06:53:6c:c7:15:20:29:
                    22:42:a4:af:d2:77:c3:82:1b:ae:05:9f:5a:26:9e:
                    dc:a2:c4:5c:2f:14:c9:0c:60:61:25:86:02:9f:00:
                    33:8e:2f:bd:55:65:6a:67:6b:81:21:df:b3:7e:60:
                    ac:83:98:db:39:97:76:37:8d:83:dc:ca:4c:a1:79:
                    b4:d1:49:bc:7a:29:4e:5d:3c:be:25:69:b5:f5:43:
                    98:58:5b:92:03:a6:12:06:6a:2d:63:81:c1:b8:99:
                    d2:a0:cc:16:f2:d7:82:b1:c4:9e:7e:cd:df:c3:c1:
                    6d:3a:41:cc:bf:5a:66:9c:4a:d4:4c:73:fa:a1:bf:
                    69:92:12:0f:d0:91:5c:66:ec:3f:c9:15:b7:90:0a:
                    0b:60:f0:dd:ce:48:6d:27:80:2b:52:a5:d2:ab:0e:
                    8e:77:d4:cd:d4:ef:96:71:c7:a2:84:74:f8:a8:cb:
                    db:09:4a:8e:20:e6:a3:5d:0e:25:b4:51:2d:85:ee:
                    bf:df:ff:70:b7:c8:9d:03:1e:28:fa:f7:04:b0:75:
                    0a:9a:4f:2e:2d:af:e1:83:ff:85:5c:2b:02:fb:50:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4E:CF:CF:1A:C4:80:DE:0C:73:BE:C6:96:36:96:08:4A:6C:B5:85
            X509v3 Authority Key Identifier:
                keyid:7A:AF:88:25:92:9B:0D:01:AC:2A:8D:CD:98:94:CE:0F:93:33:77:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/7AAF8825929B0D01AC2A8DCD9894CE0F933377B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:5a:89:f9:51:e2:d1:4d:60:41:06:ae:2f:fd:a7:f7:7b:9e:
         0d:09:1e:41:6d:39:26:3e:53:fc:16:cc:6a:2f:77:10:f1:f3:
         65:5c:7f:55:b1:51:92:bd:24:3c:fc:c0:6d:b3:fd:cb:0b:65:
         65:31:b2:42:60:a2:9a:73:f1:38:d4:b1:4c:a2:a4:c2:5d:0e:
         1d:be:07:91:19:9a:34:80:6e:8e:f3:3f:3e:ed:ba:00:d6:6f:
         7d:72:f5:9b:2f:8f:61:53:4e:f2:2a:4a:ae:e0:56:82:ed:4f:
         ae:ca:74:ef:38:a3:49:06:74:c5:d4:21:c1:1d:54:15:f8:64:
         a1:52:80:94:08:5a:96:2d:1a:d0:3b:17:55:f7:98:71:e9:7f:
         a2:97:c6:eb:dd:89:b4:35:00:07:36:27:ad:ca:d9:82:f5:04:
         ce:8e:c1:cc:b6:3b:fe:71:d5:67:03:65:f1:a5:aa:09:8f:06:
         09:d4:84:5d:59:17:65:59:4b:60:3a:19:de:95:31:01:02:cc:
         39:26:7b:13:76:c7:25:3e:b5:c7:cc:27:cc:72:20:47:14:87:
         1e:c7:e4:18:76:44:74:4d:32:67:a0:48:42:c1:6b:e7:27:ec:
         f7:0c:30:09:78:a1:2e:2c:65:06:e6:1d:26:46:da:7b:77:2e:
         d4:99:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----