Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/B7E122410F47443C8046110E5B9CBB3A044258DD.mft
File:                     B7E122410F47443C8046110E5B9CBB3A044258DD.mft (raw, json)
Hash identifier:          p8zg9uwdJBO3dzqPxbYdbxy7ccRGdWuLBW1uPfJDdE0=
Subject key identifier:   D6:F1:0E:E6:28:45:66:3F:F1:A0:77:FC:EA:F7:A8:84:29:29:61:11
Authority key identifier: B7:E1:22:41:0F:47:44:3C:80:46:11:0E:5B:9C:BB:3A:04:42:58:DD
Certificate issuer:       /CN=B7E122410F47443C8046110E5B9CBB3A044258DD
Certificate serial:       51449D28F0E967CDFF5619F53BB95DEBB8DF941A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7E122410F47443C8046110E5B9CBB3A044258DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/B7E122410F47443C8046110E5B9CBB3A044258DD.mft
Manifest number:          0139
Signing time:             Sat 17 Jun 2023 19:58:33 +0000
Manifest this update:     Sat 17 Jun 2023 19:53:33 +0000
Manifest next update:     Sun 18 Jun 2023 21:19:33 +0000
Files and hashes:         1: 323830343a343362343a3a2f33322d313238203d3e20323637353835.roa (hash: xCqfuAOxf0g+aY2bqX4bmS36Zk/o6H6McOaKgrTf5gQ=)
                          2: 34352e37302e3139322e302f32322d3332203d3e20323637353835.roa (hash: XuLrJUi+ogOpMUkMS6SPxftq7ai76x62+kM22jYfAxI=)
                          3: B7E122410F47443C8046110E5B9CBB3A044258DD.crl (hash: KmuTuJV7lT1T71wVnqnDZLVyMdAWzQYdHC9p+IzRRMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:44:9d:28:f0:e9:67:cd:ff:56:19:f5:3b:b9:5d:eb:b8:df:94:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7E122410F47443C8046110E5B9CBB3A044258DD
        Validity
            Not Before: Jun 17 19:53:33 2023 GMT
            Not After : Jun 18 21:19:33 2023 GMT
        Subject: CN=D6F10EE62845663FF1A077FCEAF7A88429296111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:d4:fa:48:65:99:a2:55:2f:4d:e7:f5:50:
                    a3:5a:7d:02:49:80:3f:fd:2e:23:57:c4:e8:a7:e4:
                    5c:df:b1:2c:98:95:52:58:9d:6a:28:ab:94:25:7d:
                    50:10:d9:94:53:e0:92:64:da:eb:91:ac:65:3a:f7:
                    8e:b6:ea:2f:71:32:3c:f0:ce:cc:54:b1:2b:39:98:
                    c8:ab:7f:a2:c8:b9:2d:82:1f:2f:06:ec:96:53:ce:
                    72:b1:a3:24:ba:f3:ea:67:78:ce:a1:24:68:cc:f9:
                    1b:a1:04:fd:e1:5c:9f:0f:f7:9e:07:03:59:0f:ed:
                    c6:f0:33:3b:f0:13:f4:01:d2:72:96:2d:7a:05:ee:
                    d4:03:ea:29:5a:3b:11:78:8a:8c:c8:e2:1a:1d:c1:
                    06:3c:50:2c:89:b2:52:15:79:99:96:7d:68:67:4d:
                    15:5e:fe:49:11:d3:a8:c0:73:92:e7:4d:72:57:fc:
                    89:60:0e:df:cb:83:f2:50:26:29:9c:ff:3f:46:f4:
                    34:ef:78:66:64:80:60:3f:25:cb:6d:ec:c2:e6:57:
                    d3:52:eb:dc:b7:01:6f:3f:00:c7:23:64:ff:0d:46:
                    6d:e6:91:a1:ff:54:9e:37:f9:11:79:06:65:eb:0f:
                    7c:6d:cb:53:27:15:d3:e1:8f:72:08:d9:7f:d2:2d:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:0E:E6:28:45:66:3F:F1:A0:77:FC:EA:F7:A8:84:29:29:61:11
            X509v3 Authority Key Identifier:
                keyid:B7:E1:22:41:0F:47:44:3C:80:46:11:0E:5B:9C:BB:3A:04:42:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/B7E122410F47443C8046110E5B9CBB3A044258DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7E122410F47443C8046110E5B9CBB3A044258DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/B7E122410F47443C8046110E5B9CBB3A044258DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:b0:dc:6c:34:a6:53:f6:ea:5d:8e:6e:82:8f:a4:3c:3a:
         cb:8e:61:1f:8c:de:38:43:ff:b1:cd:03:e5:99:89:2c:6c:b6:
         22:76:c3:e0:b8:e2:42:91:22:4c:df:bb:af:a5:65:ce:7f:49:
         71:cd:e2:17:a3:8c:fa:98:aa:e9:f0:d0:64:0d:d6:48:4c:df:
         3a:fc:a8:d2:4f:6f:8a:05:de:cb:f5:e6:c4:78:1b:aa:85:38:
         41:39:bf:8d:67:59:08:90:cc:17:50:ea:9c:5b:a7:c6:1f:48:
         c2:d6:57:50:32:68:7d:61:d9:38:8e:85:bc:3d:94:fd:f7:aa:
         04:ac:05:73:d9:c7:18:d7:99:2e:b5:b2:03:8f:96:5d:9f:b1:
         c4:6e:f9:ca:88:65:f3:b5:44:c2:85:da:de:16:f7:34:ff:dd:
         67:2b:ea:0c:b2:dc:08:c2:b7:3d:72:63:9b:04:29:b9:e6:4e:
         56:0f:72:87:e3:fc:97:64:14:48:32:a3:fc:a3:af:55:23:db:
         21:f8:99:26:fb:7a:d5:83:af:5b:8f:4a:bf:fe:81:37:c4:38:
         b2:e2:88:99:b6:1b:30:73:c7:d8:6d:7b:05:17:b8:d6:71:5d:
         10:e1:2d:22:e3:ff:78:98:83:d0:55:dc:65:95:8d:38:df:02:
         55:78:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----