Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.mft
File:                     E5D8A4B837924CB61F25609D9A7874CF60F09B18.mft (raw, json)
Hash identifier:          pgjKV09AxzKo+/0cdCV6sK4VqEJNZDDz2Cgd8gA9lJU=
Subject key identifier:   4C:E9:0D:E4:89:57:9B:44:3A:B3:C9:F5:2E:B5:2A:EF:C9:0B:B1:35
Authority key identifier: E5:D8:A4:B8:37:92:4C:B6:1F:25:60:9D:9A:78:74:CF:60:F0:9B:18
Certificate issuer:       /CN=E5D8A4B837924CB61F25609D9A7874CF60F09B18
Certificate serial:       2F6E87A953D6D149CAF6A9D5611315A74242B8BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.mft
Manifest number:          64
Signing time:             Sun 03 Sep 2023 13:53:00 +0000
Manifest this update:     Sun 03 Sep 2023 13:48:00 +0000
Manifest next update:     Mon 04 Sep 2023 17:48:00 +0000
Files and hashes:         1: 323830343a343362343a3a2f33322d313238203d3e20323637353835.roa (hash: a2IkAEemtxeLfm8onny+xnNFswT7Cl9KI7Tt+/t/y0E=)
                          2: E5D8A4B837924CB61F25609D9A7874CF60F09B18.crl (hash: 2XNkEFtdbyXNO8zYUoGk4lP459uGkiHgwVa0flK4CjY=)
                          3: 34352e37302e3139322e302f32322d3332203d3e20323637353835.roa (hash: gmALvx1P/7PrhsaibMsZX6TJHfHD+mewkg3hE5rSms0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6e:87:a9:53:d6:d1:49:ca:f6:a9:d5:61:13:15:a7:42:42:b8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D8A4B837924CB61F25609D9A7874CF60F09B18
        Validity
            Not Before: Sep  3 13:48:00 2023 GMT
            Not After : Sep  4 17:48:00 2023 GMT
        Subject: CN=4CE90DE489579B443AB3C9F52EB52AEFC90BB135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:f5:44:13:bb:11:07:bd:bf:2c:54:54:59:
                    92:c0:f4:d3:0b:4f:fc:c5:3c:93:ea:be:6e:95:dc:
                    53:2f:79:a7:e0:c7:5a:89:76:f3:42:64:43:e6:bf:
                    39:52:01:2a:a5:64:9e:fa:89:75:47:70:26:53:b2:
                    5d:f4:af:2a:df:28:42:26:da:83:83:88:7f:3f:d2:
                    e3:5b:d7:06:79:62:da:61:93:b3:d2:90:02:27:47:
                    d3:e5:7d:75:7d:f7:73:ce:b0:6f:a3:51:f6:a8:d0:
                    66:59:45:d8:64:da:a7:cc:2f:d9:96:2b:b0:17:71:
                    8b:78:87:0b:f5:bf:9a:33:81:67:93:4c:1c:8d:18:
                    50:83:8b:b8:78:61:6f:20:6b:1a:be:7a:be:2d:f4:
                    e9:27:19:90:08:c9:4a:49:45:43:3f:a5:71:89:58:
                    65:aa:73:e0:5f:5a:ce:9c:b6:e0:bb:e3:92:b4:94:
                    64:a0:13:ff:1b:29:62:bc:7f:a3:46:f0:44:b7:6c:
                    e6:0e:49:54:f2:79:71:6d:c5:3a:d2:ae:29:cc:74:
                    38:e6:0f:91:1f:21:69:a2:68:1f:3c:83:22:2c:e8:
                    9f:46:0b:8e:23:2e:7f:98:b7:7e:cb:0b:1c:38:99:
                    49:76:dd:d1:00:69:49:34:09:b8:7e:a4:e4:7a:f3:
                    be:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:0D:E4:89:57:9B:44:3A:B3:C9:F5:2E:B5:2A:EF:C9:0B:B1:35
            X509v3 Authority Key Identifier:
                keyid:E5:D8:A4:B8:37:92:4C:B6:1F:25:60:9D:9A:78:74:CF:60:F0:9B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/E5D8A4B837924CB61F25609D9A7874CF60F09B18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:db:86:ef:66:72:b0:c0:26:1d:87:a0:71:d6:a7:c7:4b:
         28:64:dd:5d:40:f5:3f:72:ac:9a:e8:fc:82:90:48:8a:a6:69:
         7d:08:e2:05:c5:c5:bd:3a:52:a9:30:67:6c:17:2d:94:f4:ee:
         db:9a:4c:7e:40:0e:b9:77:36:09:20:80:13:32:d2:db:8b:13:
         60:3c:8b:c9:76:61:e3:31:86:d7:f8:cb:1f:1e:e6:68:27:eb:
         27:a3:f8:b7:0d:cd:18:bc:e0:f2:86:65:49:0e:04:0a:21:24:
         6d:a7:b7:1e:a0:cd:91:d3:85:52:de:94:7b:c7:f4:84:ad:46:
         e5:9f:6c:11:c1:69:ca:9e:f3:47:4f:38:8c:f2:62:32:9e:d6:
         82:9a:cc:ed:8a:f9:3d:04:8e:8f:11:1f:25:bd:71:e6:45:73:
         96:53:6c:2f:9d:54:c1:a2:5e:f4:70:b7:cc:86:9e:e2:05:21:
         4c:d5:d9:46:0c:42:3d:65:f2:3a:0c:77:21:b3:0e:34:cb:4f:
         ca:b7:4a:0b:e6:0a:70:85:28:6f:27:8d:8e:cd:ed:a2:16:d8:
         ea:93:ed:2e:f9:f9:7d:e9:87:f1:13:cf:57:a5:9e:f5:70:58:
         df:19:77:ac:1d:fe:bc:ab:ff:e9:68:de:a3:81:2f:d3:31:2f:
         74:c9:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----