Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.mft
File:                     C7F9D8A926471FF68968F390EC284A7314FF9B9A.mft (raw, json)
Hash identifier:          yDoc4nKb7uVn9tMOC2JlM/0Ua2Jyg0Pre+iv2EULHtA=
Subject key identifier:   68:DF:69:4D:BD:98:7A:A4:85:24:BB:F9:A1:A4:35:3A:11:BB:E3:98
Authority key identifier: C7:F9:D8:A9:26:47:1F:F6:89:68:F3:90:EC:28:4A:73:14:FF:9B:9A
Certificate issuer:       /CN=C7F9D8A926471FF68968F390EC284A7314FF9B9A
Certificate serial:       6703C961411FDEA0EB000300212AE6E19D66FAAA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.mft
Manifest number:          28
Signing time:             Sat 21 May 2022 22:16:56 +0000
Manifest this update:     Sat 21 May 2022 22:11:56 +0000
Manifest next update:     Mon 23 May 2022 00:26:56 +0000
Files and hashes:         1: C7F9D8A926471FF68968F390EC284A7314FF9B9A.crl (hash: dnTo2zq/8PXLQP1f+T7MJ7u2Laz11Rt8RamJ1lP2kB8=)
                          2: 34352e3136362e35362e302f32322d3234203d3e20323634313733.roa (hash: a92EAhqb9uL3XFEryWHOTyiiVnerR8yOEEn6XZIMmJI=)
                          3: 323830343a353536343a3a2f33322d3438203d3e20323634313733.roa (hash: d9cz/zLUVqX7IaXYXqqMp/74q1ZkiYngVMznoc6kl2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:03:c9:61:41:1f:de:a0:eb:00:03:00:21:2a:e6:e1:9d:66:fa:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7F9D8A926471FF68968F390EC284A7314FF9B9A
        Validity
            Not Before: May 21 22:11:56 2022 GMT
            Not After : May 23 00:26:56 2022 GMT
        Subject: CN=68DF694DBD987AA48524BBF9A1A4353A11BBE398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:9c:fe:f2:4c:57:dc:99:e2:be:b7:41:1b:
                    1c:6d:ba:bb:35:3a:6c:b0:7d:48:99:6e:56:ed:a0:
                    85:65:f8:94:44:fe:3c:e0:88:3b:63:a2:2b:d9:39:
                    55:d4:48:12:be:f1:35:52:99:8a:87:5d:42:9b:72:
                    1e:47:55:44:be:60:44:6b:5a:00:e4:3d:f3:99:fc:
                    f3:64:69:8d:79:32:30:a8:d7:61:d4:1b:cc:88:a3:
                    d7:19:15:1c:07:0e:77:ae:3b:30:ff:73:07:3f:c5:
                    78:a2:95:2d:94:7a:df:6b:d9:8f:77:cc:42:33:4c:
                    b7:ab:4d:04:06:47:6f:0d:fa:f6:46:ae:dd:fb:2a:
                    5f:74:b7:78:a7:4b:56:67:0f:e5:02:fa:a1:bb:e3:
                    d3:ab:0f:8e:54:24:c4:30:4e:cc:6d:ab:a9:cc:8b:
                    03:7e:22:16:07:4e:22:86:86:d5:be:f5:b0:47:28:
                    d9:73:4e:dd:da:5a:4a:9a:c6:29:d8:19:9e:6e:c6:
                    e9:95:7c:a2:05:97:e0:85:54:e5:0b:5e:bf:10:85:
                    74:59:98:e0:5c:63:1c:74:ab:af:da:72:a3:fd:43:
                    c3:59:a3:9b:4b:3e:fb:bc:83:63:3f:e5:ff:85:1c:
                    17:8b:94:e0:fd:d1:bc:74:e6:2a:90:0c:65:60:b4:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:69:4D:BD:98:7A:A4:85:24:BB:F9:A1:A4:35:3A:11:BB:E3:98
            X509v3 Authority Key Identifier:
                keyid:C7:F9:D8:A9:26:47:1F:F6:89:68:F3:90:EC:28:4A:73:14:FF:9B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9Vwpv6uSV82QHzaxVqEW3z9jD9LpbY6in2hMt4bJ4WT/0/C7F9D8A926471FF68968F390EC284A7314FF9B9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6b:21:ac:b7:e2:dc:30:18:4b:a9:53:90:e9:d8:5d:e8:9f:
         30:6c:9f:ff:b8:fd:a7:99:be:9d:d7:cd:3c:76:3c:b8:10:c2:
         56:3a:42:ed:b4:7a:50:3a:36:61:38:5e:ab:80:44:75:b8:03:
         d6:c0:ed:70:65:18:43:bb:65:35:df:92:2f:56:2a:54:b3:fe:
         82:be:bd:a5:1c:02:4f:1c:bc:c2:2d:46:ed:90:42:fa:c0:90:
         15:c8:6d:51:c7:e4:99:2c:54:82:f1:99:f4:bd:45:0f:cc:11:
         30:82:56:2b:30:dc:b1:7f:8f:db:13:69:5a:5b:e3:68:04:07:
         b4:86:b4:89:ce:4b:c7:54:9a:26:69:a9:b4:51:af:61:90:a8:
         a3:ad:c3:bd:8b:e7:28:4d:cb:2f:d1:34:88:86:40:30:31:f6:
         a8:14:e8:3d:b0:a2:19:ad:e8:5f:63:c0:9b:39:da:ca:27:e4:
         93:72:8c:2a:81:98:6a:29:0e:ff:31:91:1a:7f:47:be:5f:d3:
         15:66:25:2e:d4:c3:d5:79:f2:6e:a8:6b:91:ff:4d:23:03:32:
         99:b1:e0:0c:41:8c:48:4d:74:ea:73:7f:ae:1d:5b:78:77:66:
         e1:1c:2f:71:68:17:5c:90:5b:1c:e6:75:24:85:8d:5f:99:58:
         17:6f:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----