Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.mft
File:                     8FCB2AC563D94B1155742D01E76CE7D839E49E25.mft (raw, json)
Hash identifier:          ihvFpz2llHQx3QZzL/6GG4yQmEzfH1eA1vIcQzYfjAE=
Subject key identifier:   76:60:BE:3D:82:26:42:68:B4:57:19:85:18:DC:34:30:2E:64:37:0D
Authority key identifier: 8F:CB:2A:C5:63:D9:4B:11:55:74:2D:01:E7:6C:E7:D8:39:E4:9E:25
Certificate issuer:       /CN=8FCB2AC563D94B1155742D01E76CE7D839E49E25
Certificate serial:       0585D41566B0A6F275B25D1DD42F383EE743ECCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.mft
Manifest number:          054F
Signing time:             Sat 15 Apr 2023 01:04:56 +0000
Manifest this update:     Sat 15 Apr 2023 00:59:56 +0000
Manifest next update:     Sun 16 Apr 2023 01:53:56 +0000
Files and hashes:         1: 323830343a333561383a3a2f33322d3334203d3e20323636323939.roa (hash: TDrRtsrK6IT38/qKOidBh72oJtyObtxpo2unuMBlFLU=)
                          2: 8FCB2AC563D94B1155742D01E76CE7D839E49E25.crl (hash: Ir9bOBb8DKrip+YABP7HbAOv4NmCfcsYho+gDWLdcz4=)
                          3: 3137302e37392e3134382e302f32322d3234203d3e20323636323939.roa (hash: DO+O1/ZuJmsNIuuK3Kej1kxzxnbHCJB+z0bkQF20fHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:85:d4:15:66:b0:a6:f2:75:b2:5d:1d:d4:2f:38:3e:e7:43:ec:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB2AC563D94B1155742D01E76CE7D839E49E25
        Validity
            Not Before: Apr 15 00:59:56 2023 GMT
            Not After : Apr 16 01:53:56 2023 GMT
        Subject: CN=7660BE3D82264268B457198518DC34302E64370D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:cd:b0:59:8e:dc:63:7c:a3:81:e0:c2:27:
                    df:a6:e7:6a:4f:b2:ce:75:b5:1c:6e:6c:cc:8b:f2:
                    21:65:74:6e:d2:a1:c2:ab:73:14:36:23:1c:51:84:
                    11:e1:f4:e2:36:3a:37:a7:b1:66:22:5f:a8:60:42:
                    aa:24:6b:76:a3:34:44:b9:d0:96:10:a1:b4:89:6b:
                    d4:34:20:e2:db:fd:fb:d1:13:73:04:9d:b5:0f:63:
                    2b:d3:59:eb:26:8c:65:b9:75:1e:04:ec:e3:b7:66:
                    0a:a1:70:b7:a7:2b:94:82:da:f5:d0:ae:cb:d9:20:
                    b1:c5:b3:30:39:e5:ed:c3:f7:51:61:8d:16:9d:71:
                    60:24:dd:ad:a9:1a:85:36:0b:7b:21:55:74:68:dc:
                    07:2f:e8:dc:db:ff:2e:e8:3e:53:54:2f:c3:12:0a:
                    4e:c0:47:59:73:59:17:5e:c0:3b:92:d6:77:a7:ea:
                    a4:22:66:4a:f3:f5:6a:ec:76:93:60:4d:61:97:81:
                    f8:53:8d:86:57:30:f5:5c:85:72:6a:56:52:c2:13:
                    8f:51:bc:f2:e5:1d:6a:3b:97:19:07:84:11:16:74:
                    1d:14:a1:fe:1c:59:4b:d7:a2:96:ef:c2:0b:e6:2d:
                    a1:da:c8:b3:8c:a3:71:8e:4b:ea:d8:f7:0a:08:a1:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:60:BE:3D:82:26:42:68:B4:57:19:85:18:DC:34:30:2E:64:37:0D
            X509v3 Authority Key Identifier:
                keyid:8F:CB:2A:C5:63:D9:4B:11:55:74:2D:01:E7:6C:E7:D8:39:E4:9E:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:63:77:aa:82:41:10:2d:e1:f7:06:58:80:ad:a8:b8:36:
         cb:6a:e7:37:21:97:f1:5e:e2:7f:bc:59:94:5a:6f:3e:98:9c:
         03:f1:99:58:0a:68:1c:63:94:34:b5:b0:eb:ab:50:9a:df:5f:
         00:b3:76:13:c2:51:7f:77:51:ea:69:91:37:b1:b1:f8:94:fb:
         57:22:f3:53:e6:16:60:e6:7e:bc:61:c2:a7:cd:2b:4f:13:ca:
         67:2f:6a:d4:8c:17:5c:98:df:ec:47:f8:d0:14:14:b3:08:17:
         52:7d:80:69:3e:27:92:99:8c:01:09:4a:fe:1d:e0:c7:95:39:
         dc:04:d3:0e:97:68:d6:e9:4b:1e:56:e0:36:62:67:6e:fe:41:
         1b:cb:d0:7a:6c:26:d8:4e:31:b5:b7:09:6c:a5:c3:5a:25:8c:
         90:0e:35:4a:3d:5c:a0:38:11:49:70:bd:ea:b2:c9:39:a2:d8:
         24:c0:15:95:86:24:d6:82:ac:b6:ab:50:04:f4:70:e1:03:05:
         ab:ac:7f:d3:f7:d7:7a:9f:44:31:48:75:e1:11:09:58:d3:37:
         f8:e7:37:b9:0b:c7:84:9e:e4:55:44:1b:5e:e6:59:dd:66:0c:
         2a:92:59:de:20:5e:16:db:15:ee:39:02:eb:69:a1:e8:0b:73:
         7b:9e:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----