Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/88739320FAEB66281317899CD946D1767052F422.mft
File:                     88739320FAEB66281317899CD946D1767052F422.mft (raw, json)
Hash identifier:          PCcDPH/z0a+HFpvwNyEt5eE3/X8n8NGgu3z172wThsU=
Subject key identifier:   8B:3E:BB:0B:FD:22:0B:69:59:B3:FD:5A:AB:E8:FB:3D:50:9C:09:35
Authority key identifier: 88:73:93:20:FA:EB:66:28:13:17:89:9C:D9:46:D1:76:70:52:F4:22
Certificate issuer:       /CN=88739320FAEB66281317899CD946D1767052F422
Certificate serial:       52E519DD725B5A91FB79B7B18523DB2F48FE6DAE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88739320FAEB66281317899CD946D1767052F422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/88739320FAEB66281317899CD946D1767052F422.mft
Manifest number:          0174
Signing time:             Thu 22 Jun 2023 12:51:51 +0000
Manifest this update:     Thu 22 Jun 2023 12:46:51 +0000
Manifest next update:     Fri 23 Jun 2023 13:35:51 +0000
Files and hashes:         1: 88739320FAEB66281317899CD946D1767052F422.crl (hash: hfIzzW3yU6PtbYDTwWRWEiw8E4uDM7NSFkFKIcIClek=)
                          2: 34352e37302e3130302e302f32322d3235203d3e20323637353637.roa (hash: c9VkcvwT+h0Ba183E4xnD6MVO9wXTO1JlDkzlVTTG7w=)
                          3: 323830343a343336343a3a2f33322d3333203d3e20323637353637.roa (hash: mTghEVpr3nrGaEWVEj463K9QRguDaE+8OfcxoigWdDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e5:19:dd:72:5b:5a:91:fb:79:b7:b1:85:23:db:2f:48:fe:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88739320FAEB66281317899CD946D1767052F422
        Validity
            Not Before: Jun 22 12:46:51 2023 GMT
            Not After : Jun 23 13:35:51 2023 GMT
        Subject: CN=8B3EBB0BFD220B6959B3FD5AABE8FB3D509C0935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:89:fd:a7:d6:e5:16:80:62:fe:fd:36:58:
                    85:3b:b3:ad:e1:52:da:a8:87:c2:bc:e5:db:aa:62:
                    c9:7a:aa:6c:96:b2:f8:5c:da:72:6b:cd:6a:8e:9f:
                    8f:5c:4b:94:95:08:aa:a3:f5:eb:39:0f:ec:18:54:
                    2f:12:82:4a:f2:4d:29:64:89:1a:bb:cc:75:f4:5d:
                    43:ee:d5:07:94:7f:fd:92:1f:35:d0:20:25:4d:17:
                    15:3a:86:1b:40:5e:35:97:00:97:6e:b7:cb:d9:a1:
                    3d:89:99:1c:58:4e:b0:34:e9:e5:2f:6d:82:ef:d6:
                    35:77:ba:54:40:05:6d:e5:2c:e9:a3:34:32:67:b5:
                    3a:69:00:02:5c:9b:43:21:54:58:d6:dc:62:0d:86:
                    4e:f2:77:b1:d1:2a:10:0b:4a:8c:9b:57:cb:96:41:
                    25:1e:dd:db:67:9d:5d:48:97:e7:02:75:3a:cd:92:
                    00:0d:5a:83:c3:df:c9:ab:61:1e:07:80:73:56:f3:
                    e4:19:93:b5:dd:67:6f:65:91:f8:59:f8:b9:58:03:
                    31:a7:4a:56:38:da:16:bb:7d:da:e2:1a:2b:5b:aa:
                    29:fb:5e:a9:7c:b7:97:5b:f9:a1:45:df:7a:94:71:
                    b5:05:13:5f:57:dd:50:7a:7d:b0:fe:a1:00:61:54:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:BB:0B:FD:22:0B:69:59:B3:FD:5A:AB:E8:FB:3D:50:9C:09:35
            X509v3 Authority Key Identifier:
                keyid:88:73:93:20:FA:EB:66:28:13:17:89:9C:D9:46:D1:76:70:52:F4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/88739320FAEB66281317899CD946D1767052F422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88739320FAEB66281317899CD946D1767052F422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/0/88739320FAEB66281317899CD946D1767052F422.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:88:b3:58:ae:ee:45:8b:b0:92:c8:32:27:76:24:88:f4:
         96:d2:96:a9:ea:da:5c:a0:6a:16:05:e1:a4:e8:22:6a:fb:80:
         3e:99:7e:1d:f8:49:50:86:d5:1d:fb:8d:9a:ba:06:3b:45:de:
         8a:fb:08:7e:43:3f:b5:35:02:b9:d7:44:ea:9a:1a:27:bb:05:
         c1:86:df:3d:0a:c4:85:ad:f3:af:f2:c6:c1:b9:35:48:a8:ab:
         07:05:7c:b9:87:28:6f:32:42:f0:a2:1d:ae:33:71:7d:dd:66:
         03:6c:fa:3c:92:32:8d:98:fa:86:11:e0:1f:e9:2f:32:c7:3b:
         90:df:70:ba:b5:24:ce:52:70:a6:09:36:d3:e1:1b:be:8f:c4:
         43:07:36:96:1a:0f:3c:2e:c5:e3:34:9a:38:d2:0f:68:15:a0:
         2d:b2:71:72:80:2b:1b:ff:0e:b3:7b:3a:6c:86:ff:87:3a:61:
         f3:da:e3:95:8d:2c:59:79:67:ae:eb:6e:ee:73:94:9f:6a:83:
         df:bf:e7:ab:ae:89:9b:13:ef:4c:6d:5b:39:6f:4d:49:f7:9a:
         2d:61:4a:79:89:a4:07:6d:6b:68:27:de:e2:c6:7e:59:ef:57:
         7a:57:21:f6:14:64:b6:b5:e4:f0:14:13:31:53:85:b2:30:b3:
         a2:1e:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----