Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.mft
File:                     F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.mft (raw, json)
Hash identifier:          TWq8LvaxWrhikBPtLxcylgp/b06U330CGLJNM8Y91U0=
Subject key identifier:   35:67:7E:A8:39:4A:33:B9:3B:E4:42:22:55:49:CF:69:0E:22:DD:C5
Authority key identifier: F0:36:D0:D9:FE:9A:10:BD:6E:EF:7C:80:C3:01:21:F9:B1:26:D8:1C
Certificate issuer:       /CN=F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C
Certificate serial:       557280A23D045F5435E58E5F16BD82A711B49BAB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.mft
Manifest number:          0130
Signing time:             Mon 19 Dec 2022 11:44:28 +0000
Manifest this update:     Mon 19 Dec 2022 11:39:28 +0000
Manifest next update:     Tue 20 Dec 2022 13:16:28 +0000
Files and hashes:         1: 3230302e3231392e32382e302f32322d3234203d3e20323730383236.roa (hash: WtKNqJM5EM/yRNY9VOZ2tZa4l1wxRnNT3xmAxFyhmyI=)
                          2: 323830343a373230303a3a2f33322d3430203d3e20323730383236.roa (hash: OfBZnykVDIQy1HSvwqQ86EcxJleR+XPSqZiIHsU67mM=)
                          3: F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.crl (hash: MFrnn3dX/MOXxgXahB9EspqbGVpn1HepVG/HLWNRxKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:72:80:a2:3d:04:5f:54:35:e5:8e:5f:16:bd:82:a7:11:b4:9b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C
        Validity
            Not Before: Dec 19 11:39:28 2022 GMT
            Not After : Dec 20 13:16:28 2022 GMT
        Subject: CN=35677EA8394A33B93BE442225549CF690E22DDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:8c:7a:6d:e4:af:ec:df:e7:5e:cf:20:d3:
                    bf:f9:c3:11:8f:62:b7:5d:1b:27:f1:30:db:85:20:
                    85:d9:18:7f:91:21:93:63:97:a4:18:b0:94:a3:b3:
                    f7:9c:19:33:26:05:fa:cf:9e:c1:ee:64:90:15:2f:
                    37:fd:42:5b:b5:13:ef:8c:77:4b:77:85:f9:89:b3:
                    82:e9:36:50:64:b7:ff:64:65:c1:b3:29:f8:bd:3b:
                    77:b2:f6:9c:ef:0c:ad:76:70:63:b9:9c:b5:2a:ad:
                    33:6e:27:c1:d7:0f:6d:ac:15:a2:57:62:a5:d6:bb:
                    5e:08:41:8e:39:2e:15:d0:bd:fa:38:0a:d0:9a:9e:
                    ca:e5:8e:00:52:a6:16:68:e6:b8:61:69:4f:fd:c5:
                    be:75:10:f9:bf:e8:30:9c:a2:5d:e2:67:50:33:db:
                    e5:a5:32:d0:24:79:4a:9c:1a:f4:49:5c:a1:89:bd:
                    72:8c:e2:c8:1b:b8:dd:5b:ca:dd:bc:9c:f2:53:49:
                    0a:5a:d2:14:21:ea:7a:4f:5b:a8:78:4e:71:92:0a:
                    e6:ca:0e:93:07:9c:da:5d:c3:6b:ea:dc:0f:a3:da:
                    d1:db:f3:5d:08:eb:d2:3e:ac:f1:79:5c:45:26:b1:
                    1e:ab:db:d2:27:11:d1:02:db:ca:d6:d3:b6:5b:b8:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:67:7E:A8:39:4A:33:B9:3B:E4:42:22:55:49:CF:69:0E:22:DD:C5
            X509v3 Authority Key Identifier:
                keyid:F0:36:D0:D9:FE:9A:10:BD:6E:EF:7C:80:C3:01:21:F9:B1:26:D8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/F036D0D9FE9A10BD6EEF7C80C30121F9B126D81C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:48:01:63:36:b8:58:5a:15:86:06:2b:ca:59:06:f4:3d:
         8f:67:93:58:a3:08:fb:c4:fd:9b:65:36:95:d4:5f:e3:51:e8:
         92:95:ed:83:32:8e:39:79:27:91:90:bb:d7:36:6c:98:a6:91:
         2a:9b:a8:4f:2e:ee:b7:2b:d6:62:89:7d:14:50:64:02:1f:a1:
         ff:76:dd:9f:08:d0:26:58:3f:f7:73:1b:37:f6:3c:92:0f:71:
         b9:96:45:11:6a:66:dd:00:0b:86:75:5f:69:fd:1d:c0:31:b2:
         62:8a:68:aa:38:e3:90:4e:8c:23:4f:1f:5c:24:6a:db:31:b3:
         15:ad:28:09:ec:98:8e:dd:94:a2:18:63:51:b5:51:7d:bf:47:
         e6:5d:70:14:15:09:21:18:6f:f1:d5:bc:5a:60:42:9e:9d:5f:
         fb:b3:f0:8a:5a:21:b3:1d:a8:78:00:24:b1:24:27:d5:df:6d:
         71:c9:1a:30:02:af:f6:5f:5d:02:ec:c1:6d:cd:5d:d8:36:d8:
         f4:a8:84:b9:d5:5c:e3:eb:9b:10:5e:3b:84:09:3a:50:2a:bb:
         22:9c:a5:2f:15:dd:80:e0:3f:d9:fa:11:19:e2:7e:6c:e0:c3:
         a2:46:5a:20:c5:98:08:da:a0:b4:2b:e8:45:2b:7c:5c:5d:55:
         ac:a3:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----