Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.mft
File:                     6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.mft (raw, json)
Hash identifier:          qbogaxAVF9KaZ9OZV/C+WspksoR5toqjrGxGhQ7U4gk=
Subject key identifier:   DD:F4:CE:0C:69:31:2D:21:05:D5:0E:0D:B6:E4:69:86:B8:FF:C5:DA
Authority key identifier: 68:91:FC:E6:CA:53:93:FA:BD:7C:02:E3:56:A4:B1:C1:14:C8:E3:F8
Certificate issuer:       /CN=6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8
Certificate serial:       564DB10C3EE5EE2BCF6E20E93BE59ADF6CF6D58A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.mft
Manifest number:          2D
Signing time:             Tue 26 Sep 2023 12:33:29 +0000
Manifest this update:     Tue 26 Sep 2023 12:28:29 +0000
Manifest next update:     Wed 27 Sep 2023 14:56:29 +0000
Files and hashes:         1: 3137392e34382e3230382e302f32322d3234203d3e20323731303939.roa (hash: RBpPNWBNHUmopz6N1bpmjz34KNE6bNFVNQOxA7MzNoQ=)
                          2: 323830343a373634303a3a2f33322d3438203d3e20323731303939.roa (hash: h51/kRq8ha7LwUX4yYZISqUjuxMVglMn7EkGI3por3M=)
                          3: 6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.crl (hash: dpvSM+TS+aBznkxmGO9Ungze5b8cg6LS8agvGCmr+GQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4d:b1:0c:3e:e5:ee:2b:cf:6e:20:e9:3b:e5:9a:df:6c:f6:d5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8
        Validity
            Not Before: Sep 26 12:28:29 2023 GMT
            Not After : Sep 27 14:56:29 2023 GMT
        Subject: CN=DDF4CE0C69312D2105D50E0DB6E46986B8FFC5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:0b:cb:72:1b:3d:bb:03:1d:fd:02:ee:8a:
                    43:14:f7:ea:6f:13:16:01:89:b5:91:58:e5:6a:0c:
                    3c:db:6b:1a:79:b2:9c:b1:3f:ee:d0:52:3e:96:01:
                    31:37:d9:76:7b:05:11:6e:6d:27:c5:50:e0:7e:4a:
                    1d:58:da:19:ce:2d:34:88:80:af:02:ff:b7:7e:a6:
                    56:ff:aa:da:df:97:f7:9a:27:e4:b8:0a:91:eb:dc:
                    43:7d:e2:b9:12:96:70:ae:fe:29:58:81:63:4a:4f:
                    50:9d:81:19:0b:fa:9d:f9:ca:c1:f9:e4:fa:f3:89:
                    c9:de:49:60:fb:56:6e:09:76:e5:42:09:b9:5f:7d:
                    9b:b8:8e:95:38:74:ac:8f:f4:5d:13:74:0c:1c:09:
                    4a:2b:91:71:4c:4e:88:46:2f:d8:31:1b:52:96:63:
                    22:14:7a:8c:9a:18:df:0c:9b:1e:1d:46:e1:10:c3:
                    e3:e1:20:df:b4:6c:f2:26:ed:e4:5c:20:90:2f:4e:
                    17:b1:91:65:d4:aa:96:4b:76:e2:16:77:86:e2:d3:
                    77:7d:e8:8c:9f:9e:49:8b:f8:0b:9d:be:a3:07:02:
                    57:ed:2b:0b:92:f9:0b:2c:f3:46:5e:f6:23:69:3a:
                    a6:da:24:fb:ea:a1:08:ab:6c:30:42:c7:0a:6e:e6:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:CE:0C:69:31:2D:21:05:D5:0E:0D:B6:E4:69:86:B8:FF:C5:DA
            X509v3 Authority Key Identifier:
                keyid:68:91:FC:E6:CA:53:93:FA:BD:7C:02:E3:56:A4:B1:C1:14:C8:E3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/6891FCE6CA5393FABD7C02E356A4B1C114C8E3F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:11:39:eb:12:5a:68:6e:d7:43:17:4b:c6:2c:7f:4a:5e:be:
         61:75:9c:8c:03:d9:63:56:e7:44:3e:82:ba:6c:ee:52:91:2c:
         1f:51:ac:a0:f3:fc:d4:01:81:0b:e5:8d:26:3d:a7:ed:3f:8b:
         56:4a:e4:72:39:1d:12:aa:dd:ea:1f:79:a2:bd:d4:d9:5c:8d:
         f3:ea:4c:4c:3c:60:dd:fb:3d:35:f4:85:4c:0a:26:52:fe:72:
         58:12:c0:14:a9:55:5a:e3:56:eb:01:9c:76:a3:b5:7f:ce:2e:
         91:bd:cb:2a:68:fb:3a:b8:a3:05:0b:51:e7:d2:14:f4:06:ab:
         83:84:0f:ea:a6:a9:67:98:26:68:8e:fc:35:93:ec:dd:c8:b4:
         fd:94:dd:ba:46:3e:47:a8:3a:6e:c1:42:51:c3:b2:7e:d1:cd:
         8b:53:93:cc:8f:44:27:80:51:69:b0:8c:aa:2d:76:04:e5:fd:
         38:66:f3:f3:8d:51:25:b6:b6:f9:c6:fa:60:98:9a:77:dd:11:
         e0:62:ae:31:31:41:a5:75:62:0f:55:c9:6a:25:76:0f:4b:d9:
         ca:cd:14:83:a4:8e:f3:64:b3:78:43:f9:e5:0c:9a:8e:7c:6a:
         f6:c3:76:33:8a:53:41:dd:ae:af:2a:41:17:77:0c:25:5e:41:
         5b:23:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----