Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.mft
File:                     B946ED6AECE04BD2BAF997938347912BF5AB3432.mft (raw, json)
Hash identifier:          0E/Z0QJ2AjRODt7qhuGPjVFV9ZiGoqvz+0n770t+kHg=
Subject key identifier:   8F:31:E4:D1:AF:32:08:D5:52:74:6B:74:6A:87:1E:B2:74:97:02:BD
Authority key identifier: B9:46:ED:6A:EC:E0:4B:D2:BA:F9:97:93:83:47:91:2B:F5:AB:34:32
Certificate issuer:       /CN=B946ED6AECE04BD2BAF997938347912BF5AB3432
Certificate serial:       0AAEA06AA2FA5AEF2E498E9984FDFAFA6071BDEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.mft
Manifest number:          F8
Signing time:             Mon 18 Dec 2023 21:45:02 +0000
Manifest this update:     Mon 18 Dec 2023 21:40:02 +0000
Manifest next update:     Wed 20 Dec 2023 00:18:02 +0000
Files and hashes:         1: 3136382e3139372e3135322e302f32322d3234203d3e20323635343834.roa (hash: Ds53MwKoBAG5IIZQSa/Yy+sY3BMb758WNSI2V7wnu4g=)
                          2: B946ED6AECE04BD2BAF997938347912BF5AB3432.crl (hash: t0mgPIXu7QHXC3AbW1UbU7ZxZ/5LE6+EdL2KXQA5Ggo=)
                          3: 323830343a333464383a3a2f33322d3334203d3e20323635343834.roa (hash: Hs53yPFOi/fdD4UZsNI2sqjGlbggCGKXEJ8DO/tGDWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ae:a0:6a:a2:fa:5a:ef:2e:49:8e:99:84:fd:fa:fa:60:71:bd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B946ED6AECE04BD2BAF997938347912BF5AB3432
        Validity
            Not Before: Dec 18 21:40:02 2023 GMT
            Not After : Dec 20 00:18:02 2023 GMT
        Subject: CN=8F31E4D1AF3208D552746B746A871EB2749702BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:c6:b8:02:c0:47:0a:3a:9e:47:2e:b2:60:
                    60:a2:7b:0a:bc:b6:1c:87:fd:ee:f4:63:5a:23:c8:
                    c8:72:c2:47:d9:a3:98:34:bb:63:92:f4:46:6a:4f:
                    46:47:5b:30:ee:c6:27:5e:c8:a0:a8:a7:01:02:86:
                    7b:79:b4:d3:19:f7:8b:bc:c6:4d:1c:c5:fe:31:68:
                    ae:56:4b:0f:23:e4:0e:a9:31:e9:86:85:67:c8:eb:
                    30:81:4a:bb:4e:e8:cf:69:42:36:84:0a:1d:b0:f8:
                    7a:ad:93:d4:be:33:42:0e:c3:6b:2f:54:61:7b:73:
                    3a:77:28:a8:02:ec:6a:e6:3e:8b:23:3a:00:36:05:
                    59:5c:35:99:86:dc:34:42:30:86:62:92:1e:0d:8c:
                    11:7d:dd:68:6a:00:bc:6b:2e:4f:fd:06:85:77:7f:
                    46:d4:38:7b:21:1d:ba:a4:00:73:5b:3c:07:9b:31:
                    a7:86:12:7d:3e:29:42:de:ef:1c:1f:e8:c8:dc:15:
                    43:64:85:3d:70:39:89:9f:40:59:d2:23:1f:2f:a3:
                    39:15:41:67:85:5e:f6:48:30:99:1a:cb:56:cc:a0:
                    cf:0c:58:cb:e5:0b:f7:b5:3b:f0:39:fc:32:37:9f:
                    ae:75:84:7e:c5:de:91:f7:58:db:23:13:81:8c:4a:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:E4:D1:AF:32:08:D5:52:74:6B:74:6A:87:1E:B2:74:97:02:BD
            X509v3 Authority Key Identifier:
                keyid:B9:46:ED:6A:EC:E0:4B:D2:BA:F9:97:93:83:47:91:2B:F5:AB:34:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/B946ED6AECE04BD2BAF997938347912BF5AB3432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:c2:da:ea:dc:58:94:9d:0e:80:a8:a7:2b:a3:0c:72:b3:
         f6:29:e7:31:29:28:db:dd:e0:62:f3:df:b5:52:15:1e:2c:36:
         12:c3:41:13:67:68:bb:f4:03:21:a1:39:58:07:8b:20:60:71:
         9d:1f:dc:88:96:f7:5c:6c:bf:20:e8:af:e1:f7:f2:c8:67:4a:
         6d:b1:58:9c:d4:44:ec:e1:a4:f3:12:55:83:da:2a:0f:9f:07:
         a8:86:7b:5e:16:b7:c0:d8:e1:c1:2e:eb:eb:3b:4e:c4:12:1f:
         34:33:59:eb:80:55:8f:30:2e:4a:9f:66:03:e2:c9:f2:a7:f7:
         e4:6a:91:65:3b:54:18:8a:56:52:9e:c3:e4:04:36:42:6f:d8:
         7d:eb:0f:33:dd:16:83:dd:bf:4d:3a:7e:8c:ba:b3:c3:d9:1a:
         85:34:89:32:80:76:d6:7d:81:8a:04:4a:2a:91:fd:eb:16:63:
         4a:40:b1:53:30:0d:44:fa:0c:c0:af:34:09:d2:f0:ae:d1:41:
         b9:41:83:1e:e5:5d:03:0b:68:2e:6b:10:c6:3e:41:2d:8c:5c:
         60:b6:d0:e8:b9:b3:41:5b:b5:3a:78:6b:58:04:64:4b:cb:2c:
         d0:e4:86:b6:ac:e7:7d:00:a2:62:4f:83:54:b2:58:d7:5e:27:
         2c:4d:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----