Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.mft
File:                     D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.mft (raw, json)
Hash identifier:          lyPD3TtqyFgY2Gug/4JyUPTm2rJ5CtlNdFy9bDh4W4k=
Subject key identifier:   D2:27:9B:B1:AF:31:14:22:B0:29:80:1A:90:9A:76:9A:59:B6:65:0B
Authority key identifier: D3:D5:8A:6C:8B:31:DE:F0:2F:6C:29:DB:A7:AD:A1:B6:E5:DA:14:F0
Certificate issuer:       /CN=D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0
Certificate serial:       0A55C874B002A50D83D41A5B786B6AFB2297CBF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.mft
Manifest number:          1C
Signing time:             Sun 24 Sep 2023 08:07:33 +0000
Manifest this update:     Sun 24 Sep 2023 08:02:33 +0000
Manifest next update:     Mon 25 Sep 2023 09:26:33 +0000
Files and hashes:         1: 323830343a363535383a3a2f33322d313238203d3e20323639343834.roa (hash: Go3FcXabapnwyXM7L2B26f+zUazC3UV30pT+n/rT5Cw=)
                          2: 34352e3138372e34302e302f32322d3332203d3e20323639343834.roa (hash: 3F4EPML0HCm4/6EhraFFAra0dpKaFq3I3wAzYRLV1LQ=)
                          3: D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.crl (hash: nOZC/J+GLEzExjDYrhTy8rtjyeTmJzf/TUejgKzH6R0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:55:c8:74:b0:02:a5:0d:83:d4:1a:5b:78:6b:6a:fb:22:97:cb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0
        Validity
            Not Before: Sep 24 08:02:33 2023 GMT
            Not After : Sep 25 09:26:33 2023 GMT
        Subject: CN=D2279BB1AF311422B029801A909A769A59B6650B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:76:53:a0:1a:58:12:b6:38:f4:ac:31:e6:
                    d5:81:f1:4f:ea:5f:d4:9a:cd:00:71:45:8f:42:c3:
                    a4:2f:65:7f:46:60:aa:a7:27:05:31:74:8d:a3:c9:
                    86:41:b6:65:15:c6:60:bf:86:57:05:ae:9a:18:01:
                    57:e4:7a:78:e1:b1:ee:6b:1c:79:24:8d:fb:a5:38:
                    fc:83:7f:25:e0:c5:6d:b8:65:56:bc:ea:ee:50:d3:
                    5f:74:48:80:3e:be:7e:0d:5e:b1:36:db:96:c4:b7:
                    e2:80:6b:63:e1:59:99:03:dd:7e:9d:37:12:e3:63:
                    d7:1d:fa:5b:1f:bf:85:27:2a:94:9e:7b:23:c8:33:
                    0b:ac:2f:fa:08:b8:52:1d:af:67:4d:df:27:35:08:
                    04:44:5f:21:2b:2e:c8:f2:78:2c:b7:30:d6:fd:38:
                    f9:ff:d3:55:d7:38:9f:d1:4b:98:bf:51:6c:2f:74:
                    da:f9:36:95:dd:f2:37:77:aa:96:57:b5:10:a2:cc:
                    d2:40:19:36:49:ca:b3:d6:bb:3d:05:31:3d:bf:d6:
                    a1:4b:7e:59:95:99:3d:9d:cb:70:5f:1b:6a:d4:06:
                    0e:db:6f:54:75:23:67:cb:52:42:3e:0c:ab:35:ea:
                    c5:22:e1:2d:7b:ec:c5:0d:db:d4:9c:29:b6:05:a8:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:9B:B1:AF:31:14:22:B0:29:80:1A:90:9A:76:9A:59:B6:65:0B
            X509v3 Authority Key Identifier:
                keyid:D3:D5:8A:6C:8B:31:DE:F0:2F:6C:29:DB:A7:AD:A1:B6:E5:DA:14:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/D3D58A6C8B31DEF02F6C29DBA7ADA1B6E5DA14F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:c7:51:39:10:73:8c:1f:63:7e:8e:45:a0:50:d3:5e:19:
         fa:23:69:a7:93:07:2b:e8:fe:fb:74:1a:d8:bd:26:87:53:7a:
         aa:a4:b5:c2:cd:c7:bc:57:08:10:6f:3f:1f:34:df:54:1e:0c:
         fe:65:c9:a2:d4:66:40:f3:0f:7d:28:4e:ac:cc:a3:c6:7d:54:
         63:7a:01:43:64:40:87:e3:d5:5e:0e:cb:02:9c:aa:58:87:03:
         5b:fd:f5:06:74:37:45:f3:78:8d:6d:e3:81:7a:2e:0c:5e:3e:
         1b:e5:2b:3c:0f:e1:c3:02:5c:94:39:58:22:8e:b1:41:09:c9:
         35:fa:5f:db:b5:ba:ec:3e:b8:8e:38:d5:97:10:bf:92:1d:66:
         80:d5:9f:6c:b4:94:92:81:85:00:73:25:ee:56:1a:e3:d4:04:
         60:4c:e2:9d:ae:ee:bc:1f:71:9e:2f:6c:05:39:6b:29:6a:70:
         89:51:a5:5d:4e:74:c3:28:74:0b:66:34:a3:9f:37:ac:65:7d:
         84:35:f4:fa:4c:e7:44:25:e1:61:76:4c:b9:41:71:f7:4a:e3:
         81:ee:f3:77:df:46:c5:1b:7f:cd:67:53:74:38:fa:be:db:d5:
         31:8e:8d:65:2d:b4:a4:b9:df:f7:f4:be:81:ed:62:97:42:95:
         98:fe:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----