Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.mft
File:                     541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.mft (raw, json)
Hash identifier:          lYRwX69g2qPTMv0PqiBRTtQ5jLwkW/5ZhLcnNp6HMPY=
Subject key identifier:   9E:09:7B:96:0C:8E:67:0A:D8:B3:23:E8:06:4D:17:FB:82:D5:1C:E1
Authority key identifier: 54:1A:C3:98:64:32:D1:4D:4E:D6:51:A3:CC:60:6E:EB:3E:9E:FC:EE
Certificate issuer:       /CN=541AC3986432D14D4ED651A3CC606EEB3E9EFCEE
Certificate serial:       707A20BFC539AA40BE204DCCBBDD3E703DF2E8A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.mft
Manifest number:          59
Signing time:             Sun 26 Nov 2023 10:19:47 +0000
Manifest this update:     Sun 26 Nov 2023 10:14:47 +0000
Manifest next update:     Mon 27 Nov 2023 12:08:47 +0000
Files and hashes:         1: 323830343a376537303a3a2f33322d3334203d3e20323731363234.roa (hash: DLTn6jIqAlZ5t2NCgj4gQI6t6LhKFv4RLrRaI5uNQDA=)
                          2: 3137372e37332e3132382e302f32322d3234203d3e20323731363234.roa (hash: NynP0kbzAX9Yv8qPLCSNT4WdIngaAg36U59J/X9OU0Q=)
                          3: 541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.crl (hash: ajXqn7YS63EcakenFXlxTysL+MCMh9JDVS7t/6cXr30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7a:20:bf:c5:39:aa:40:be:20:4d:cc:bb:dd:3e:70:3d:f2:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541AC3986432D14D4ED651A3CC606EEB3E9EFCEE
        Validity
            Not Before: Nov 26 10:14:47 2023 GMT
            Not After : Nov 27 12:08:47 2023 GMT
        Subject: CN=9E097B960C8E670AD8B323E8064D17FB82D51CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:fc:20:71:11:d7:27:41:ba:23:a6:59:bc:
                    3c:7a:e0:56:95:08:bc:e9:fd:7a:52:ea:ae:9a:43:
                    7b:23:24:c7:a9:0a:a5:72:d5:cc:f3:65:12:f9:bc:
                    9d:ca:1b:ad:db:2d:59:2c:8f:06:1b:d1:d9:4e:a2:
                    a8:24:de:06:ab:fc:86:03:17:c5:15:24:cd:eb:65:
                    f0:2a:95:01:d5:83:98:21:00:75:ff:e4:64:e8:dd:
                    69:aa:e5:9f:d5:e1:51:1c:e1:29:13:46:cb:3a:83:
                    fb:d3:09:dc:ae:9e:1f:fd:34:57:13:b1:05:34:6f:
                    d1:aa:d6:8e:1c:c0:55:98:df:69:40:38:a4:fd:3a:
                    6b:55:52:01:0e:e4:fb:4e:86:25:95:3e:78:de:ee:
                    b8:20:ba:76:7f:87:0e:f1:fa:8a:9d:f2:b9:aa:2f:
                    92:5a:80:2b:45:d6:96:6a:d3:8c:3f:a0:e7:72:67:
                    c6:e1:4a:76:c2:e6:72:6b:de:e3:42:57:1e:b7:8e:
                    2c:e0:78:d1:91:57:6e:9d:28:46:87:73:83:ba:13:
                    1a:27:35:1d:37:1f:1e:36:24:72:a3:5a:4c:c1:30:
                    ae:ff:e9:3c:cf:0d:eb:9b:29:40:c9:ee:c0:75:be:
                    f6:eb:68:ae:f6:2d:b8:e5:ff:eb:72:76:b2:d2:b9:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:09:7B:96:0C:8E:67:0A:D8:B3:23:E8:06:4D:17:FB:82:D5:1C:E1
            X509v3 Authority Key Identifier:
                keyid:54:1A:C3:98:64:32:D1:4D:4E:D6:51:A3:CC:60:6E:EB:3E:9E:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:26:8c:6e:95:9f:1c:e6:de:fd:0e:8c:c5:fc:8b:64:5a:00:
         62:19:f6:1d:b9:ac:6a:dc:96:c7:24:23:e6:9f:b6:8a:99:93:
         af:eb:f4:78:9b:58:9f:39:e3:6c:f7:99:33:85:03:03:69:a0:
         39:af:b1:58:83:2b:92:48:65:17:50:2a:9a:d2:df:c8:35:04:
         31:9d:97:ee:3c:eb:45:f9:62:ee:e3:6c:d7:c1:98:09:00:44:
         2f:aa:69:57:ee:31:a3:97:4a:d9:78:f7:72:38:be:93:13:f1:
         e2:64:01:34:27:a6:2b:fd:f8:8e:44:bb:68:5d:f3:82:c6:b2:
         33:5b:48:b5:81:09:a0:21:59:64:6c:3b:f5:12:6a:22:43:63:
         be:bf:2c:c3:88:87:f2:07:87:14:ff:7d:fb:91:94:76:21:ce:
         9c:cb:01:2f:51:5d:43:7e:1d:8b:49:bf:e0:c9:4b:8b:7e:0a:
         1a:51:bc:be:cf:21:d0:32:26:7c:d9:92:bf:5b:40:c9:1f:3a:
         30:5a:e7:c2:57:68:65:f3:0e:47:5d:3c:35:c9:98:9b:1b:8b:
         3f:0e:97:a9:fc:25:4a:24:32:07:2d:81:26:1d:56:e0:b9:59:
         6f:a2:08:c7:38:7d:7e:4e:c1:17:64:01:2b:c8:5f:01:b0:26:
         41:30:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----