Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.mft
File:                     C88D10B687ABB2F8DC649DC753A12E98C0539139.mft (raw, json)
Hash identifier:          r/hLcM75TWxcelZ7yRpl22BPeVJC/31BQ+c7TAsAap4=
Subject key identifier:   07:F5:BB:F8:58:DC:01:AD:98:DA:58:F3:71:94:13:43:FE:78:E1:36
Authority key identifier: C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39
Certificate issuer:       /CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
Certificate serial:       6A0FF994D54FAD3E5FAAE362FDD61C7D8397DCF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.mft
Manifest number:          D1
Signing time:             Fri 20 Oct 2023 19:16:24 +0000
Manifest this update:     Fri 20 Oct 2023 19:11:24 +0000
Manifest next update:     Sat 21 Oct 2023 22:56:24 +0000
Files and hashes:         1: C88D10B687ABB2F8DC649DC753A12E98C0539139.crl (hash: DcVjM5j4fuE5uvqYxZ9BBm0UtwbFrze3TS+OrEKitW0=)
                          2: 34352e3233342e3132342e302f32322d3234203d3e20323637333734.roa (hash: SOfjp1YU1opIYq75bSHceF7lV+8bp9uq6iN24jTr8cM=)
                          3: 323830343a346338303a3a2f33322d3336203d3e20323637333734.roa (hash: Ng3JjIY27KBD8KkZ779X2vIEy6xmVVedz5yetv0TuDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0f:f9:94:d5:4f:ad:3e:5f:aa:e3:62:fd:d6:1c:7d:83:97:dc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88D10B687ABB2F8DC649DC753A12E98C0539139
        Validity
            Not Before: Oct 20 19:11:24 2023 GMT
            Not After : Oct 21 22:56:24 2023 GMT
        Subject: CN=07F5BBF858DC01AD98DA58F371941343FE78E136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:e6:59:95:cd:d4:5b:ff:02:17:5f:b3:9e:
                    ab:a2:a5:fb:57:8b:cf:f3:56:9b:d2:48:43:55:a8:
                    72:e0:62:35:7d:81:b2:f9:32:3d:89:ca:bc:98:08:
                    0e:07:ea:3d:b8:56:c2:ba:10:6d:88:c9:ca:2c:00:
                    fd:ca:14:9a:89:be:b0:36:c2:2e:74:79:1e:d3:75:
                    b4:e6:80:06:fd:3b:3a:b2:6d:d7:78:6b:b6:5d:9c:
                    98:28:18:08:a9:a5:4c:b6:96:96:df:36:dd:3b:31:
                    c9:fe:d2:ae:f6:ac:fe:b4:d9:dd:88:66:e4:70:b5:
                    3e:15:56:90:5e:42:61:ad:b5:72:34:9a:cb:5f:d2:
                    64:98:00:da:3f:60:d9:50:2a:05:0c:f6:1e:7c:9e:
                    e0:b7:5e:d6:57:3b:aa:6d:36:ad:3b:33:45:48:19:
                    77:f2:e0:cc:6e:76:7e:a3:cc:3f:f8:2d:29:9a:47:
                    e3:eb:2d:ef:a7:62:5d:7f:9e:14:49:69:32:ef:7c:
                    88:48:52:2d:7d:8b:b2:72:fd:98:d9:c1:c9:f9:c2:
                    3c:cc:51:f2:d8:6c:25:8b:b1:89:23:c3:0f:01:b4:
                    a2:19:af:8a:30:c2:f1:fc:e6:d8:c5:00:f8:6a:75:
                    7e:8e:5b:59:ed:b8:3d:56:a4:0b:ec:60:51:d2:00:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:BB:F8:58:DC:01:AD:98:DA:58:F3:71:94:13:43:FE:78:E1:36
            X509v3 Authority Key Identifier:
                keyid:C8:8D:10:B6:87:AB:B2:F8:DC:64:9D:C7:53:A1:2E:98:C0:53:91:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/0/C88D10B687ABB2F8DC649DC753A12E98C0539139.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:fd:41:e4:78:ee:6a:e8:4e:46:d0:ce:43:e2:c9:49:5f:
         cd:95:29:a2:2a:3e:22:1e:a5:75:96:da:83:01:e6:16:d3:bd:
         03:e7:ef:4d:7f:a4:0e:d5:fc:be:6a:d7:c0:45:9e:c6:5d:69:
         77:9c:24:51:27:5c:ae:34:aa:4a:3c:5c:b0:40:da:fa:c9:95:
         89:f1:34:53:b4:2d:15:db:1b:2a:d3:f1:56:ea:aa:eb:29:30:
         6c:96:23:1a:e9:fc:47:99:52:18:f9:da:d4:21:20:36:4d:2a:
         0b:50:a8:86:3f:2c:2b:24:60:66:0e:65:cd:01:7d:fa:9a:20:
         f8:03:73:18:b5:7e:24:44:f6:3e:14:bc:1e:b9:6d:18:66:16:
         3f:97:ed:15:2e:dc:d5:fa:b8:c0:43:bf:0d:bc:79:cb:dd:b6:
         c2:4b:d8:19:c2:45:02:4d:a8:07:35:4c:3c:46:7a:3d:c5:f1:
         a1:33:89:bd:c4:df:98:e7:8f:7f:eb:d9:2a:3c:c9:08:12:48:
         c4:63:46:99:4f:bd:f4:a3:99:ff:21:b7:6f:96:b0:9d:70:75:
         a0:e1:8e:f3:cd:61:80:b8:0f:9d:13:30:52:17:c5:dc:f5:d4:
         cc:50:48:77:d0:2b:6b:ec:4e:0e:84:d3:ac:bd:f1:6c:32:5e:
         7d:34:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----