Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/8141C1D26C72B040ADAD48386F0A8BE66D46287E.mft
File:                     8141C1D26C72B040ADAD48386F0A8BE66D46287E.mft (raw, json)
Hash identifier:          nJDs5pN8DSVVbh476ogzJcWTk/wqdPq2qjEvd2D6ihE=
Subject key identifier:   EC:34:BC:70:73:93:73:E9:C2:5D:71:FA:A8:CE:24:DD:44:F2:51:DC
Authority key identifier: 81:41:C1:D2:6C:72:B0:40:AD:AD:48:38:6F:0A:8B:E6:6D:46:28:7E
Certificate issuer:       /CN=8141C1D26C72B040ADAD48386F0A8BE66D46287E
Certificate serial:       4BCDEE2EF6686101146A6B1ACFA50B8B4E048BC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8141C1D26C72B040ADAD48386F0A8BE66D46287E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/8141C1D26C72B040ADAD48386F0A8BE66D46287E.mft
Manifest number:          14
Signing time:             Fri 24 Nov 2023 06:27:22 +0000
Manifest this update:     Fri 24 Nov 2023 06:22:22 +0000
Manifest next update:     Sat 25 Nov 2023 08:12:22 +0000
Files and hashes:         1: 34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa (hash: sIDpUiiLBWOjtqzITw6dQ0of5RJhxt1jJ8zTunGoegA=)
                          2: 8141C1D26C72B040ADAD48386F0A8BE66D46287E.crl (hash: 5dra8kPjZpBco9M4Jt37dNofuUrqFHbxI+sZovJKuIw=)
                          3: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: 58PtMFrp9oPUhncw/oGlDDEYH+R1xIcWT2FItVRdwPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cd:ee:2e:f6:68:61:01:14:6a:6b:1a:cf:a5:0b:8b:4e:04:8b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8141C1D26C72B040ADAD48386F0A8BE66D46287E
        Validity
            Not Before: Nov 24 06:22:22 2023 GMT
            Not After : Nov 25 08:12:22 2023 GMT
        Subject: CN=EC34BC70739373E9C25D71FAA8CE24DD44F251DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:1d:52:b5:23:46:62:9a:a2:1b:18:18:2e:
                    90:bb:e5:27:4d:78:51:4d:82:51:7c:a6:d5:3d:e8:
                    d3:d1:c9:4b:fc:aa:c7:2e:3e:bf:88:4c:8c:bd:c8:
                    81:f4:1f:84:de:f3:8c:80:68:1a:6c:18:61:5d:76:
                    fd:1b:89:64:8c:61:d6:e6:b8:b0:ed:6c:ba:c2:73:
                    0a:63:c9:db:c3:23:4e:77:10:70:ab:f1:ea:20:10:
                    ce:6a:61:0f:9c:9e:1f:95:3b:0c:1b:1d:37:b5:d8:
                    b8:30:09:54:2c:80:98:20:6e:17:7f:c4:37:c1:85:
                    28:75:60:cf:b1:0f:11:ae:8a:ff:24:94:c7:b6:26:
                    61:50:6c:ee:f2:06:0c:4a:8e:77:bd:cc:0c:17:5e:
                    2c:e2:e5:b2:f7:d4:16:df:e2:19:d4:59:ad:d6:7f:
                    6f:22:27:56:1f:96:81:fd:45:e9:c9:e9:21:db:f2:
                    2e:23:36:30:ed:b9:17:be:37:b0:75:5b:ba:b8:3e:
                    cf:46:fd:fb:57:a2:c1:c1:ce:8b:81:42:05:4e:7c:
                    be:2a:f9:6f:06:74:8a:44:37:30:be:00:8f:98:ee:
                    58:b6:4b:68:21:88:df:c2:aa:2c:83:99:c3:7b:e4:
                    28:da:51:e1:67:e0:75:18:ab:67:df:57:8c:02:87:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:BC:70:73:93:73:E9:C2:5D:71:FA:A8:CE:24:DD:44:F2:51:DC
            X509v3 Authority Key Identifier:
                keyid:81:41:C1:D2:6C:72:B0:40:AD:AD:48:38:6F:0A:8B:E6:6D:46:28:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/8141C1D26C72B040ADAD48386F0A8BE66D46287E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8141C1D26C72B040ADAD48386F0A8BE66D46287E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/8141C1D26C72B040ADAD48386F0A8BE66D46287E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:15:9e:49:c7:64:d9:e9:3a:f9:f2:36:3a:8e:f5:ce:7f:66:
         28:c5:61:9b:51:51:d9:24:11:68:da:ae:88:28:3c:8b:d8:44:
         7d:91:4c:e1:d9:77:ab:ba:85:34:30:df:25:be:c6:1c:fe:bd:
         2e:3b:db:8f:eb:53:01:f2:01:20:4a:a7:a5:4a:f5:01:f0:00:
         47:72:d8:b4:8d:38:a7:ec:3a:69:c2:21:2c:d8:e2:e1:f7:9d:
         08:9f:83:c6:14:ae:f3:92:cb:8d:d3:c0:09:71:27:b9:98:f6:
         2a:e8:d2:96:89:5d:54:78:b8:bc:1e:cc:3c:19:18:5e:cd:66:
         e0:09:f4:6a:5d:d9:55:47:36:18:b3:25:ca:58:73:51:9d:d2:
         b2:ad:db:a7:7b:50:1f:22:5e:52:3e:42:49:bf:36:9e:8f:fc:
         9c:c1:06:69:a3:76:b8:f3:0f:a2:57:09:df:69:0e:82:fa:40:
         cb:2d:a5:07:75:f1:db:16:7a:64:bf:5d:68:f6:de:fa:d4:96:
         27:7c:2e:1e:48:0d:8c:ed:3c:6f:b6:d0:40:8b:cb:d2:ff:9a:
         89:8d:be:93:51:1e:cb:21:b7:db:f2:db:0b:09:48:56:08:68:
         2e:00:60:60:b8:b7:99:91:ee:ae:24:6e:81:90:58:14:7b:0a:
         9f:7a:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----