Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.mft
File:                     EF7132FF02D9CBAC357BB2797F0CC7658B128897.mft (raw, json)
Hash identifier:          CLJ7z2CouLLNQ0Ww2vLuipGV05hLgZDE6PuFMP3T50A=
Subject key identifier:   56:63:DE:D4:A7:09:58:3D:89:94:4C:E8:FF:19:7A:4E:8B:69:2F:24
Authority key identifier: EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97
Certificate issuer:       /CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
Certificate serial:       4EBB98710F6E9865D287170FFD16EA59A88C06C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.mft
Manifest number:          57
Signing time:             Sat 28 Jan 2023 07:13:17 +0000
Manifest this update:     Sat 28 Jan 2023 07:08:17 +0000
Manifest next update:     Sun 29 Jan 2023 07:16:17 +0000
Files and hashes:         1: 323830343a363133383a3a2f33322d3438203d3e20323639323231.roa (hash: q4k99fT5emiXRlT3FWfyUXxIyieOYAsFMVFkA6ocRnw=)
                          2: EF7132FF02D9CBAC357BB2797F0CC7658B128897.crl (hash: BCFjU/IFbyloP+nW/97CUS4tmd/yzcHRvIvCiWoyt8c=)
                          3: 34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa (hash: xgGAA/O2xf+9o3JTPFlaA+UhM6DE+toqk0l9eBef7Ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bb:98:71:0f:6e:98:65:d2:87:17:0f:fd:16:ea:59:a8:8c:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
        Validity
            Not Before: Jan 28 07:08:17 2023 GMT
            Not After : Jan 29 07:16:17 2023 GMT
        Subject: CN=5663DED4A709583D89944CE8FF197A4E8B692F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:11:18:cd:66:8f:86:21:2f:b4:6d:84:da:
                    da:18:8a:81:ce:d8:cc:73:19:3f:a0:22:b2:a4:b4:
                    56:88:45:23:cb:b9:08:53:26:e0:8c:fb:3f:b8:e4:
                    59:7b:59:68:d9:21:d1:ad:57:ae:eb:ec:a6:e1:aa:
                    f6:ed:71:e2:43:24:53:ec:b1:5e:0a:e5:36:c6:0e:
                    68:58:70:93:39:4d:5e:0a:d2:46:b0:98:a1:a5:7a:
                    2c:33:bc:a5:fa:ad:6a:59:bf:13:7a:3a:22:01:d1:
                    87:36:81:d3:1e:c7:1a:1d:2a:74:3e:0c:de:40:35:
                    7c:90:6d:34:23:63:ad:00:9c:bc:11:cb:75:d9:3f:
                    cb:a0:bd:48:bd:6f:7f:43:d0:b1:a8:4e:d5:28:69:
                    96:49:97:95:9c:21:13:ca:19:d4:f4:03:b4:2e:b4:
                    69:ea:64:9e:87:9a:52:06:48:d9:ba:3a:3a:d9:64:
                    8c:ce:c4:dd:e0:bc:f8:ab:2f:7e:42:7c:40:be:e1:
                    72:8f:05:b8:fa:20:88:df:47:17:e1:0e:38:ee:5e:
                    e6:8e:99:ca:87:93:4b:ec:93:75:48:c4:38:0f:21:
                    cc:ad:17:1e:a8:7d:98:73:1e:33:e7:ad:a1:24:3f:
                    f8:2d:8b:50:5a:f1:88:b7:cf:71:0b:f8:6d:09:24:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:DE:D4:A7:09:58:3D:89:94:4C:E8:FF:19:7A:4E:8B:69:2F:24
            X509v3 Authority Key Identifier:
                keyid:EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:80:e8:bb:41:26:b1:57:b7:07:5a:3d:89:41:6e:be:40:de:
         fb:d0:54:ba:94:3f:08:8b:40:6a:e2:5b:8a:78:9b:0d:2e:0f:
         3c:b0:08:bc:e8:b1:7f:2d:a0:ff:57:ac:67:5a:d8:67:fc:87:
         63:f2:69:3f:35:b4:69:fd:76:3d:c8:01:70:58:7b:f5:c3:c3:
         96:4e:2c:15:b5:e7:2b:8c:fc:51:bf:ff:6a:b8:df:ff:45:0a:
         da:8e:8f:6a:c0:c1:9e:20:99:0a:1c:56:5e:be:8e:12:5d:1b:
         60:f5:f9:a2:c6:77:23:fd:68:82:b2:0e:be:8b:d0:a9:a9:9c:
         ae:75:da:0f:10:55:be:cc:bd:f5:36:94:09:e2:39:04:e5:47:
         ad:22:c2:b2:f0:b8:48:dd:14:5e:58:02:fb:e8:a0:cb:13:00:
         c4:2a:ee:da:01:ca:ae:8f:e5:17:74:29:df:35:49:a3:62:75:
         fa:19:73:ee:7e:7b:8b:be:6e:8e:79:44:9d:1b:b3:5c:bb:03:
         95:f9:6a:2a:d7:03:51:4b:b7:e2:37:34:90:ae:8d:ff:da:89:
         da:b3:00:2c:4a:8f:c7:5a:9d:de:87:99:13:71:6c:93:e6:87:
         02:62:fb:9e:1f:5d:79:32:c1:75:b3:a9:fd:68:4d:a9:3f:27:
         ff:34:f3:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTruYcQ9umGXShxcP/RbqWaiMBsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY3MTMyRkYwMkQ5Q0JBQzM1N0JCMjc5N0YwQ0M3NjU4
QjEyODg5NzAeFw0yMzAxMjgwNzA4MTdaFw0yMzAxMjkwNzE2MTdaMDMxMTAvBgNV
BAMTKDU2NjNERUQ0QTcwOTU4M0Q4OTk0NENFOEZGMTk3QTRFOEI2OTJGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfhEYzWaPhiEvtG2E2toYioHO
2MxzGT+gIrKktFaIRSPLuQhTJuCM+z+45Fl7WWjZIdGtV67r7KbhqvbtceJDJFPs
sV4K5TbGDmhYcJM5TV4K0kawmKGleiwzvKX6rWpZvxN6OiIB0Yc2gdMexxodKnQ+
DN5ANXyQbTQjY60AnLwRy3XZP8ugvUi9b39D0LGoTtUoaZZJl5WcIRPKGdT0A7Qu
tGnqZJ6HmlIGSNm6OjrZZIzOxN3gvPirL35CfEC+4XKPBbj6IIjfRxfhDjjuXuaO
mcqHk0vsk3VIxDgPIcytFx6ofZhzHjPnraEkP/gti1Ba8Yi3z3EL+G0JJNixAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVmPe1KcJWD2JlEzo/xl6TotpLyQwHwYDVR0j
BBgwFoAU73Ey/wLZy6w1e7J5fwzHZYsSiJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkpRN2lWdzlVTHBmbWZCVjlKd0VWRGpZeVRuRnN0UlQzaUJyRjNlM1lm
MnovMC9FRjcxMzJGRjAyRDlDQkFDMzU3QkIyNzk3RjBDQzc2NThCMTI4ODk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGNzEzMkZGMDJEOUNCQUMz
NTdCQjI3OTdGMENDNzY1OEIxMjg4OTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkpRN2lWdzlVTHBmbWZCVjlKd0VWRGpZeVRuRnN0UlQzaUJyRjNlM1lmMnovMC9F
RjcxMzJGRjAyRDlDQkFDMzU3QkIyNzk3RjBDQzc2NThCMTI4ODk3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJoDou0EmsVe3B1o9iUFuvkDe+9BUupQ/CItAauJbinibDS4PPLAIvOixfy2g
/1esZ1rYZ/yHY/JpPzW0af12PcgBcFh79cPDlk4sFbXnK4z8Ub//arjf/0UK2o6P
asDBniCZChxWXr6OEl0bYPX5osZ3I/1ogrIOvovQqamcrnXaDxBVvsy99TaUCeI5
BOVHrSLCsvC4SN0UXlgC++igyxMAxCru2gHKro/lF3Qp3zVJo2J1+hlz7n57i75u
jnlEnRuzXLsDlflqKtcDUUu34jc0kK6N/9qJ2rMALEqPx1qd3oeZE3Fsk+aHAmL7
nh9deTLBdbOp/WhNqT8n/zTzAg==
-----END CERTIFICATE-----