Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.mft
File:                     9AF58802664F504429310F7B4DFD6676DAAB27F4.mft (raw, json)
Hash identifier:          avLix5jD5hfW4zFZ7mLKv+cWbQZeVCnX9nvzXGYTLik=
Subject key identifier:   BF:EB:CD:4E:95:04:1E:F2:BC:F5:B4:33:CA:9A:3C:2B:FB:D1:3C:5D
Authority key identifier: 9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4
Certificate issuer:       /CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
Certificate serial:       5E03DC6537F5DDADFB62462880F62EA7F51ACEBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.mft
Manifest number:          019E
Signing time:             Thu 09 Nov 2023 19:11:08 +0000
Manifest this update:     Thu 09 Nov 2023 19:06:08 +0000
Manifest next update:     Fri 10 Nov 2023 21:32:08 +0000
Files and hashes:         1: 9AF58802664F504429310F7B4DFD6676DAAB27F4.crl (hash: Kf45DzTNJu5qGpoAEgN7aaQtjKHrA4Db4zdB32nW+ao=)
                          2: 323830343a343965383a3a2f33322d313238203d3e20323637323038.roa (hash: Dq7c+Rbr3TylekNhhfAwzTVoLLqfZiYvsWrc6J0fULQ=)
                          3: 34352e3233302e3230302e302f32322d3332203d3e20323637323038.roa (hash: L1zWx7pHqwoPZz/bZFOtdnm5ZD6Ujowi8xUvDHQ9cBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:03:dc:65:37:f5:dd:ad:fb:62:46:28:80:f6:2e:a7:f5:1a:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF58802664F504429310F7B4DFD6676DAAB27F4
        Validity
            Not Before: Nov  9 19:06:08 2023 GMT
            Not After : Nov 10 21:32:08 2023 GMT
        Subject: CN=BFEBCD4E95041EF2BCF5B433CA9A3C2BFBD13C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:00:48:9d:b8:51:62:c9:57:02:8b:f9:23:
                    53:c6:c1:a1:c7:df:1b:ae:d8:58:d5:20:31:a3:24:
                    da:a3:36:d3:ff:38:b9:42:c5:55:aa:66:1e:17:99:
                    9d:ca:fb:0a:b1:5b:fc:b7:9e:b0:c5:c2:88:31:61:
                    31:1c:7c:05:e5:60:5b:25:fc:fe:a8:e6:5a:9c:c4:
                    1e:7b:7e:df:2a:a2:cb:57:0a:9d:31:eb:9a:e3:c7:
                    2d:82:85:c8:95:ae:17:23:aa:3d:ba:75:d0:d3:d1:
                    9e:ae:7a:9c:dd:8c:4c:40:cb:e7:bf:6d:11:24:4b:
                    29:29:08:2d:70:ef:17:0a:96:0f:b6:50:cf:b5:3c:
                    6f:28:38:59:b1:c0:29:7c:98:fd:5a:22:e9:83:c7:
                    2c:c0:d5:6c:bd:a1:69:c1:42:91:9f:2a:24:4e:82:
                    5b:9a:2b:27:02:94:60:82:69:bb:3c:9b:8f:20:ba:
                    12:e7:10:14:c0:e6:3b:32:4d:fe:e5:49:a6:0c:0b:
                    1c:15:60:5a:70:3a:33:00:46:ae:74:90:23:a7:00:
                    be:46:f2:db:d9:4e:3e:7d:3a:89:73:e1:d6:44:2b:
                    b8:b8:b1:6a:cf:e8:23:26:13:76:9a:0c:91:b9:1b:
                    ad:83:ef:e8:14:33:f8:6e:44:dd:9b:64:08:87:38:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:CD:4E:95:04:1E:F2:BC:F5:B4:33:CA:9A:3C:2B:FB:D1:3C:5D
            X509v3 Authority Key Identifier:
                keyid:9A:F5:88:02:66:4F:50:44:29:31:0F:7B:4D:FD:66:76:DA:AB:27:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/9AF58802664F504429310F7B4DFD6676DAAB27F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fc:53:51:c3:fa:25:a5:25:96:90:d2:e5:a7:68:3a:40:7f:
         b1:58:45:c5:c0:0a:0d:f6:3c:5a:69:cd:1d:9e:83:0a:8f:71:
         60:4e:ce:9d:57:bf:9d:cb:d6:8b:1f:1a:08:4c:40:fc:ad:36:
         bf:11:aa:6d:83:23:b1:69:94:7c:38:20:39:ec:ed:2d:62:1f:
         c7:87:14:99:e0:bd:e1:11:0f:f3:14:d9:83:82:fa:ce:95:f0:
         9d:db:c7:cb:f4:33:6b:c8:2e:4a:a7:c0:28:db:8e:f1:ee:fe:
         fe:dc:81:2b:ee:b9:f0:85:e1:b4:b9:f0:8a:fd:1d:28:87:ef:
         9f:7a:c9:f0:41:5c:2e:b2:cb:c5:83:2e:d3:79:02:a4:ed:f8:
         74:57:7b:3d:f3:d4:73:a9:f8:11:fb:97:84:7e:a9:e8:04:39:
         19:2e:47:14:07:f3:dd:7b:14:12:91:16:27:e6:cf:f6:14:8c:
         e4:a6:9c:bc:a6:51:fd:3c:5f:90:b8:41:8d:17:5f:c4:8d:e8:
         a0:d4:8e:98:79:73:cc:29:ea:89:0d:30:91:3c:9a:e6:55:4a:
         1f:21:9f:e6:69:49:e9:2b:b3:a9:03:32:35:c6:5a:88:72:07:
         57:a5:a7:48:da:bd:8f:62:b0:5c:84:0b:4e:17:01:5c:07:a2:
         86:3a:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----