Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/86F81359061F03DB22A92F167C207474D3C13173.mft
File:                     86F81359061F03DB22A92F167C207474D3C13173.mft (raw, json)
Hash identifier:          szm8Bpt3VHp2zhKoJ9TlvSeTJvh/vkO7GMgP87Tgwgk=
Subject key identifier:   28:EE:45:78:6A:84:1C:BB:4B:79:07:5C:12:6D:C8:61:F3:87:F5:3B
Authority key identifier: 86:F8:13:59:06:1F:03:DB:22:A9:2F:16:7C:20:74:74:D3:C1:31:73
Certificate issuer:       /CN=86F81359061F03DB22A92F167C207474D3C13173
Certificate serial:       01359A8F2EAE5B623D6CC56197D5DC66206720C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F81359061F03DB22A92F167C207474D3C13173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/86F81359061F03DB22A92F167C207474D3C13173.mft
Manifest number:          88
Signing time:             Sat 27 May 2023 18:04:05 +0000
Manifest this update:     Sat 27 May 2023 17:59:05 +0000
Manifest next update:     Sun 28 May 2023 18:27:05 +0000
Files and hashes:         1: 323830343a326631633a3a2f33322d313238203d3e20323634383732.roa (hash: wYjWR7TzhnDsFWNo6CwGzRcN4aayBa0vxZjaVMn4FPw=)
                          2: 3136382e3232372e34382e302f32322d3332203d3e20323634383732.roa (hash: Nm6Fasg7d7i5nd6UErvTgGkP/twrDUk1L+WwT4Pq4Vw=)
                          3: 86F81359061F03DB22A92F167C207474D3C13173.crl (hash: wXMCEolx92o/fmm8L2B3qw77vGCmoPXy/zcmaghE7Tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:35:9a:8f:2e:ae:5b:62:3d:6c:c5:61:97:d5:dc:66:20:67:20:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F81359061F03DB22A92F167C207474D3C13173
        Validity
            Not Before: May 27 17:59:05 2023 GMT
            Not After : May 28 18:27:05 2023 GMT
        Subject: CN=28EE45786A841CBB4B79075C126DC861F387F53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:7d:c9:92:85:6b:2e:81:f9:13:5b:76:fa:
                    d9:2d:28:f2:0b:85:81:4d:60:cd:fb:be:62:77:76:
                    52:8e:27:be:25:16:d2:73:f1:34:b5:3c:17:72:3e:
                    ee:1b:28:2a:bc:e2:6e:0a:65:a4:ef:cb:ab:38:d7:
                    75:5a:d7:dd:de:0d:87:92:d6:af:6f:38:39:57:f3:
                    f8:79:88:19:30:5c:e6:b0:1a:2c:88:54:2b:d8:be:
                    aa:f8:32:15:16:d6:f7:47:7d:a9:8d:59:90:fe:21:
                    33:c7:88:a8:30:15:68:9d:c8:35:1f:d0:9d:d1:f7:
                    93:99:c1:b4:ac:d6:77:87:d2:4a:0e:fe:8d:6f:65:
                    19:cd:54:e5:5e:1f:c1:ba:e1:07:76:94:8f:f9:28:
                    78:c4:98:61:db:16:8d:45:5c:c4:4d:2e:6f:33:c9:
                    1b:79:92:61:13:b1:16:76:44:69:07:95:56:14:89:
                    10:b4:7f:2d:f3:6d:b0:61:a3:33:2d:4d:22:a8:42:
                    71:ef:ed:f1:ca:a3:ab:9f:70:3f:81:5d:e0:21:a2:
                    2d:da:8d:de:9e:5f:c5:b7:a4:0a:76:0d:84:87:61:
                    e5:c4:72:7b:cf:49:8a:c1:c1:a1:81:fb:1f:49:5c:
                    59:cc:fd:d7:16:e9:e9:4e:26:01:35:21:1a:4c:ee:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EE:45:78:6A:84:1C:BB:4B:79:07:5C:12:6D:C8:61:F3:87:F5:3B
            X509v3 Authority Key Identifier:
                keyid:86:F8:13:59:06:1F:03:DB:22:A9:2F:16:7C:20:74:74:D3:C1:31:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/86F81359061F03DB22A92F167C207474D3C13173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F81359061F03DB22A92F167C207474D3C13173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/86F81359061F03DB22A92F167C207474D3C13173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:51:be:0e:ec:d7:cd:bc:00:70:88:ec:5c:62:40:e1:63:
         7c:65:06:76:16:62:76:56:07:4e:79:69:d5:0c:36:32:1a:29:
         8b:bb:19:4d:74:ea:bb:b4:e2:57:6d:d1:01:db:83:d8:2d:09:
         c5:54:0c:5f:ba:35:d6:63:39:06:e5:e9:85:4b:e5:86:c4:9a:
         4f:96:3d:70:a6:62:6a:f4:71:a4:39:c4:4f:fb:5d:50:b5:5c:
         1d:e5:5f:6f:fc:1c:aa:c4:66:0b:82:f4:cd:e2:60:ad:b2:e0:
         19:16:49:f3:d3:d5:6e:84:6e:bb:a5:11:6d:06:b3:1c:0c:ad:
         af:bc:aa:41:da:a3:7f:9a:91:d4:45:98:59:b3:ea:f1:af:78:
         5b:65:d6:c8:a9:bf:fe:19:5b:bc:ae:dc:89:dc:f0:1c:d2:28:
         e1:ac:1f:3d:ea:7b:9a:d2:a4:71:1e:5f:13:31:df:9a:5c:59:
         95:9d:bb:a8:90:e1:0b:bf:f7:b7:53:42:2d:f0:12:73:35:ce:
         9d:08:dc:0d:66:42:f3:34:6b:c4:1a:85:e5:b8:64:03:68:64:
         5a:a5:2d:28:eb:e4:ef:0c:19:b2:82:52:fb:43:e6:78:fc:4b:
         c6:e1:a8:85:23:5c:2b:62:42:54:81:a9:bd:03:ed:d8:a0:bb:
         d2:24:7f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----