Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/2E7521065BB304075952A8787F2B01B586DE3C25.mft
File:                     2E7521065BB304075952A8787F2B01B586DE3C25.mft (raw, json)
Hash identifier:          1s5EB8tUjgsfkC5Ve4GMImwbKWKKN5uk2aoMR8VFPCc=
Subject key identifier:   68:69:D0:00:0F:68:16:0B:61:A7:A2:3F:38:0D:27:AE:EA:1C:62:96
Authority key identifier: 2E:75:21:06:5B:B3:04:07:59:52:A8:78:7F:2B:01:B5:86:DE:3C:25
Certificate issuer:       /CN=2E7521065BB304075952A8787F2B01B586DE3C25
Certificate serial:       39F44FBC57418039BE589260B96B2F1CCE9ED197
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7521065BB304075952A8787F2B01B586DE3C25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/2E7521065BB304075952A8787F2B01B586DE3C25.mft
Manifest number:          8D
Signing time:             Fri 14 Apr 2023 09:22:48 +0000
Manifest this update:     Fri 14 Apr 2023 09:17:48 +0000
Manifest next update:     Sat 15 Apr 2023 11:39:48 +0000
Files and hashes:         1: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: cBd7sg0NrCjMNI60xb1egGjVa3FcJ84wnT+5sOSPOVw=)
                          2: 2E7521065BB304075952A8787F2B01B586DE3C25.crl (hash: YQus872dvHmrlHdUXlUgEid5xnQoLZ9YD2fxOHQsVtY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:4f:bc:57:41:80:39:be:58:92:60:b9:6b:2f:1c:ce:9e:d1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7521065BB304075952A8787F2B01B586DE3C25
        Validity
            Not Before: Apr 14 09:17:48 2023 GMT
            Not After : Apr 15 11:39:48 2023 GMT
        Subject: CN=6869D0000F68160B61A7A23F380D27AEEA1C6296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:cd:83:af:e7:51:dd:ac:00:90:8d:2e:34:
                    40:01:cf:00:22:24:70:ba:52:37:29:74:45:fc:ed:
                    17:28:36:61:91:28:4f:36:6c:0d:92:e4:3b:98:a0:
                    d9:3b:89:f5:29:dc:b0:ab:1d:87:8c:30:30:49:43:
                    a9:b7:71:49:c7:7f:97:0a:ce:6d:f2:9b:2e:18:83:
                    e5:f0:91:1c:2e:95:53:2b:16:c0:b9:e3:cc:91:c5:
                    6d:a6:89:5c:ab:34:dd:21:5f:58:75:55:9e:92:37:
                    18:1f:f3:d4:7d:85:b1:49:14:40:20:33:24:41:0c:
                    7f:52:3f:a2:2e:29:d5:5e:3b:66:2f:39:45:9e:eb:
                    05:66:4c:84:5c:45:4b:c7:89:65:b9:fe:28:b8:e5:
                    25:20:d1:f1:bb:5a:5d:55:ee:4c:f2:2a:31:bc:4b:
                    21:99:ab:d0:82:8f:69:f0:fb:1d:21:f2:99:2d:f9:
                    e4:d8:cb:c2:aa:8c:4d:7d:19:f6:56:ec:6b:81:32:
                    60:c5:eb:a7:d4:5e:ff:f0:8d:7f:09:30:ed:0d:ae:
                    80:a7:7e:95:ea:c9:13:b5:9c:18:85:68:59:fd:64:
                    b5:d6:f3:3e:ee:fd:ca:fa:1e:74:41:dd:33:7e:d3:
                    a9:91:c9:61:c2:0a:e1:b9:95:f4:73:78:44:9d:c6:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:69:D0:00:0F:68:16:0B:61:A7:A2:3F:38:0D:27:AE:EA:1C:62:96
            X509v3 Authority Key Identifier:
                keyid:2E:75:21:06:5B:B3:04:07:59:52:A8:78:7F:2B:01:B5:86:DE:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/2E7521065BB304075952A8787F2B01B586DE3C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2E7521065BB304075952A8787F2B01B586DE3C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/2E7521065BB304075952A8787F2B01B586DE3C25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:83:27:21:f3:73:77:99:cf:b9:81:84:5e:fa:30:27:7e:30:
         ae:72:e5:fb:22:ed:80:85:d5:9e:84:4e:32:76:ae:0c:08:30:
         2f:9e:fe:bf:74:29:29:f8:7d:9f:ad:0b:cd:ba:4a:29:7a:6d:
         38:89:c6:d3:50:f0:7b:a3:ae:89:66:05:d4:3d:cc:3d:a6:e3:
         10:d5:04:a4:b5:1a:27:65:71:6c:17:9d:18:c0:d0:72:9b:d3:
         bd:f2:4d:7c:17:33:d1:61:37:5f:b9:21:53:12:70:cf:d2:35:
         98:7e:75:23:28:af:93:02:68:4f:95:9b:1f:4e:d2:f5:b6:7a:
         a9:07:b2:e9:8c:2d:d3:f3:c5:46:ce:ec:2f:ae:e3:70:4a:7a:
         f2:63:f5:e9:2a:b1:69:3d:f3:7b:14:9d:0f:7b:3e:1c:80:d2:
         78:91:3d:09:97:dd:68:e2:9b:f9:cb:5b:77:61:ea:10:1d:40:
         95:00:04:60:3f:83:de:8c:9d:b6:8b:3e:34:20:32:2c:88:f0:
         4b:36:ef:e8:b4:14:bb:ce:2a:04:2d:1c:3e:e5:9c:2f:d0:fb:
         77:52:c4:9c:47:14:a6:23:17:73:33:35:bd:54:83:36:62:d3:
         e6:65:09:a7:69:05:81:c7:ce:d1:a3:9b:9a:1c:c4:c8:ce:95:
         32:70:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----