Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.mft
File:                     4E796F1DC03FFA00CE3444AE95F35525432C41D3.mft (raw, json)
Hash identifier:          J2NtrGBOxwm7t2R4ub3Kii8V/dzh16j1mgOIROJtFcs=
Subject key identifier:   8B:7D:D4:BB:E6:7D:8B:F8:EE:C1:C6:84:73:1C:18:BB:01:3B:F2:29
Authority key identifier: 4E:79:6F:1D:C0:3F:FA:00:CE:34:44:AE:95:F3:55:25:43:2C:41:D3
Certificate issuer:       /CN=4E796F1DC03FFA00CE3444AE95F35525432C41D3
Certificate serial:       297AB053E6E98675B781A3D6F34519FABDFAB4C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.mft
Manifest number:          03
Signing time:             Sun 10 Apr 2022 15:00:00 +0000
Manifest this update:     Sun 10 Apr 2022 14:55:00 +0000
Manifest next update:     Mon 11 Apr 2022 18:03:00 +0000
Files and hashes:         1: 34352e3139302e3133322e302f32322d3234203d3e20323639363338.roa (hash: UYuyr6JxSHjSMQR1FWTeE9xG0d3h7GJ/690DsoreRQE=)
                          2: 4E796F1DC03FFA00CE3444AE95F35525432C41D3.crl (hash: L6UiJtp3NhvLJsyiUEpVDcHrEcMAtSOSSQMBYs7qoCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:b0:53:e6:e9:86:75:b7:81:a3:d6:f3:45:19:fa:bd:fa:b4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E796F1DC03FFA00CE3444AE95F35525432C41D3
        Validity
            Not Before: Apr 10 14:55:00 2022 GMT
            Not After : Apr 11 18:03:00 2022 GMT
        Subject: CN=8B7DD4BBE67D8BF8EEC1C684731C18BB013BF229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:18:f8:d3:43:7e:5a:2a:6c:6c:8e:67:33:
                    77:9c:e9:e3:c0:86:7e:90:7c:81:d5:1f:1e:ee:bc:
                    d6:4d:ee:67:7f:be:92:c7:b1:05:29:70:7b:08:8d:
                    84:95:e2:6f:cb:c8:23:ba:6c:68:32:42:1f:bf:be:
                    a5:d6:43:0a:18:54:c7:8d:d5:7d:73:57:f6:3c:58:
                    b9:07:b4:51:98:7e:22:10:10:3e:46:2a:d2:bf:ce:
                    3f:50:ea:93:bd:42:d4:69:a5:9a:6e:07:40:e6:2b:
                    57:87:91:3e:c7:e6:d5:e8:63:5d:ec:58:60:89:50:
                    0c:e0:b1:1e:1c:01:47:9f:85:a1:6e:21:57:06:16:
                    43:5d:4a:94:57:79:db:86:44:de:45:41:c8:a0:1e:
                    e0:c6:38:02:ba:4f:dd:d3:34:89:ae:54:7f:a7:1e:
                    b0:a3:fe:5c:c8:ff:ee:73:15:f7:1a:ef:51:93:6d:
                    1f:9a:36:47:ab:e2:47:e7:8a:1d:a2:1a:d8:65:4a:
                    d7:7a:9b:78:4f:bf:ea:6d:d9:ff:54:d5:f5:3c:75:
                    12:82:e8:f2:5a:66:cf:81:5a:f1:20:f2:8b:1b:c6:
                    2d:b4:1c:31:8d:d3:b0:22:b9:15:57:bf:8f:7b:79:
                    d9:bc:b2:f3:45:1e:44:76:4b:e1:83:32:7f:57:0e:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:D4:BB:E6:7D:8B:F8:EE:C1:C6:84:73:1C:18:BB:01:3B:F2:29
            X509v3 Authority Key Identifier:
                keyid:4E:79:6F:1D:C0:3F:FA:00:CE:34:44:AE:95:F3:55:25:43:2C:41:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:e1:38:cf:9e:b6:09:a8:bb:37:b5:ba:34:77:4a:a7:47:
         8c:5c:00:e8:1e:68:a0:40:70:af:98:76:d1:f5:83:07:ba:b5:
         8e:48:3b:3e:ec:c6:d8:f8:00:ab:f6:79:9b:15:fa:54:b3:8d:
         0d:41:dd:8d:c3:ac:85:fa:e9:aa:e5:56:7a:5d:8e:a1:0a:5e:
         c8:f4:5c:67:96:9f:13:c6:1f:e7:f6:4d:c5:45:59:7a:f7:7b:
         50:da:26:fa:1d:c4:5b:4b:f4:28:a3:fa:02:2f:d5:75:86:b0:
         71:34:2b:4d:45:fe:71:91:be:ed:bd:a8:a4:61:90:ab:cf:61:
         e7:bd:a6:82:b1:df:a7:e1:09:d1:0e:0d:f0:d7:b4:75:14:c9:
         01:43:ce:56:db:1b:13:37:1d:81:60:96:32:05:61:0a:af:32:
         2a:ef:26:ea:21:e2:ef:22:5b:41:29:b2:83:20:55:36:aa:b3:
         74:d8:eb:8f:86:89:b8:32:bb:58:dd:58:e0:8e:6a:73:e6:f4:
         30:2f:22:7e:0e:2d:1b:4e:60:a5:ff:fe:2b:36:97:0e:dc:31:
         ed:23:00:66:4a:a6:b3:e9:61:ab:e7:fc:70:92:4a:82:18:9a:
         fe:45:3a:d1:0e:1c:a7:cb:0d:db:97:d3:d2:b9:68:a0:c5:9d:
         c2:ed:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----