Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.mft
File:                     49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.mft (raw, json)
Hash identifier:          LMIIR82i+pPA8PFOMLtN+QgJYGHMW/iLRknxzeUil7g=
Subject key identifier:   A8:3C:1D:77:F5:66:24:68:67:6F:77:8E:34:F0:47:73:A4:19:A6:5F
Authority key identifier: 49:A3:A5:C0:1F:9D:FB:8B:55:30:42:0D:1E:C0:F7:72:F9:7A:F4:C5
Certificate issuer:       /CN=49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5
Certificate serial:       50ED663AD43FBA00E03EC6B4B20FF3E77F4AC280
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.mft
Manifest number:          034D
Signing time:             Wed 24 May 2023 10:06:04 +0000
Manifest this update:     Wed 24 May 2023 10:01:04 +0000
Manifest next update:     Thu 25 May 2023 12:42:04 +0000
Files and hashes:         1: 323830343a376162383a3a2f33322d3438203d3e20323731333838.roa (hash: Yh3DF7BbNbtZStEsPMkAe8cq4gKgfWu96WhWsfJye34=)
                          2: 3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa (hash: 71Lk8i0AF4jWZsHqbq+6eNEe2l6qc5k/xjVmZTJG0+E=)
                          3: 49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.crl (hash: ruSN+8CcUKNVlidZJYhmCEOOqFeugyQXYBHjhawnRBc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ed:66:3a:d4:3f:ba:00:e0:3e:c6:b4:b2:0f:f3:e7:7f:4a:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5
        Validity
            Not Before: May 24 10:01:04 2023 GMT
            Not After : May 25 12:42:04 2023 GMT
        Subject: CN=A83C1D77F5662468676F778E34F04773A419A65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:3f:05:b5:04:7e:e3:73:8e:61:03:bf:c7:
                    bf:ac:e9:f2:58:eb:90:9e:34:3e:85:27:a8:23:db:
                    ec:de:3a:ba:a3:5a:e5:30:f2:6a:b4:b2:ce:74:89:
                    48:a0:6c:11:21:68:ff:b2:ef:72:d1:b0:32:dd:00:
                    fc:f2:8d:bc:20:3e:71:f4:0f:e1:91:e2:23:9c:8e:
                    7d:c9:a7:f3:24:69:75:84:02:bf:38:e4:51:c7:fb:
                    39:d4:13:d5:50:c9:8f:a8:4b:e3:fd:7a:21:6b:00:
                    65:4d:8d:3a:d0:17:81:59:e2:e7:93:e7:f7:d9:da:
                    91:1e:48:4c:2f:81:b2:24:07:4e:bd:55:c1:d4:bf:
                    e7:6b:30:95:b4:79:28:01:81:35:e1:59:ad:d9:45:
                    ce:af:6f:34:55:a2:4e:95:8a:40:80:e4:08:74:db:
                    28:c3:29:9f:19:6b:5f:00:55:c5:1e:83:65:ff:7e:
                    af:dc:ed:b8:85:d1:e7:1d:a6:73:bf:49:d6:6e:6f:
                    28:31:b5:00:40:67:c3:eb:10:f5:a7:db:d2:79:05:
                    77:e3:40:a9:74:25:5e:4f:98:71:73:b3:65:ba:ad:
                    10:46:aa:94:9f:27:3c:19:8b:42:b3:bf:18:74:a0:
                    5c:1e:75:f2:f8:f7:7d:30:f9:69:a9:4d:bd:87:27:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3C:1D:77:F5:66:24:68:67:6F:77:8E:34:F0:47:73:A4:19:A6:5F
            X509v3 Authority Key Identifier:
                keyid:49:A3:A5:C0:1F:9D:FB:8B:55:30:42:0D:1E:C0:F7:72:F9:7A:F4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:34:4b:b3:e9:34:12:cf:49:05:e4:7d:db:51:d2:6d:40:
         7e:ad:81:d8:c7:45:d3:08:75:00:04:7f:a3:25:98:ab:21:d7:
         ff:0c:22:5a:0d:c0:74:62:c9:0f:d4:2c:54:8a:89:9a:88:0f:
         63:c3:dd:30:26:7d:88:ea:a1:f8:f5:ce:1d:50:ac:b4:e0:6e:
         e3:10:0c:a9:14:32:81:9f:f4:ed:67:ac:1f:f7:11:09:d1:b7:
         d3:dd:4f:5a:2c:25:f5:f6:16:bb:7a:61:3a:53:8e:67:65:5c:
         05:f5:0e:a0:8b:eb:7b:9e:c6:d3:70:73:13:5c:6d:39:98:59:
         9e:65:5b:b0:06:f6:14:07:69:c7:fa:52:71:6f:cf:e7:c7:3d:
         cb:c3:15:2f:22:6b:b5:b8:93:53:19:56:24:fd:57:7a:32:72:
         21:37:e7:5c:ed:21:71:ba:cf:ec:18:f7:04:2a:16:c6:7a:50:
         94:e4:f6:97:5b:b4:a2:01:de:e0:b3:e9:a1:f4:27:5c:a2:02:
         46:e1:53:e4:67:fd:71:18:ea:0a:d9:44:a6:f3:6b:62:6a:41:
         1d:c9:4d:32:cc:48:fd:38:fa:9f:6d:48:8f:c3:f6:d6:21:aa:
         5e:0e:bb:0b:ce:dc:b5:f4:b5:95:66:77:6b:cd:58:bc:35:b3:
         42:1c:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----