Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.mft
File:                     208D0421EE18E194080CD17BAF3EEC7342EA20C1.mft (raw, json)
Hash identifier:          LRJhfXJ+OZbpMWhuDYFiI9f1AE6Vdhc+a4u9fMfkZf4=
Subject key identifier:   91:9A:66:1A:5D:E9:09:61:F1:E0:8C:49:7E:40:A1:B7:FD:46:08:F5
Authority key identifier: 20:8D:04:21:EE:18:E1:94:08:0C:D1:7B:AF:3E:EC:73:42:EA:20:C1
Certificate issuer:       /CN=208D0421EE18E194080CD17BAF3EEC7342EA20C1
Certificate serial:       1C9D77AEC7BD926C4EA7B591BD2BC5C2FBF960FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.mft
Manifest number:          CF
Signing time:             Sat 16 Sep 2023 15:21:10 +0000
Manifest this update:     Sat 16 Sep 2023 15:16:10 +0000
Manifest next update:     Sun 17 Sep 2023 16:09:10 +0000
Files and hashes:         1: 323830343a376535633a3a2f33322d313238203d3e20323731363139.roa (hash: iDW/DYgtVa+MTUhrGqBzWhkQBCJ2FT09jy21R+4cZbQ=)
                          2: 208D0421EE18E194080CD17BAF3EEC7342EA20C1.crl (hash: 7h8FYlJy3oc9UdXxz3OcjbGgVwFFnUygIzyL4gvsDuw=)
                          3: 3137392e36332e3135322e302f32322d3332203d3e20323731363139.roa (hash: sI5g4T5OAYN7jeoUJrwr0RCL+RDg29Q2SykOUWyIDt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9d:77:ae:c7:bd:92:6c:4e:a7:b5:91:bd:2b:c5:c2:fb:f9:60:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208D0421EE18E194080CD17BAF3EEC7342EA20C1
        Validity
            Not Before: Sep 16 15:16:10 2023 GMT
            Not After : Sep 17 16:09:10 2023 GMT
        Subject: CN=919A661A5DE90961F1E08C497E40A1B7FD4608F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:1f:34:da:28:27:3f:dd:96:49:b0:27:71:
                    11:82:cb:5a:48:fd:c8:e6:6e:76:a8:f9:46:c5:fa:
                    26:c4:ef:92:5b:eb:42:8c:6a:8a:a0:f9:38:c5:65:
                    ff:c8:da:11:e0:9c:05:5a:5e:c8:27:2b:66:7e:8c:
                    2c:dd:ae:5d:ed:60:57:6d:23:23:5d:ab:6e:1c:34:
                    96:ae:d9:a6:9a:db:46:61:2e:18:2f:83:63:dd:19:
                    f4:ce:71:b6:38:0c:15:27:e6:ca:41:b2:8a:60:9b:
                    31:29:43:32:47:53:89:46:b1:9d:5b:6b:81:86:19:
                    db:5b:e0:d9:7b:b1:7b:a4:2b:14:2e:cd:27:92:e3:
                    ce:eb:10:a7:f2:62:a9:af:94:08:f8:80:61:54:c6:
                    bb:b5:8a:78:95:51:95:5a:89:e9:7f:17:eb:6f:5e:
                    02:ff:e6:a4:bf:21:f2:88:9b:42:e2:af:85:2c:0e:
                    f7:38:a2:92:7f:b7:1a:f2:d6:7c:80:19:c9:96:91:
                    24:27:c9:4d:d1:f6:22:8c:34:dd:a2:bd:c3:1c:4c:
                    cd:99:16:ad:76:09:c8:f5:36:14:1a:e6:1f:6c:5a:
                    0b:0e:8f:ca:d2:23:09:f3:75:b8:c4:f7:0f:d5:b7:
                    65:0f:2e:69:13:da:6b:fb:bc:db:7d:c5:e6:d6:9e:
                    2f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:66:1A:5D:E9:09:61:F1:E0:8C:49:7E:40:A1:B7:FD:46:08:F5
            X509v3 Authority Key Identifier:
                keyid:20:8D:04:21:EE:18:E1:94:08:0C:D1:7B:AF:3E:EC:73:42:EA:20:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/208D0421EE18E194080CD17BAF3EEC7342EA20C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:fd:12:be:98:23:0f:a5:c2:45:03:73:92:f5:d1:0f:5e:
         db:f1:b6:98:3c:2c:d7:5e:8b:ef:de:e3:5d:30:b8:e4:1a:7c:
         bb:d9:2a:95:93:02:78:ba:d6:55:f6:84:e5:a6:7f:90:59:67:
         cd:81:ad:d5:f5:dd:f9:58:93:1a:ac:3e:ce:64:a5:49:b8:30:
         86:e0:49:89:70:95:38:51:a8:c1:0f:a0:cd:4b:bf:4e:39:41:
         51:c6:88:f8:1c:22:3f:c7:1b:97:bf:72:e9:c9:d5:c6:05:28:
         f0:32:e8:1a:03:03:c0:d0:36:94:2e:19:95:d1:5d:37:e2:5f:
         92:c3:38:a8:d0:8e:38:a5:d1:14:17:8d:0d:8f:c8:0a:10:4d:
         fa:91:4c:ea:5f:3c:58:1c:0e:e8:ed:dc:05:b0:b2:f5:be:85:
         22:cd:b0:b6:3e:09:15:c1:e6:7d:e8:76:5e:95:2a:d2:ec:35:
         a8:1b:3a:33:78:c4:a1:ba:ea:7f:dc:1b:26:9c:cf:8e:7c:a2:
         58:4f:21:c2:aa:1a:e9:80:fa:2e:9a:b1:dc:29:19:b8:d2:31:
         f8:4d:7c:cc:a4:19:94:17:92:10:7a:15:04:e6:62:52:f8:81:
         ba:1c:ea:8a:f6:bf:12:ad:aa:98:94:78:31:56:31:83:cd:55:
         7d:da:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----