Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.mft
File:                     690A88BE654AD67BF30499F617A3C9BFC23AA33B.mft (raw, json)
Hash identifier:          iLuc0Nera9WnIj//s9vFkAAvgRDftBBSRyYGtFX/mtc=
Subject key identifier:   16:E5:F0:11:E5:0B:AA:4D:0E:BA:D6:EF:A4:36:F0:CE:49:F4:59:6C
Authority key identifier: 69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B
Certificate issuer:       /CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
Certificate serial:       7A7B3D1FC024430F7415944513345EEDB9F587A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.mft
Manifest number:          CA
Signing time:             Mon 24 Apr 2023 14:50:42 +0000
Manifest this update:     Mon 24 Apr 2023 14:45:42 +0000
Manifest next update:     Tue 25 Apr 2023 15:02:42 +0000
Files and hashes:         1: 3132382e3230312e32382e302f32322d3234203d3e20323636363131.roa (hash: 3UuJoMG7ntZQq8GwaIsqqsSr6jSJa154Zi54xqG/Qas=)
                          2: 323830343a336561343a3a2f33322d3334203d3e20323636363131.roa (hash: TCXaaeFm+lqCxKoJMok0+IpLh1g/02UTI7Wg86qOw6Y=)
                          3: 690A88BE654AD67BF30499F617A3C9BFC23AA33B.crl (hash: +61WQmJJpB7wbUy7rK9RlnysjX+KdjMqhPOL5OJCVEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7b:3d:1f:c0:24:43:0f:74:15:94:45:13:34:5e:ed:b9:f5:87:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690A88BE654AD67BF30499F617A3C9BFC23AA33B
        Validity
            Not Before: Apr 24 14:45:42 2023 GMT
            Not After : Apr 25 15:02:42 2023 GMT
        Subject: CN=16E5F011E50BAA4D0EBAD6EFA436F0CE49F4596C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:be:d2:36:ed:3c:40:91:40:7d:bf:dc:44:
                    bd:1f:ce:98:d1:34:ac:a0:4a:f8:66:c8:87:e1:bb:
                    b2:51:4b:42:56:66:0d:98:b6:0c:70:e2:2d:02:80:
                    d7:f8:f7:ac:5b:1d:bb:89:53:f3:ce:9a:f2:c3:c7:
                    3b:2d:61:00:3e:5b:76:32:92:d0:fe:53:77:3c:ae:
                    5a:a4:ec:8b:06:23:07:07:76:4a:7c:45:60:e2:2b:
                    61:02:f0:9d:c3:4a:30:2d:30:8b:4f:1d:07:8f:01:
                    d6:53:ee:70:a5:56:a4:fb:9f:2b:f8:c6:ba:0b:68:
                    d4:08:36:a8:9c:e7:3e:c5:0a:2f:c9:52:e0:e0:ad:
                    e5:7d:32:fe:c4:55:23:bd:f1:23:a6:ff:e1:6d:49:
                    5d:f5:2d:17:45:1a:47:dc:68:1e:e1:99:8d:35:8d:
                    c3:38:ee:4b:9b:66:88:fc:3a:83:9e:26:a8:0e:89:
                    90:04:6b:49:1d:82:27:fb:63:e2:c2:c6:fe:fb:de:
                    fb:ac:30:c6:f2:81:12:74:50:8d:e0:4c:b3:56:b8:
                    87:da:44:ff:33:1c:d5:dd:07:87:bc:9a:66:ba:8c:
                    af:63:73:3e:78:50:36:c3:ce:b6:91:dd:9a:60:79:
                    2f:df:17:3f:be:4c:a4:91:9e:f7:0f:9f:53:fa:c8:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:F0:11:E5:0B:AA:4D:0E:BA:D6:EF:A4:36:F0:CE:49:F4:59:6C
            X509v3 Authority Key Identifier:
                keyid:69:0A:88:BE:65:4A:D6:7B:F3:04:99:F6:17:A3:C9:BF:C2:3A:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/690A88BE654AD67BF30499F617A3C9BFC23AA33B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cd:4e:24:9d:f7:01:9c:17:d1:8a:da:d7:ca:64:5b:c8:3f:
         63:cd:9d:70:9d:67:56:4d:d2:98:81:a4:4f:8e:d9:b9:8c:c9:
         e2:0c:70:6a:a1:99:b2:6a:6a:03:90:26:d5:48:6d:0d:8c:30:
         22:0c:0c:2a:c3:3b:48:72:38:e1:87:48:60:a2:fc:19:ab:f7:
         af:ff:84:f8:72:1a:ae:6a:63:93:a9:06:37:cd:5a:d5:0f:43:
         01:dc:58:9e:a7:2f:5c:a3:e0:83:c7:0d:9f:23:17:4f:f0:47:
         97:bd:1d:c2:b7:e2:90:27:4c:3e:e7:f4:a1:4d:31:e9:da:06:
         e4:2f:61:98:b7:7c:93:0e:bb:30:3d:3b:b1:6c:c4:fb:a7:65:
         d4:f6:f9:93:9b:f8:96:53:53:37:6f:7c:bb:40:c3:cc:2f:51:
         81:e4:41:41:d9:e4:c8:16:06:bb:41:56:83:25:6c:6a:39:e1:
         c1:ea:ab:13:73:44:90:a1:9d:e6:bf:0f:1a:81:63:b1:cd:42:
         f5:51:b6:73:b2:d1:be:65:0c:1b:6f:3d:d4:e3:eb:bf:a2:68:
         fb:fd:2f:fd:8b:04:a6:47:f5:88:88:3c:8c:05:49:a7:93:1c:
         b4:aa:86:96:06:06:57:f4:59:b3:6b:ab:47:ac:07:eb:8b:46:
         10:1d:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----