Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.mft
File:                     098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.mft (raw, json)
Hash identifier:          0qNRxGlrjbtuEXT+ZqXc5RXmOQES4DIWL2G3t6vp9qo=
Subject key identifier:   B2:5C:7B:2B:B2:45:AB:29:79:60:F5:06:D3:F7:F6:08:03:7D:92:31
Authority key identifier: 09:8D:AA:D2:8D:70:1A:1A:8D:8E:C2:15:19:9A:02:96:A9:C1:EE:1B
Certificate issuer:       /CN=098DAAD28D701A1A8D8EC215199A0296A9C1EE1B
Certificate serial:       0816EAA9475D825492BD53F8D2268602EBDF78C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.mft
Manifest number:          FF
Signing time:             Wed 09 Nov 2022 19:00:33 +0000
Manifest this update:     Wed 09 Nov 2022 18:55:33 +0000
Manifest next update:     Thu 10 Nov 2022 21:52:33 +0000
Files and hashes:         1: 323830343a363163303a3a2f33322d3438203d3e20323639323534.roa (hash: tAEka9PxJhwp+v5B2P1vokUp2ssaOXDrUoDpKvfBEH4=)
                          2: 098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.crl (hash: as4QckCzwVQ4y1Gl3wON2oMpR6EXzqmwK0AkaiIaBAI=)
                          3: 34352e3138332e31362e302f32322d3234203d3e20323639323534.roa (hash: q7cfoHnc6oGKqmBi/LIFZsRKlOW2xVJd0Uvedd4eksk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:16:ea:a9:47:5d:82:54:92:bd:53:f8:d2:26:86:02:eb:df:78:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098DAAD28D701A1A8D8EC215199A0296A9C1EE1B
        Validity
            Not Before: Nov  9 18:55:33 2022 GMT
            Not After : Nov 10 21:52:33 2022 GMT
        Subject: CN=B25C7B2BB245AB297960F506D3F7F608037D9231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:61:13:6d:e6:40:96:50:33:dd:e2:c9:bf:
                    90:f1:a5:84:3b:73:43:d5:40:77:c0:9c:44:71:4f:
                    10:fc:65:1c:43:71:15:ad:c1:29:2f:0a:c3:2c:49:
                    fe:23:48:32:3d:ca:ae:03:9e:96:03:fb:06:f4:17:
                    46:cc:fd:15:cc:1c:b0:53:ef:64:81:b9:e1:1d:15:
                    d4:71:db:e7:14:1b:e0:2a:87:15:39:3a:21:d4:84:
                    b7:12:3c:8d:54:bb:ca:35:06:3a:0f:a3:c8:49:6e:
                    df:01:e5:b0:25:7d:e8:d4:28:11:8f:99:49:6c:c4:
                    40:a2:00:e0:02:ed:46:ab:78:89:46:81:ba:30:cb:
                    4c:f7:28:67:1f:ce:c3:5c:e7:34:34:d0:f0:37:ad:
                    8f:f2:78:53:ab:b2:dc:3b:35:2e:04:74:18:49:9e:
                    3a:bc:16:83:d0:ae:9d:1b:16:44:c6:38:0c:45:b4:
                    d1:61:a1:5c:8f:16:3e:a8:5d:5c:bf:8e:0c:b0:fc:
                    ff:99:cd:d0:2d:f1:6a:0d:ed:94:60:70:d3:3b:5d:
                    09:11:02:da:6b:f4:ae:ae:1a:bc:b3:26:08:3f:81:
                    53:0c:87:df:4d:be:bd:01:bf:08:76:6a:52:1f:ee:
                    14:1a:4d:9d:c3:32:2b:6a:77:75:5e:ab:13:90:a7:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:7B:2B:B2:45:AB:29:79:60:F5:06:D3:F7:F6:08:03:7D:92:31
            X509v3 Authority Key Identifier:
                keyid:09:8D:AA:D2:8D:70:1A:1A:8D:8E:C2:15:19:9A:02:96:A9:C1:EE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/098DAAD28D701A1A8D8EC215199A0296A9C1EE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:87:8d:7e:1d:0d:34:7c:b9:d5:05:08:31:e8:75:e3:49:cc:
         ba:58:fb:27:1e:1f:12:96:39:45:2c:f7:80:05:bf:f6:b4:e4:
         0e:07:c4:91:a9:c5:95:4a:50:09:da:c2:2d:03:74:f1:19:ef:
         46:39:b1:22:e0:3c:98:bd:41:c8:06:a0:d6:31:4d:8f:23:65:
         5f:3f:cd:eb:da:b5:47:5a:55:cd:10:34:77:a0:99:2d:e6:31:
         45:6e:2b:9c:e1:30:43:13:50:79:df:b2:a2:d4:c3:60:d6:28:
         bf:26:9b:d2:32:e8:ef:c1:8a:4c:94:d9:23:fb:f9:3e:8c:29:
         81:86:0e:30:f4:c0:2e:e7:c2:55:9f:9d:b7:f9:56:ed:50:89:
         91:14:8f:e5:b0:ad:d1:e4:f6:65:8f:03:71:f7:41:b1:4d:9f:
         05:fa:ae:27:79:a4:61:80:45:a1:8b:64:a4:9a:86:b8:94:87:
         ad:51:99:49:b3:9f:01:a5:72:8b:99:a4:d2:4c:d6:99:1f:51:
         22:f2:ac:f2:59:ca:57:47:11:65:27:66:7b:d3:10:f0:72:b3:
         82:ee:d1:f3:1a:ad:c7:d8:0a:2c:01:49:ca:7b:72:9f:7d:cd:
         90:fb:24:96:eb:56:ac:d2:b1:0a:3a:60:62:6d:3e:16:27:9a:
         b8:a7:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----