Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/8FBE1E00E1D0E899423E9657DD90FA093D7114D8.mft
File:                     8FBE1E00E1D0E899423E9657DD90FA093D7114D8.mft (raw, json)
Hash identifier:          Usi1BK49qQaCTxUSGb5WSdKGrqiXaCUf38yqGMbM+xs=
Subject key identifier:   CB:A4:E9:05:4A:DF:5B:02:58:1F:AF:19:C8:72:A0:23:B8:EB:9F:0D
Authority key identifier: 8F:BE:1E:00:E1:D0:E8:99:42:3E:96:57:DD:90:FA:09:3D:71:14:D8
Certificate issuer:       /CN=8FBE1E00E1D0E899423E9657DD90FA093D7114D8
Certificate serial:       40F91F11F32505A0CD0D5894E98C65F4C3DAE43F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBE1E00E1D0E899423E9657DD90FA093D7114D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/8FBE1E00E1D0E899423E9657DD90FA093D7114D8.mft
Manifest number:          86
Signing time:             Sun 22 May 2022 08:40:00 +0000
Manifest this update:     Sun 22 May 2022 08:35:00 +0000
Manifest next update:     Mon 23 May 2022 09:13:00 +0000
Files and hashes:         1: 8FBE1E00E1D0E899423E9657DD90FA093D7114D8.crl (hash: xuD7Fq9225ZTTgRWpcpdV10WpZjnEGisfJf55xOsoBw=)
                          2: 34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa (hash: olvLS46FFKAPJkG/khAlFjEEviPTcb2IS9VBDrlQwTc=)
                          3: 323830343a363833303a3a2f33322d3334203d3e20323639363734.roa (hash: Op9UG8LmoU0mBdI5NS0f6o7tDoYDq97Wu5707i8FyEg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f9:1f:11:f3:25:05:a0:cd:0d:58:94:e9:8c:65:f4:c3:da:e4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBE1E00E1D0E899423E9657DD90FA093D7114D8
        Validity
            Not Before: May 22 08:35:00 2022 GMT
            Not After : May 23 09:13:00 2022 GMT
        Subject: CN=CBA4E9054ADF5B02581FAF19C872A023B8EB9F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:b9:3e:6c:af:ea:23:e6:a5:57:c1:41:03:
                    ce:39:c3:a6:1e:75:f0:bf:36:cb:c0:40:b4:42:5d:
                    d7:7c:77:4e:7c:79:ae:b7:b1:c8:b4:22:94:87:b4:
                    96:fe:d0:25:ec:dc:4e:ad:21:71:3e:d9:a7:e5:92:
                    81:2a:47:c3:a8:4f:db:e3:cd:7a:ae:4f:5f:f6:97:
                    36:bd:03:fd:e9:8d:96:b6:dd:d8:f1:27:8d:7f:4c:
                    86:63:b8:36:a5:31:c7:88:21:77:bb:a4:88:cc:2a:
                    fb:22:30:34:38:99:30:d6:06:73:95:9c:95:72:04:
                    e0:2f:21:99:2f:51:53:3e:8c:2a:ee:7f:78:d5:96:
                    ac:6e:7b:c8:10:69:f2:00:2b:4d:6a:00:00:11:c9:
                    51:5c:6b:d6:ac:8a:3c:72:3e:54:b2:46:72:67:cb:
                    3c:68:aa:7a:33:63:77:ae:88:f5:a2:9d:b1:18:1e:
                    f5:8a:13:2b:49:be:cc:b6:15:cd:a2:32:65:92:cb:
                    b4:4a:51:08:aa:2b:df:ea:3c:17:b5:c1:62:6a:76:
                    bc:8c:67:fd:bc:40:ce:ca:32:72:48:40:c1:b1:15:
                    3e:53:70:d4:74:0c:b2:b4:9a:96:5e:ed:2f:c0:51:
                    4a:69:2b:ac:98:b7:bb:6a:b9:ba:08:2f:a5:10:51:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:E9:05:4A:DF:5B:02:58:1F:AF:19:C8:72:A0:23:B8:EB:9F:0D
            X509v3 Authority Key Identifier:
                keyid:8F:BE:1E:00:E1:D0:E8:99:42:3E:96:57:DD:90:FA:09:3D:71:14:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/8FBE1E00E1D0E899423E9657DD90FA093D7114D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBE1E00E1D0E899423E9657DD90FA093D7114D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/8FBE1E00E1D0E899423E9657DD90FA093D7114D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:bb:b2:a8:a1:9a:88:e6:95:dd:2c:e8:13:e8:ce:b0:18:
         a5:5c:60:d6:7c:a8:56:b9:75:fd:06:bc:e7:63:ba:42:ff:76:
         95:c7:4f:91:fe:6c:bb:cf:dd:45:40:81:eb:b2:6b:c0:fd:e1:
         e3:5e:db:49:4e:62:04:ba:55:e2:48:70:9a:de:06:86:ea:41:
         9d:fe:cd:3c:dd:ee:7e:3c:50:f9:21:8b:88:5f:52:6f:6d:76:
         08:f8:3a:5f:39:31:d3:02:4e:30:a7:2a:78:2c:bc:ce:59:5e:
         60:fd:68:ec:4f:6d:7d:37:d8:13:c6:62:ad:02:b1:31:da:2c:
         81:27:0a:09:ec:30:ad:a5:66:e9:d4:18:a8:60:2a:75:f4:d1:
         0e:0b:46:6d:78:35:14:8b:d4:16:e8:cb:8f:e1:50:2f:ef:cc:
         b6:3a:c5:eb:ab:aa:b3:ad:14:70:92:3e:4d:88:9e:d4:5d:63:
         be:33:d5:20:18:77:65:6e:ab:3c:63:65:37:8a:16:13:66:24:
         9b:81:a5:c7:e9:0e:7f:9b:bb:fe:52:c2:ae:38:cd:0f:e1:e3:
         ad:50:1b:7f:6d:e5:4d:10:77:30:43:e4:81:a7:bd:73:5a:eb:
         99:4c:6f:f5:26:16:d4:33:a3:c8:81:8a:1c:40:5b:ea:e6:26:
         4a:47:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----