Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.mft
File:                     8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.mft (raw, json)
Hash identifier:          eVOot9GJ19qDdtIbW6lt5Qj2D0bsMW0bZUHIR9VaKF0=
Subject key identifier:   5E:20:26:B7:8B:E0:28:7D:BF:B6:54:6E:10:47:2B:E0:D2:CC:F8:D6
Authority key identifier: 8C:4B:B5:E5:1A:22:64:D0:EE:E9:A0:E7:E5:9C:EA:20:8B:0A:2F:FE
Certificate issuer:       /CN=8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE
Certificate serial:       403488DAEDD1966CCB8C4497B59F90B127F39832
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.mft
Manifest number:          2D
Signing time:             Sat 18 Mar 2023 00:23:50 +0000
Manifest this update:     Sat 18 Mar 2023 00:18:50 +0000
Manifest next update:     Sun 19 Mar 2023 02:50:50 +0000
Files and hashes:         1: 8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.crl (hash: PXXEZyyiS8pCa21CY2hogTdHnFcHRIvcec1cbbnuZWI=)
                          2: 34352e372e3134382e302f32322d3234203d3e20323636353836.roa (hash: 2zvHqLeh1JW9ZW+QH5F60hC/SG8/Uypw6HjDthsZNVc=)
                          3: 323830343a336534633a3a2f33322d3438203d3e20323636353836.roa (hash: 0rxwUtkQXEQz8PS+vpk+d6WSQrO9fSTmWoPItSfLzX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:34:88:da:ed:d1:96:6c:cb:8c:44:97:b5:9f:90:b1:27:f3:98:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE
        Validity
            Not Before: Mar 18 00:18:50 2023 GMT
            Not After : Mar 19 02:50:50 2023 GMT
        Subject: CN=5E2026B78BE0287DBFB6546E10472BE0D2CCF8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:d6:0b:85:be:95:3b:a7:0b:d8:57:9b:e4:
                    3b:b6:58:47:68:d3:1a:eb:80:51:bc:d3:83:42:ac:
                    6b:a5:7b:7b:25:de:0c:fd:32:d1:fb:85:72:34:56:
                    6a:8b:c4:27:b9:8e:14:4b:8c:ed:4c:9f:43:da:b1:
                    ad:88:4f:64:19:08:d0:00:ae:77:bc:04:e3:9c:aa:
                    01:59:5f:43:d4:3c:3f:e5:69:b5:91:47:9a:8d:5c:
                    9b:33:6e:c0:76:2d:4c:22:49:3c:78:0f:09:dd:e6:
                    ba:85:6a:be:50:63:7e:0f:cc:59:71:c4:a7:0a:81:
                    dc:54:48:65:29:c2:18:a4:fb:c9:7f:76:8e:b7:58:
                    6f:00:3b:09:8f:83:10:57:d5:19:1e:ea:bf:f1:59:
                    fa:d7:41:05:ed:4f:36:85:8e:b0:43:e8:25:27:cb:
                    46:a8:7c:65:b7:8f:20:3a:09:d0:fe:46:28:3e:f0:
                    2a:7b:02:5b:b2:55:72:ec:bb:5f:8b:fe:ea:5f:58:
                    be:6a:e3:eb:54:ef:0a:d2:7e:a6:8c:c5:b0:b1:dc:
                    80:08:76:18:81:5c:04:45:ec:3b:a3:45:8e:cd:af:
                    5a:92:69:af:cf:1b:7a:41:43:30:79:f3:d5:26:d3:
                    06:b4:62:fa:19:89:67:c7:a3:6d:58:5b:1a:90:48:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:20:26:B7:8B:E0:28:7D:BF:B6:54:6E:10:47:2B:E0:D2:CC:F8:D6
            X509v3 Authority Key Identifier:
                keyid:8C:4B:B5:E5:1A:22:64:D0:EE:E9:A0:E7:E5:9C:EA:20:8B:0A:2F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:aa:ea:f7:85:57:e0:40:86:79:53:48:1a:96:b0:b6:eb:5c:
         42:a2:53:9e:ac:64:0e:85:ab:af:a2:0c:0c:8d:dc:5f:8d:a9:
         2a:f0:55:e3:b0:16:d3:5f:ea:b8:cb:70:87:9e:a5:48:51:df:
         03:69:44:cf:ee:99:02:1e:e6:00:85:97:5c:f5:84:6e:7f:26:
         6a:ab:fb:3b:51:84:96:63:ab:63:87:4d:64:09:84:12:eb:5c:
         01:1d:f6:a1:5c:e9:29:d9:c2:c7:0d:53:b6:5c:e5:52:91:24:
         0e:7a:4c:6c:2d:db:59:ce:23:64:d0:41:09:28:6a:0f:cc:e2:
         3b:e4:93:56:11:bf:55:76:9a:1e:95:f7:a3:5c:d3:6e:9e:aa:
         2c:35:d5:05:25:a9:9c:b6:ba:a0:80:7c:72:49:31:50:26:bd:
         4d:8e:27:fe:d1:38:01:db:4a:e4:3b:a2:09:48:cc:39:86:33:
         e2:bb:a2:9c:9a:3a:73:0b:7b:57:e4:77:bb:d8:be:57:2e:4f:
         b6:a6:6e:9e:7e:52:4f:0f:90:c5:95:49:9d:99:b8:e8:d6:aa:
         8a:f9:5d:85:18:17:b6:ce:2f:04:b4:4f:ff:10:40:a0:e5:4d:
         5c:bb:8b:58:c4:5d:e8:39:0d:0e:78:db:84:52:08:06:34:f6:
         6a:a7:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----