Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/2003C9D58ED3700D234912FC6AF17519748E4D83.mft
File:                     2003C9D58ED3700D234912FC6AF17519748E4D83.mft (raw, json)
Hash identifier:          +cJn0pLAUNvoKz397+lUJ87+GwnN9TaH+mBMdv94FkM=
Subject key identifier:   A7:F5:0A:27:DC:EF:70:48:13:84:EF:66:0A:02:C9:A5:8F:4E:A7:81
Authority key identifier: 20:03:C9:D5:8E:D3:70:0D:23:49:12:FC:6A:F1:75:19:74:8E:4D:83
Certificate issuer:       /CN=2003C9D58ED3700D234912FC6AF17519748E4D83
Certificate serial:       229728BF10CC0D60FB02EA7B76ABCE1D735EB7AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2003C9D58ED3700D234912FC6AF17519748E4D83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/2003C9D58ED3700D234912FC6AF17519748E4D83.mft
Manifest number:          25
Signing time:             Wed 10 May 2023 02:06:14 +0000
Manifest this update:     Wed 10 May 2023 02:01:14 +0000
Manifest next update:     Thu 11 May 2023 04:29:14 +0000
Files and hashes:         1: 2003C9D58ED3700D234912FC6AF17519748E4D83.crl (hash: EOUj69+bIoqMisvOfRMIg/FXPWh5Rq+UoY2bmbRm5M4=)
                          2: 323830343a376130383a3a2f33322d3334203d3e20323731333433.roa (hash: bODMgYag9lBnZdnM9NHhW/6sgrz/xSkHqEFoi+jjeMg=)
                          3: 3230302e33392e33362e302f32322d3234203d3e20323731333433.roa (hash: R0wTJozNeY3n36S6jcZoHWMRL76Mx9iFQW9/E9mKB9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:97:28:bf:10:cc:0d:60:fb:02:ea:7b:76:ab:ce:1d:73:5e:b7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2003C9D58ED3700D234912FC6AF17519748E4D83
        Validity
            Not Before: May 10 02:01:14 2023 GMT
            Not After : May 11 04:29:14 2023 GMT
        Subject: CN=A7F50A27DCEF70481384EF660A02C9A58F4EA781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:74:5b:6b:47:e4:22:0d:e6:d9:7e:5c:78:
                    b5:71:3e:e1:06:89:a0:cf:47:16:e8:63:9b:d7:64:
                    b0:5b:68:b3:8e:ec:5d:b0:a1:dc:da:67:10:00:c3:
                    c6:27:b0:db:a6:c6:f5:66:42:44:51:c6:b8:ce:59:
                    18:dd:09:31:26:9c:bc:43:6f:06:59:13:d8:3b:6c:
                    b7:f6:5d:d6:aa:d9:4b:0a:9c:f7:d0:c2:91:73:8d:
                    24:5b:d3:16:a9:70:8c:29:bb:56:67:76:b4:b4:7d:
                    52:fc:63:75:33:b4:39:d2:9f:29:95:a2:92:4c:34:
                    fa:27:8c:24:70:42:03:c6:35:dd:ab:55:12:a6:3c:
                    1e:4a:41:41:35:7e:eb:24:e8:2b:3c:d3:84:2f:7e:
                    44:e4:cd:11:0f:fd:53:46:f2:3f:bb:3b:9f:29:3a:
                    0e:a5:e4:46:80:37:02:09:da:22:2f:85:5d:fc:b1:
                    27:da:a1:cf:62:5b:31:e1:d5:05:d6:3a:22:12:56:
                    18:34:1e:1c:e0:2c:3c:bd:3b:e6:ce:68:63:ba:db:
                    28:00:c6:a0:91:cc:37:c9:73:f8:44:a6:e3:99:17:
                    43:ff:fb:ee:ad:43:55:df:9e:c9:90:2a:0d:ba:4c:
                    66:a1:9d:b7:98:88:4a:0f:e3:e4:3e:6a:e0:66:77:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:0A:27:DC:EF:70:48:13:84:EF:66:0A:02:C9:A5:8F:4E:A7:81
            X509v3 Authority Key Identifier:
                keyid:20:03:C9:D5:8E:D3:70:0D:23:49:12:FC:6A:F1:75:19:74:8E:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/2003C9D58ED3700D234912FC6AF17519748E4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2003C9D58ED3700D234912FC6AF17519748E4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/2003C9D58ED3700D234912FC6AF17519748E4D83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:00:59:46:c0:13:ea:d0:09:06:c8:c8:fb:58:c2:97:fd:
         62:76:a0:b8:5a:6f:19:61:b3:58:2c:30:7b:37:35:8b:cc:73:
         d5:19:97:82:2d:30:0b:ff:d9:34:3b:f6:eb:7d:b5:bf:ce:ba:
         b5:2d:e8:ac:fe:df:e1:ae:b0:03:2d:fb:be:f4:ee:2a:6b:72:
         af:99:3d:03:e1:73:fc:bc:8c:ea:10:3d:d0:3e:c0:b5:a5:08:
         58:be:fc:9a:d1:9c:74:85:95:0e:cf:e2:2b:97:a9:97:28:00:
         ff:51:cf:9f:1b:76:e0:45:45:2c:cc:1e:46:aa:33:0a:a0:2a:
         ab:f8:c4:db:42:d9:28:cd:8a:b7:02:29:74:65:fd:d4:2b:ed:
         61:8b:1e:4d:48:3c:46:99:14:25:66:70:fa:4c:89:3f:78:17:
         ce:fe:9c:d5:d3:03:f2:db:01:a4:20:b4:f0:e8:b9:7e:6d:90:
         f4:10:58:21:0a:d2:81:52:a3:bf:4d:57:47:2d:df:b8:fe:34:
         b5:76:fa:87:45:7b:ab:88:6e:23:76:1f:8c:61:7c:67:76:b3:
         34:33:f1:fe:d9:91:ec:dc:37:e7:a6:52:04:12:f5:07:61:67:
         30:7f:3b:08:02:cf:11:5e:54:5d:69:e2:6e:6d:9d:7b:1e:8c:
         1b:e8:ec:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIpcovxDMDWD7Aup7dqvOHXNet6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAwM0M5RDU4RUQzNzAwRDIzNDkxMkZDNkFGMTc1MTk3
NDhFNEQ4MzAeFw0yMzA1MTAwMjAxMTRaFw0yMzA1MTEwNDI5MTRaMDMxMTAvBgNV
BAMTKEE3RjUwQTI3RENFRjcwNDgxMzg0RUY2NjBBMDJDOUE1OEY0RUE3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMnRba0fkIg3m2X5ceLVxPuEG
iaDPRxboY5vXZLBbaLOO7F2wodzaZxAAw8YnsNumxvVmQkRRxrjOWRjdCTEmnLxD
bwZZE9g7bLf2Xdaq2UsKnPfQwpFzjSRb0xapcIwpu1ZndrS0fVL8Y3UztDnSnymV
opJMNPonjCRwQgPGNd2rVRKmPB5KQUE1fusk6Cs804QvfkTkzREP/VNG8j+7O58p
Og6l5EaANwIJ2iIvhV38sSfaoc9iWzHh1QXWOiISVhg0HhzgLDy9O+bOaGO62ygA
xqCRzDfJc/hEpuOZF0P/++6tQ1XfnsmQKg26TGahnbeYiEoP4+Q+auBmd4BFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUp/UKJ9zvcEgThO9mCgLJpY9Op4EwHwYDVR0j
BBgwFoAUIAPJ1Y7TcA0jSRL8avF1GXSOTYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0
NUsvMC8yMDAzQzlENThFRDM3MDBEMjM0OTEyRkM2QUYxNzUxOTc0OEU0RDgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwMDNDOUQ1OEVEMzcwMEQy
MzQ5MTJGQzZBRjE3NTE5NzQ4RTREODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGVLOFBubldWeDk0aWRkbzNyYkZIakFQMkJvSnJWWU5oa0JURFhWbkE0NUsvMC8y
MDAzQzlENThFRDM3MDBEMjM0OTEyRkM2QUYxNzUxOTc0OEU0RDgzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADlYAWUbAE+rQCQbIyPtYwpf9YnaguFpvGWGzWCwwezc1i8xz1RmXgi0wC//Z
NDv26321v866tS3orP7f4a6wAy37vvTuKmtyr5k9A+Fz/LyM6hA90D7AtaUIWL78
mtGcdIWVDs/iK5eplygA/1HPnxt24EVFLMweRqozCqAqq/jE20LZKM2KtwIpdGX9
1CvtYYseTUg8RpkUJWZw+kyJP3gXzv6c1dMD8tsBpCC08Oi5fm2Q9BBYIQrSgVKj
v01XRy3fuP40tXb6h0V7q4huI3YfjGF8Z3azNDPx/tmR7Nw356ZSBBL1B2FnMH87
CALPEV5UXWnibm2dex6MG+jsjA==
-----END CERTIFICATE-----