Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.mft
File:                     0EF712BCF8F56EDB537B38403CD033E8F6D632CD.mft (raw, json)
Hash identifier:          /8sMhgxmkaEmVv8fjYlv++B038JSCUMvpp5H6jU+bhk=
Subject key identifier:   1B:00:25:AF:C0:28:1A:E0:49:A7:85:E9:AA:A2:39:98:D0:E6:1C:B6
Authority key identifier: 0E:F7:12:BC:F8:F5:6E:DB:53:7B:38:40:3C:D0:33:E8:F6:D6:32:CD
Certificate issuer:       /CN=0EF712BCF8F56EDB537B38403CD033E8F6D632CD
Certificate serial:       587E5ACECDF6558F94D1D9813EB6E436039157F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.mft
Manifest number:          4B
Signing time:             Wed 25 Oct 2023 07:46:29 +0000
Manifest this update:     Wed 25 Oct 2023 07:41:29 +0000
Manifest next update:     Thu 26 Oct 2023 08:37:29 +0000
Files and hashes:         1: 323830343a316437343a3a2f33322d3333203d3e20323634333639.roa (hash: LPU/QzleSoRJpBzezogV1zHq/tyNwLaM0F9wnDHk1iM=)
                          2: 0EF712BCF8F56EDB537B38403CD033E8F6D632CD.crl (hash: CE3z3Il2xaatxVA+Ehiy/cjZWQm+KlpiAaZkDpjknzM=)
                          3: 3133312e3136312e36342e302f32322d3234203d3e20323634333639.roa (hash: 4+rctH5NK7naoEI3iikiq4BK0flzya2ymvwJ2VBtREo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7e:5a:ce:cd:f6:55:8f:94:d1:d9:81:3e:b6:e4:36:03:91:57:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF712BCF8F56EDB537B38403CD033E8F6D632CD
        Validity
            Not Before: Oct 25 07:41:29 2023 GMT
            Not After : Oct 26 08:37:29 2023 GMT
        Subject: CN=1B0025AFC0281AE049A785E9AAA23998D0E61CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:96:c3:b9:65:33:c7:40:4f:8e:c9:e1:d0:a8:
                    f2:a4:3b:4a:2b:db:75:79:c8:3c:30:46:31:d7:3a:
                    db:ad:d3:b0:50:55:97:fb:7b:b1:01:c4:69:6d:ff:
                    89:9a:44:70:35:ca:2c:7a:5d:4f:d6:88:62:5f:d6:
                    eb:b2:d0:d6:69:89:80:fc:dd:39:bf:86:f0:b6:03:
                    55:b1:b3:4c:5d:08:52:03:2a:cb:ea:84:91:7b:77:
                    04:a4:d2:d1:04:46:79:54:9f:2e:58:34:f5:08:b1:
                    37:12:14:f6:41:cf:ec:8a:e7:21:56:a4:04:cb:ff:
                    96:fa:07:46:82:ff:8b:dd:7b:8b:47:3a:a1:f5:ef:
                    49:e7:ff:3d:67:8f:54:24:d2:7c:8c:4f:6b:84:b7:
                    64:65:3e:3b:e4:07:a3:38:c0:df:9e:1c:1c:b8:a3:
                    c1:c8:95:5a:60:60:f4:ac:d6:f9:ef:a8:48:fa:19:
                    ba:6b:b5:09:63:70:55:9d:59:bf:a6:ea:3c:35:cc:
                    84:63:4f:af:4c:16:2f:71:60:e4:ce:d7:19:36:93:
                    fd:46:0e:0f:f2:4e:4b:f7:2f:6c:e7:71:f5:4b:5c:
                    53:8c:cb:c2:ac:26:cc:d6:98:2d:45:87:0d:c8:4f:
                    e2:05:7d:51:37:be:d3:92:4d:18:31:57:b5:fe:9a:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:25:AF:C0:28:1A:E0:49:A7:85:E9:AA:A2:39:98:D0:E6:1C:B6
            X509v3 Authority Key Identifier:
                keyid:0E:F7:12:BC:F8:F5:6E:DB:53:7B:38:40:3C:D0:33:E8:F6:D6:32:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HfvDcyp7ajDqUrh2zZ2q5GiJtLY7xhgKs8H46GXmDMuG/0/0EF712BCF8F56EDB537B38403CD033E8F6D632CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:7b:b1:5e:0b:bb:aa:92:0c:af:b5:63:d7:3f:1b:4a:3a:
         93:1f:6c:70:19:74:4b:d4:a4:7e:a5:24:e0:f4:f4:1b:be:44:
         60:bf:79:e4:56:ce:c8:6f:b0:76:02:38:01:e1:56:fe:0e:4e:
         81:de:1c:34:56:27:d0:ea:b0:a8:bb:fa:d9:88:ae:6c:de:9e:
         dc:dc:1a:c2:62:3c:88:fe:9b:4f:20:0f:5d:42:27:76:2d:46:
         40:9d:7e:00:ec:8d:ea:82:b2:da:b5:69:86:35:4d:c6:d4:c6:
         71:31:ff:c0:94:9c:84:48:63:54:3f:7b:18:62:f9:ed:b9:2f:
         41:7a:8a:64:be:49:c7:47:14:bf:9a:77:a9:6c:79:83:49:72:
         d1:52:b9:44:c3:66:6b:f3:27:e3:c3:54:6a:c1:f5:5c:60:6a:
         14:e3:55:e1:53:59:1a:99:ed:f4:35:a5:51:f9:02:50:ea:e3:
         d4:84:9f:78:9a:09:ac:50:34:52:ae:13:24:87:69:6e:7b:e5:
         4b:54:06:34:82:49:b9:06:dc:1d:93:7d:c8:85:2b:e2:cc:22:
         76:9a:ef:95:ba:39:8f:42:60:00:e1:88:93:3e:c2:75:79:d0:
         e1:04:68:11:1f:ce:3e:99:b5:b9:0f:ec:76:e2:c1:c9:c4:54:
         cc:aa:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----