Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.mft
File:                     F37E9B61AA932590B95C490C03E35AFF96B9B9CF.mft (raw, json)
Hash identifier:          nWwcUQqqnG3D8NY9Eg0S/X+QMNREOwoCfnPtQ8AxCDo=
Subject key identifier:   99:7E:F0:2B:68:A8:15:5F:05:0A:B1:21:8B:CA:CB:3E:1D:FE:0A:D1
Authority key identifier: F3:7E:9B:61:AA:93:25:90:B9:5C:49:0C:03:E3:5A:FF:96:B9:B9:CF
Certificate issuer:       /CN=F37E9B61AA932590B95C490C03E35AFF96B9B9CF
Certificate serial:       662877FDEDDDBDD1E0A155C329F1BBD957AF6B2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.mft
Manifest number:          A5
Signing time:             Tue 26 Sep 2023 01:56:25 +0000
Manifest this update:     Tue 26 Sep 2023 01:51:25 +0000
Manifest next update:     Wed 27 Sep 2023 05:17:25 +0000
Files and hashes:         1: 323830343a343365303a3a2f33322d3438203d3e20323637353936.roa (hash: kPag3NNfEH1SKeAnPc12oAbuM1s5iqdlLpQYD8sRgYI=)
                          2: F37E9B61AA932590B95C490C03E35AFF96B9B9CF.crl (hash: J4fQzyO4EV9CAqYfgxjXzfdQo7oz/zC763HFuL4zgUM=)
                          3: 34352e37312e32302e302f32322d3234203d3e20323637353936.roa (hash: vs1X8o7gpiPlNqJhDN/VcnJM+DrXQ5wSyjRYwbsllBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:28:77:fd:ed:dd:bd:d1:e0:a1:55:c3:29:f1:bb:d9:57:af:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F37E9B61AA932590B95C490C03E35AFF96B9B9CF
        Validity
            Not Before: Sep 26 01:51:25 2023 GMT
            Not After : Sep 27 05:17:25 2023 GMT
        Subject: CN=997EF02B68A8155F050AB1218BCACB3E1DFE0AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:38:1d:99:da:80:c0:c5:a1:89:88:a8:83:
                    e6:0e:76:cb:b4:9c:da:b2:ab:c2:37:2d:ae:8f:d4:
                    08:ac:34:b1:82:db:5e:e1:8d:e4:b3:e9:3a:ea:df:
                    34:6f:c1:2f:98:87:a7:42:44:8c:f8:a1:b0:67:02:
                    3e:98:2d:4d:41:24:60:5f:84:8e:95:47:03:98:0a:
                    7e:2c:ee:fc:9a:6b:03:ae:5a:8f:e2:c5:3f:b2:31:
                    55:80:ee:0c:b0:90:00:83:ea:39:17:fb:1e:fc:27:
                    08:2f:1c:92:a1:c4:82:24:20:e0:74:f1:d2:57:a3:
                    74:73:d6:fe:b7:61:f9:92:d1:db:50:9b:ad:5e:a5:
                    25:42:6a:a7:95:d7:f2:ec:24:d4:01:a9:7f:5e:97:
                    4c:9a:f6:ce:04:07:5e:fd:c1:bc:cb:64:6f:94:ab:
                    07:58:10:bf:68:bb:ed:25:e6:0d:e8:a2:53:f7:87:
                    dc:d5:4b:ca:fd:78:4a:ad:4a:47:ff:75:8c:f9:9f:
                    55:f5:51:a7:b1:a6:29:07:52:59:31:a7:6b:d1:fc:
                    36:e0:f9:55:6e:2b:49:f3:e8:3b:f7:c8:63:d1:62:
                    07:36:23:6e:1a:ab:9f:17:ce:9a:c8:65:83:89:73:
                    68:8a:71:d5:90:a2:0c:b5:bf:b0:dc:14:0f:57:6c:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:F0:2B:68:A8:15:5F:05:0A:B1:21:8B:CA:CB:3E:1D:FE:0A:D1
            X509v3 Authority Key Identifier:
                keyid:F3:7E:9B:61:AA:93:25:90:B9:5C:49:0C:03:E3:5A:FF:96:B9:B9:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:97:9b:48:8e:f6:43:21:70:53:5f:b4:6d:ea:d8:1f:2f:ce:
         d9:41:6b:96:b6:7d:40:d3:a8:ed:a3:af:93:b9:e0:a7:68:fa:
         cc:3b:17:8b:a7:95:94:23:ba:2d:a5:37:d2:b8:dc:9f:03:84:
         60:a4:f4:a9:31:6b:c6:cf:65:38:c3:9c:e5:82:9e:a8:fb:22:
         d8:5f:28:39:f7:39:82:cb:b3:43:a6:84:d4:8c:a8:60:4e:18:
         60:af:4b:8d:35:99:76:9b:9c:d0:44:18:dc:6c:85:1e:9f:33:
         52:79:fc:11:08:3b:c1:e7:d9:23:47:83:82:81:c6:47:68:fb:
         a6:29:65:c5:79:1a:ce:60:ad:95:da:ae:17:77:3b:0a:44:88:
         8a:bd:0e:e1:1d:32:81:a7:42:ab:2f:a2:ea:6d:c0:3c:38:b7:
         a5:da:69:74:7f:df:43:9f:7a:bf:ae:04:8e:49:62:e9:03:de:
         f0:64:52:77:68:31:39:c6:c5:71:4d:26:e1:44:ff:b8:85:01:
         49:59:ac:27:26:24:d1:46:50:d1:ce:97:62:5a:27:eb:f3:a5:
         ce:e8:15:7c:bd:f1:d7:2c:e0:08:0e:04:b7:4a:c6:c2:29:c9:
         63:0b:15:32:4c:3f:21:3b:c1:33:f3:ce:55:f2:bf:d0:93:be:
         ff:08:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----