Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.mft
File:                     057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.mft (raw, json)
Hash identifier:          A/kc3N++gPyqqMeyp9Uu5YPRGn/aSC8Wt7UztR3p9EQ=
Subject key identifier:   5F:84:18:72:D7:15:AF:5A:A2:5C:DC:44:93:8C:45:85:AD:EC:59:F6
Authority key identifier: 05:7E:8B:4D:96:A4:CE:7F:95:D7:F4:C2:70:B9:97:A5:E0:01:28:D9
Certificate issuer:       /CN=057E8B4D96A4CE7F95D7F4C270B997A5E00128D9
Certificate serial:       772B28C856E2F510C36BB3CF76027CA9C6D68B53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.mft
Manifest number:          016B
Signing time:             Thu 22 Jun 2023 11:21:14 +0000
Manifest this update:     Thu 22 Jun 2023 11:16:14 +0000
Manifest next update:     Fri 23 Jun 2023 14:03:14 +0000
Files and hashes:         1: 34352e3232392e3232382e302f32322d3234203d3e20323637313335.roa (hash: Y2c3EZTKlmGgR9WA/A3PdBAW0JgoBgjL2FjJ3Cm45o4=)
                          2: 057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.crl (hash: Dg+sW+JZXHiQoPLHfMSogL995eCUpGXZRNNeUrK4ego=)
                          3: 323830343a343861343a3a2f33322d3335203d3e20323637313335.roa (hash: En6+RLvoLJ+x+4xum7jDpF/1VPB5/7RGyOY7t/Y0ivY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2b:28:c8:56:e2:f5:10:c3:6b:b3:cf:76:02:7c:a9:c6:d6:8b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057E8B4D96A4CE7F95D7F4C270B997A5E00128D9
        Validity
            Not Before: Jun 22 11:16:14 2023 GMT
            Not After : Jun 23 14:03:14 2023 GMT
        Subject: CN=5F841872D715AF5AA25CDC44938C4585ADEC59F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:3b:c2:66:56:80:03:83:77:7e:43:3f:8e:
                    e3:a9:ba:52:82:f4:dd:3b:01:3e:8d:e6:b2:aa:1b:
                    ad:7d:6c:cc:32:67:f1:0d:ff:1e:61:54:db:91:5b:
                    3c:c5:0e:db:b1:f5:e6:21:c9:dd:d4:be:fb:ca:21:
                    09:21:1e:f7:b0:9d:49:19:d2:ca:70:18:28:1d:27:
                    f5:0e:9b:25:4d:c1:30:b8:1a:09:7e:d3:9f:d5:26:
                    5a:9d:74:e0:84:10:46:48:05:ea:f7:6b:ae:41:fe:
                    24:cd:30:61:45:45:38:25:6b:1d:4e:a0:47:1c:41:
                    97:3e:3a:91:2c:2c:dd:86:84:32:9b:7e:da:20:e7:
                    2e:ae:7e:bb:36:ee:b2:08:aa:28:db:c4:d1:b1:b7:
                    a7:89:14:e5:52:1d:4f:8c:db:be:97:77:e2:98:67:
                    62:7f:15:34:26:d4:1f:c2:d7:d9:a1:5e:ae:1c:ba:
                    e0:d6:20:e3:e2:d0:56:92:df:07:c0:2d:2d:10:49:
                    7f:9c:89:a5:7b:b5:31:e6:75:05:86:6e:18:3c:fc:
                    3b:d8:bd:ef:73:c8:35:48:7f:00:b2:d1:a5:a2:ef:
                    8b:25:8e:47:5a:06:5b:50:4c:de:1c:45:44:e1:d6:
                    57:fc:14:44:af:f7:04:ab:13:b2:2a:20:e6:c5:09:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:18:72:D7:15:AF:5A:A2:5C:DC:44:93:8C:45:85:AD:EC:59:F6
            X509v3 Authority Key Identifier:
                keyid:05:7E:8B:4D:96:A4:CE:7F:95:D7:F4:C2:70:B9:97:A5:E0:01:28:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4e:e2:53:52:b3:4e:25:e5:f1:1d:b7:4b:58:83:da:69:fd:
         d7:55:99:e6:9d:00:1c:24:e5:c5:e8:3e:a7:a3:5e:e0:82:5e:
         4c:98:bf:25:a6:90:28:92:de:da:52:f4:cc:c2:0b:72:86:13:
         5a:7a:15:d1:29:73:e8:8c:a8:17:83:11:c6:ec:87:f0:18:cf:
         0e:cc:bc:ef:c1:7f:b3:0d:59:dc:58:ca:21:cd:82:8d:47:89:
         73:da:ce:a4:12:b4:30:ae:49:e5:6b:c5:20:12:74:28:23:8e:
         b5:2e:70:87:1e:37:df:bf:bc:71:e0:cf:20:c5:2e:33:52:55:
         34:21:0c:b5:cd:0e:06:46:d4:aa:3e:b9:4e:77:67:92:a4:1d:
         ff:e7:de:84:f8:78:e1:da:3a:3b:72:6b:f8:5e:71:bf:59:01:
         b3:b1:3d:81:6a:98:5a:dc:28:ae:d3:7a:5c:14:e2:73:7d:e0:
         a2:6d:66:f9:ff:d9:0e:59:be:07:c0:c3:a5:73:13:fb:ae:ac:
         79:5c:4b:bd:fe:28:ed:9d:d2:09:bb:51:0d:43:57:1e:2f:d3:
         eb:84:b6:68:a5:9f:2c:cd:54:af:b6:c2:f4:b3:c1:9b:12:a8:
         6b:d8:2e:92:8c:15:c6:2d:95:f6:42:a5:27:42:12:53:23:d4:
         2c:c6:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----