Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/93118C776E93ED7C125E41AF25BE5F47129C1F6F.mft
File:                     93118C776E93ED7C125E41AF25BE5F47129C1F6F.mft (raw, json)
Hash identifier:          oudeIffLHf3WJ1052/JtQA1IhXRBvyd+niSLNzNSLXM=
Subject key identifier:   0F:4D:08:FC:2C:F7:6B:DC:BA:49:82:47:7F:C9:B3:90:5E:A6:6A:82
Authority key identifier: 93:11:8C:77:6E:93:ED:7C:12:5E:41:AF:25:BE:5F:47:12:9C:1F:6F
Certificate issuer:       /CN=93118C776E93ED7C125E41AF25BE5F47129C1F6F
Certificate serial:       280312D5560A16E3B1CC3FDF67C01EA8C60A097D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93118C776E93ED7C125E41AF25BE5F47129C1F6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/93118C776E93ED7C125E41AF25BE5F47129C1F6F.mft
Manifest number:          1E
Signing time:             Tue 11 Apr 2023 12:37:13 +0000
Manifest this update:     Tue 11 Apr 2023 12:32:13 +0000
Manifest next update:     Wed 12 Apr 2023 12:43:13 +0000
Files and hashes:         1: 3137372e38372e3234382e302f32332d3332203d3e20323731313535.roa (hash: 3+T+zpUmqviS+2y7KGwPvM8U1C5uFjpWH3dkAfBWIks=)
                          2: 93118C776E93ED7C125E41AF25BE5F47129C1F6F.crl (hash: YASNzzamybSdxIDXcP3LNOjBWU2XfzaxDsIzmT06ZYw=)
                          3: 323830343a373761303a3a2f33322d313238203d3e20323731313535.roa (hash: rtvaOALdeznG8eFLrh8FgD4SgjUPm49W492VofiYNjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:03:12:d5:56:0a:16:e3:b1:cc:3f:df:67:c0:1e:a8:c6:0a:09:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93118C776E93ED7C125E41AF25BE5F47129C1F6F
        Validity
            Not Before: Apr 11 12:32:13 2023 GMT
            Not After : Apr 12 12:43:13 2023 GMT
        Subject: CN=0F4D08FC2CF76BDCBA4982477FC9B3905EA66A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:7f:a3:c3:8a:d2:a1:56:4a:08:e4:06:02:
                    8c:9b:4a:5f:d6:96:bf:60:d3:5e:e2:98:c7:b6:c3:
                    e5:07:03:da:c0:1c:9b:bb:5a:c1:1f:01:d8:9e:e1:
                    1d:a6:e5:ba:6a:e4:6a:83:f7:53:06:57:a3:10:0a:
                    f7:e0:54:85:67:19:65:fb:06:51:11:7e:2e:ec:f1:
                    e9:da:a3:36:da:87:01:64:95:58:d7:a0:3d:f9:3b:
                    2d:67:b1:b3:4b:6d:99:b3:37:ef:b9:58:23:26:c9:
                    f7:53:50:05:78:98:a7:f1:e9:9b:c2:dc:c9:34:b3:
                    64:9b:3f:d6:39:d8:73:c3:92:cf:54:3c:c1:06:09:
                    cc:22:21:47:fe:9d:f4:f1:8f:d0:b2:51:77:ad:7a:
                    cf:fe:18:c0:f1:c8:a5:65:da:ab:67:12:fe:3d:19:
                    ae:0f:cb:21:ff:31:36:0d:44:03:67:71:a5:fa:4b:
                    95:0d:27:07:d5:9e:42:4b:c7:68:e2:2a:ee:65:a2:
                    d1:ed:fc:79:68:ba:7e:d5:b0:5e:a2:f5:a9:5c:4c:
                    27:27:e6:92:bf:3a:dd:13:b7:b5:46:28:9d:c0:df:
                    ed:4d:bf:43:2f:67:86:fe:49:25:d0:3e:bd:85:60:
                    96:a2:7b:ab:eb:d0:8f:0c:12:e6:66:a4:0a:cf:98:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4D:08:FC:2C:F7:6B:DC:BA:49:82:47:7F:C9:B3:90:5E:A6:6A:82
            X509v3 Authority Key Identifier:
                keyid:93:11:8C:77:6E:93:ED:7C:12:5E:41:AF:25:BE:5F:47:12:9C:1F:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/93118C776E93ED7C125E41AF25BE5F47129C1F6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93118C776E93ED7C125E41AF25BE5F47129C1F6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/iQMcW3n7AW99XdjWkQiMSV4UYgBnRZZzjbovJ42zmf6/0/93118C776E93ED7C125E41AF25BE5F47129C1F6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a0:b1:c8:37:50:9b:1a:ec:3c:82:97:d0:6f:24:2f:0a:ee:
         2a:d4:7c:5b:47:82:9f:36:15:ae:1e:16:71:3e:a2:b4:23:15:
         2d:6f:f6:2e:50:1b:eb:d9:6d:15:26:71:67:ad:ad:19:1f:4a:
         31:16:eb:b4:fc:62:4d:17:cc:4b:81:42:f6:23:c1:93:a6:c9:
         b4:07:e7:47:77:aa:7d:74:a0:6b:29:35:de:43:3e:b5:7f:b2:
         d5:77:50:d7:a4:98:b1:74:27:57:94:58:e8:85:55:53:14:ad:
         a1:c4:d1:3f:5e:03:94:d2:63:47:16:59:ee:82:53:f1:ef:74:
         52:d5:42:cb:4a:ac:b7:7d:af:f9:4a:ac:b1:54:1d:42:e6:7c:
         ff:66:74:20:b7:9a:a6:4e:01:43:74:7a:37:9d:59:b1:b5:db:
         a5:63:ee:5a:f0:78:f4:82:3b:25:de:5a:34:41:1d:63:5f:64:
         2a:92:b5:90:4e:74:09:f0:98:6a:6e:41:d9:08:ec:b3:03:d3:
         15:74:48:ec:bf:7d:45:04:f3:95:32:76:a4:6c:0d:11:72:c5:
         43:09:3d:13:be:83:fb:62:b9:d5:17:47:10:53:38:30:c4:04:
         2a:8a:c2:f3:e2:ea:c2:74:88:8b:3d:ad:85:4f:24:53:31:66:
         de:22:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----