Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.mft
File:                     A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.mft (raw, json)
Hash identifier:          Xlbep1AlPWj122FABWQlBpF1tY62ELVFX0ZPp397/vE=
Subject key identifier:   65:4E:F3:6A:0C:2D:95:F5:38:4A:89:4A:A3:54:75:93:EF:4A:FA:08
Authority key identifier: A4:73:C4:66:E1:D4:7D:B8:B1:06:38:5E:2F:17:3F:CB:2C:F1:EB:DE
Certificate issuer:       /CN=A473C466E1D47DB8B106385E2F173FCB2CF1EBDE
Certificate serial:       64C5FDE53CB9D88EEFC9FC38EF8B8BA1A0E71F2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.mft
Manifest number:          76
Signing time:             Tue 04 Jul 2023 10:43:38 +0000
Manifest this update:     Tue 04 Jul 2023 10:38:38 +0000
Manifest next update:     Wed 05 Jul 2023 11:09:38 +0000
Files and hashes:         1: 323830343a356131303a3a2f33322d3334203d3e20323638373436.roa (hash: 0yrCEwW7tEqij+rbGsuoWBK6TmuuHrMU0AlW6ikYURE=)
                          2: A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.crl (hash: JF8YCNXPS+eP1eIOHMe/BcynJn+q8UhWbbUiXXxopnE=)
                          3: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (hash: KbT4WqL2nExskJKLxH7+IF3ZwQEkPV+67UFzLdX/5+Q=)
                          4: 34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (hash: rZGn/9Sth/YnwWs6d28dEPSrZNpA2D+Ll5gx/yYRA6A=)
                          5: 34352e3137312e3232382e302f32332d3234203d3e20323638373436.roa (hash: wuxqt4KB+eOuS+QhvdoZJclTpXKYUevA6UBvH860R8A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c5:fd:e5:3c:b9:d8:8e:ef:c9:fc:38:ef:8b:8b:a1:a0:e7:1f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A473C466E1D47DB8B106385E2F173FCB2CF1EBDE
        Validity
            Not Before: Jul  4 10:38:38 2023 GMT
            Not After : Jul  5 11:09:38 2023 GMT
        Subject: CN=654EF36A0C2D95F5384A894AA3547593EF4AFA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:83:bf:ae:20:a8:6a:25:7b:76:7a:11:09:
                    89:fe:0b:6b:d9:56:e1:6c:0a:22:0e:66:fe:8b:14:
                    90:32:39:48:dd:c9:d1:6f:45:aa:24:cb:92:96:6f:
                    0a:f7:c8:34:ed:fe:d1:e0:30:f8:53:0f:dd:64:48:
                    5b:dc:b9:2f:38:d3:90:c7:99:0f:79:54:0c:12:d8:
                    13:0c:ba:12:1a:a8:c2:09:0d:f4:20:06:e2:2f:98:
                    c1:a5:32:10:4c:53:28:f0:37:81:c3:40:23:a4:94:
                    b3:50:72:d7:86:9e:cf:27:e1:8e:0c:53:3b:c0:53:
                    c1:d0:61:10:dc:c7:ce:c2:1e:48:75:c1:a5:5f:d5:
                    7b:bf:89:b5:1f:ef:4c:12:4d:4e:fc:f3:c3:72:1e:
                    a5:cf:65:a9:b3:63:4b:3d:3f:e5:80:2a:23:18:00:
                    b7:00:12:94:5a:a0:77:1d:ca:35:40:8f:78:1a:ce:
                    e6:a8:14:1b:b4:09:f6:61:3a:97:e6:7a:7d:9f:51:
                    46:01:5c:ba:e7:f1:7b:da:9c:60:e7:dc:98:cb:ce:
                    1d:a9:87:b2:72:bf:f5:48:4e:da:2b:99:8b:2c:31:
                    0f:3b:48:36:e0:30:89:e6:63:4d:dd:b6:5f:b8:ac:
                    1c:5b:7d:47:6c:4f:79:43:64:94:60:e6:de:de:27:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4E:F3:6A:0C:2D:95:F5:38:4A:89:4A:A3:54:75:93:EF:4A:FA:08
            X509v3 Authority Key Identifier:
                keyid:A4:73:C4:66:E1:D4:7D:B8:B1:06:38:5E:2F:17:3F:CB:2C:F1:EB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/A473C466E1D47DB8B106385E2F173FCB2CF1EBDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:2f:c2:58:43:c5:e8:31:55:23:53:f5:eb:5b:2e:68:c1:
         5e:ae:2a:e3:4e:52:d7:29:fb:89:02:b0:8d:c2:a1:f7:bb:c0:
         3b:0a:cc:95:1d:33:d0:fe:52:5d:0f:31:31:ce:cc:1b:7d:6b:
         4c:f7:fc:a8:9e:db:8d:ac:f4:55:5b:43:d5:ff:d1:2c:57:41:
         b7:5c:03:8e:2b:e5:f0:52:13:49:57:b1:2c:3b:49:22:c2:c2:
         e5:41:09:35:bf:8e:2b:72:e9:81:66:c8:8f:50:a7:5d:b2:cc:
         62:12:38:b1:86:59:1b:d6:7b:24:2c:ce:0b:5c:e3:d2:4f:8f:
         3c:67:59:9f:9a:54:6c:c5:63:20:56:5f:dc:07:fa:48:ea:b5:
         64:0a:82:e6:7c:fd:04:9b:51:9e:d6:78:3e:91:3d:c6:b0:54:
         76:fd:04:79:0e:3a:e8:71:15:40:03:a7:7f:22:a4:96:78:b9:
         3e:5e:b1:86:e9:8d:c6:12:95:68:95:d6:a0:b1:ab:2e:bb:8e:
         7e:6e:31:e3:42:24:a6:1e:41:c9:a6:e0:ab:f3:a3:ba:a0:d2:
         b4:85:a7:1f:32:56:30:07:05:b7:1d:c9:7f:26:8b:2e:90:f5:
         ec:6b:fd:9b:77:e8:19:47:04:3e:b7:1a:d2:7f:21:8d:f7:77:
         ae:7a:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----