Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.mft
File:                     FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.mft (raw, json)
Hash identifier:          OaDxG6EbojJV2RdfV2JjCwcopszznGQZYQW/wwAY1ss=
Subject key identifier:   AE:53:D5:37:F4:F8:A7:38:0F:88:A1:F6:E1:EE:08:A1:0D:0B:C5:0F
Authority key identifier: FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
Certificate issuer:       /CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
Certificate serial:       73875B0BA75E9A4AAD405ACB030172E393CBA9AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.mft
Manifest number:          03CF
Signing time:             Mon 15 Apr 2024 00:30:01 +0000
Manifest this update:     Mon 15 Apr 2024 00:25:01 +0000
Manifest next update:     Tue 16 Apr 2024 01:01:01 +0000
Files and hashes:         1: FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.crl (hash: tzBcMteXoYCwJSyMez4iDkp0ozqEAfJt8AN20JbV7gs=)
                          2: 3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (hash: 5++cTVQYOihGM07YqBkN2an2Ga1UtSIliU2lUaux1F0=)
                          3: 323830343a3836303a3a2f33322d3332203d3e20323632343939.roa (hash: rozhBDMyrEDHSP0WSYTV32lvJ7bNBC8IcpBGm4lOLRE=)
                          4: 3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (hash: 47ud8IHc0hy3czK3WmeKmT90STF3w8c6og7l+bEJ3/I=)
                          5: 3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa (hash: Fz+4Ne2FWLN7PHU0PCA0W6dNMJY4M2uZH3k8KDStzis=)
                          6: 3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa (hash: Ft5f3E6UzjrgjClYtyjLWRGD1pqotEhjHXwhO3qXgSs=)
                          7: 3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa (hash: meRRZDMAHbhpMrMiRwjMvsq8PNOyhh5Zyo/rzfbvPmQ=)
                          8: 3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa (hash: CGhfhY0hQTZsEOlVP9M6Ug7nmMxgCPK1Sr+Y6y3ILpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:87:5b:0b:a7:5e:9a:4a:ad:40:5a:cb:03:01:72:e3:93:cb:a9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
        Validity
            Not Before: Apr 15 00:25:01 2024 GMT
            Not After : Apr 16 01:01:01 2024 GMT
        Subject: CN=AE53D537F4F8A7380F88A1F6E1EE08A10D0BC50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:ea:bf:01:5a:f7:ed:25:54:e7:50:f2:8b:
                    a6:1c:97:64:f3:39:5e:a0:16:88:fc:08:ac:61:e8:
                    28:3d:e9:ad:c3:ca:0d:5a:3b:66:3f:91:2a:f5:94:
                    8a:50:56:a3:65:df:03:d6:7c:61:5b:bf:4a:4a:07:
                    6e:c8:02:87:6b:de:d7:1c:b5:a9:cd:6d:f5:20:47:
                    e4:ef:71:12:b3:25:23:79:a1:ed:9e:e7:05:cc:e8:
                    6e:1d:a2:a0:a5:d8:bd:28:f7:b0:71:6a:5d:0c:b7:
                    69:e7:d1:aa:d9:b5:d4:23:6f:9a:d2:0d:dd:84:b1:
                    e0:81:0c:0d:63:ed:ec:a4:bd:bc:42:65:da:60:44:
                    b0:38:9f:28:e9:a8:dc:ae:d9:17:08:ef:96:23:aa:
                    c2:e9:e4:3f:e3:7b:d7:83:77:ef:a1:d1:94:ef:5b:
                    93:93:d0:29:8d:e8:04:3a:60:38:cc:1c:21:39:b2:
                    e2:e8:1d:03:52:32:4a:23:3e:3b:bc:78:0f:b2:6f:
                    25:dd:8e:15:4a:18:65:a3:ce:0b:b0:39:49:6d:b4:
                    fe:30:6d:9d:a8:84:11:88:6e:04:0f:06:74:58:ed:
                    b3:ca:cb:75:7b:01:9f:3c:db:0a:42:07:97:41:e7:
                    25:30:b0:a6:73:df:07:3c:d2:38:40:bd:df:c9:f4:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:53:D5:37:F4:F8:A7:38:0F:88:A1:F6:E1:EE:08:A1:0D:0B:C5:0F
            X509v3 Authority Key Identifier:
                keyid:FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:81:a9:84:18:0e:f3:ab:bf:52:85:27:de:92:cd:40:bb:17:
         cf:bf:4c:24:ea:35:6b:37:d6:4f:49:cd:2f:cd:13:6f:cb:c8:
         a1:b5:15:7f:6a:fe:de:c4:17:75:58:c3:7d:3d:e2:a0:21:af:
         be:9f:42:0b:61:d6:9b:7c:67:e1:89:55:63:fe:d1:fb:0c:ab:
         b7:a8:e6:86:ac:f5:e6:93:6c:b5:fc:5f:5b:12:ae:6b:ba:1b:
         69:d0:65:71:1c:9b:7d:2e:f3:8b:38:c5:75:b6:55:48:5c:f4:
         57:a3:67:07:06:79:b9:93:bc:09:e4:57:39:9b:65:17:fa:57:
         73:4f:57:be:c3:db:fc:c1:65:84:bc:85:4e:7c:3e:4c:ab:34:
         5f:e8:08:d6:f5:76:2f:c8:8e:84:5c:2a:d6:e1:52:b7:00:4a:
         c7:5c:75:9a:56:23:03:42:64:0c:ff:fc:e0:6c:3f:f1:04:e7:
         e3:40:9e:ac:a0:7c:b0:0e:58:e9:a9:ef:c1:5a:a9:58:9c:e5:
         6d:4e:b4:7b:89:1a:d9:4b:0b:d3:fd:76:0b:82:da:9b:2a:70:
         1a:14:72:57:79:d6:6e:81:f4:fa:0d:fd:20:3a:c7:18:aa:f2:
         0c:f5:07:21:00:29:ce:7b:a1:e4:73:6f:1d:6b:90:92:f0:e4:
         5b:be:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----