Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.mft
File:                     FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.mft (raw, json)
Hash identifier:          Ou3rKuzP5iYp7H/PtFcOyNuJs4+EDCLA9APA1cYZzSk=
Subject key identifier:   DB:8C:8C:CC:57:C5:6E:D7:67:45:36:CA:6B:9C:AD:E4:57:D0:80:E4
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       641F640D4D331D338A7630C91669D8CD6E3812A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.mft
Manifest number:          03F9
Signing time:             Mon 15 Apr 2024 03:39:12 +0000
Manifest this update:     Mon 15 Apr 2024 03:34:12 +0000
Manifest next update:     Tue 16 Apr 2024 04:22:12 +0000
Files and hashes:         1: 34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa (hash: WUh4BJMW9IdXOlB1EhUu+GrpxPmL+McezaD+9BpnXcI=)
                          2: 34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa (hash: CbnmZ6yWvxVz1TeAy8I0cVUYS9cT6aSPT5WtGWKXhuE=)
                          3: 34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa (hash: ig8Sv+0ocs6ouaDvzzgWHDyP3tdfE9RJQp09r69O5J4=)
                          4: 34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa (hash: 3BKkQ6WMQSJQ8bC2zoqv9kQiNoqPWJAgk5GuXDp9OGo=)
                          5: FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl (hash: qE00t3+kvoZfafo4nNSuYiRI9jIZWRXtlHThgpos8HQ=)
                          6: 323830343a356633383a3a2f33322d3332203d3e20323639303834.roa (hash: Zc93LvrPkPenvIGt5KogJr+3dkhbArizSAPWow2vw9E=)
                          7: 34352e3137392e3132322e302f32342d3234203d3e20323639303834.roa (hash: 1o+VJ7zEx58Uc6UWOcd6fnWe16s/fhzbP5XnD5YX12Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1f:64:0d:4d:33:1d:33:8a:76:30:c9:16:69:d8:cd:6e:38:12:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: Apr 15 03:34:12 2024 GMT
            Not After : Apr 16 04:22:12 2024 GMT
        Subject: CN=DB8C8CCC57C56ED7674536CA6B9CADE457D080E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:42:12:14:00:1f:55:ef:fb:7b:95:95:26:06:
                    48:d2:d9:0f:fb:46:df:53:32:27:e8:19:a1:59:79:
                    bf:89:ce:b1:fa:1c:7a:ab:dc:70:65:90:7f:38:44:
                    66:49:e8:d7:aa:f6:f1:df:37:62:3e:81:60:02:25:
                    df:05:06:1d:4c:e1:ac:7c:23:dd:f1:6d:b0:96:94:
                    bc:eb:e2:b8:d9:1c:e1:e4:06:6a:b4:1e:3c:92:54:
                    5c:7c:7a:90:f7:56:97:ff:5e:d5:7f:c2:19:3d:1b:
                    22:c3:bf:d5:69:6e:de:65:19:1d:5e:89:0a:23:69:
                    81:9f:b0:c8:70:08:1e:fc:e6:d6:b2:74:dd:21:95:
                    c4:01:a8:22:a3:f5:b4:3a:7e:1b:d5:75:9f:bf:60:
                    64:0e:82:8a:2a:8e:43:04:e9:e4:8c:45:ab:fd:9b:
                    81:9e:8b:b1:2f:d7:18:54:6a:a2:90:ec:b7:ce:31:
                    59:43:bd:77:40:31:69:00:42:72:9b:da:34:2d:79:
                    a8:b5:0d:9b:b2:17:aa:3a:6b:f9:d7:ef:ee:fc:1d:
                    a5:93:39:8f:21:1d:2a:99:3d:1b:e7:03:8d:a8:7b:
                    7e:37:bd:e7:61:df:3c:0a:fc:62:e4:86:0c:30:97:
                    ac:ef:7f:7c:8d:d7:68:94:5d:c0:c2:d7:23:73:a1:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:8C:CC:57:C5:6E:D7:67:45:36:CA:6B:9C:AD:E4:57:D0:80:E4
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:a5:d5:53:c3:cd:ed:fa:70:56:fb:46:fd:97:4f:40:3d:
         c1:66:63:2a:d1:a1:54:10:6a:2b:44:69:5e:63:0d:7a:36:27:
         48:b6:4e:34:83:66:b9:04:e9:78:ef:d3:44:a7:66:30:ea:09:
         52:fb:ea:b7:94:4f:68:46:e9:b6:fe:4d:62:35:0f:11:69:f1:
         c0:84:29:86:94:8a:a2:2d:2c:97:52:12:88:74:28:7f:38:57:
         cf:d6:1b:0f:58:dd:36:cb:81:23:10:c2:da:05:09:50:78:c0:
         e7:7d:91:26:f0:c2:fe:9b:d6:7b:2d:1f:22:26:ae:11:87:da:
         bc:28:df:e7:54:41:c9:8e:d2:e5:1e:28:43:c3:71:e9:36:f6:
         71:73:be:9c:e4:17:3b:ff:11:41:f4:92:1c:cb:72:66:b6:86:
         21:89:0b:34:f3:14:fa:3e:78:cb:66:1c:e1:59:49:f8:bd:e7:
         b9:80:00:88:6d:b3:5a:53:3c:90:3a:0d:0a:a1:b5:65:bf:cb:
         c6:5a:62:e4:f7:95:45:76:7d:c8:9c:c4:45:bc:e4:53:40:fa:
         ae:59:a6:8d:27:dc:d6:64:ee:60:dc:41:6c:53:48:75:48:c1:
         b7:bd:db:e9:39:7a:4f:d9:09:f5:48:fd:4c:e5:38:c6:b2:f4:
         66:c2:5d:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZB9kDU0zHTOKdjDJFmnYzW44EqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5MUFCRTJCOUM0NkUwNjUwQjk4N0NBOTM2NkNGMDg0
Q0VBQUE5NjAeFw0yNDA0MTUwMzM0MTJaFw0yNDA0MTYwNDIyMTJaMDMxMTAvBgNV
BAMTKERCOEM4Q0NDNTdDNTZFRDc2NzQ1MzZDQTZCOUNBREU0NTdEMDgwRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQhIUAB9V7/t7lZUmBkjS2Q/7
Rt9TMifoGaFZeb+JzrH6HHqr3HBlkH84RGZJ6Neq9vHfN2I+gWACJd8FBh1M4ax8
I93xbbCWlLzr4rjZHOHkBmq0HjySVFx8epD3Vpf/XtV/whk9GyLDv9Vpbt5lGR1e
iQojaYGfsMhwCB785taydN0hlcQBqCKj9bQ6fhvVdZ+/YGQOgooqjkME6eSMRav9
m4Gei7Ev1xhUaqKQ7LfOMVlDvXdAMWkAQnKb2jQteai1DZuyF6o6a/nX7+78HaWT
OY8hHSqZPRvnA42oe343vedh3zwK/GLkhgwwl6zvf3yN12iUXcDC1yNzoVhzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU24yMzFfFbtdnRTbKa5yt5FfQgOQwHwYDVR0j
BBgwFoAU/JGr4rnEbgZQuYfKk2bPCEzqqpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhVWG9NRlA3NmEzYjNUR3RWSFZLUEQ2QTdoTmpXUUcxcURnOUxOMVJS
b3AvMC9GQzkxQUJFMkI5QzQ2RTA2NTBCOTg3Q0E5MzY2Q0YwODRDRUFBQTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDOTFBQkUyQjlDNDZFMDY1
MEI5ODdDQTkzNjZDRjA4NENFQUFBOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhVWG9NRlA3NmEzYjNUR3RWSFZLUEQ2QTdoTmpXUUcxcURnOUxOMVJSb3AvMC9G
QzkxQUJFMkI5QzQ2RTA2NTBCOTg3Q0E5MzY2Q0YwODRDRUFBQTk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMX2l1VPDze36cFb7Rv2XT0A9wWZjKtGhVBBqK0RpXmMNejYnSLZONINmuQTp
eO/TRKdmMOoJUvvqt5RPaEbptv5NYjUPEWnxwIQphpSKoi0sl1ISiHQofzhXz9Yb
D1jdNsuBIxDC2gUJUHjA532RJvDC/pvWey0fIiauEYfavCjf51RByY7S5R4oQ8Nx
6Tb2cXO+nOQXO/8RQfSSHMtyZraGIYkLNPMU+j54y2Yc4VlJ+L3nuYAAiG2zWlM8
kDoNCqG1Zb/Lxlpi5PeVRXZ9yJzERbzkU0D6rlmmjSfc1mTuYNxBbFNIdUjBt73b
6Tl6T9kJ9Uj9TOU4xrL0ZsJdzQ==
-----END CERTIFICATE-----