Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.mft
File:                     00FFFF94E89C12D2D266ECF9ACD62277C894680B.mft (raw, json)
Hash identifier:          Z2sl/HIYRYSUlwu7+bdzGCPhPRN9s6rb4vLkr4tPMrc=
Subject key identifier:   24:00:F0:F6:F8:26:E4:A3:AB:70:15:9D:67:54:88:48:7B:AC:C8:45
Authority key identifier: 00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B
Certificate issuer:       /CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
Certificate serial:       7AC1AF0A5DCED303A85E22CE618821FC60B06D77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.mft
Manifest number:          3D
Signing time:             Mon 15 Apr 2024 06:51:46 +0000
Manifest this update:     Mon 15 Apr 2024 06:46:46 +0000
Manifest next update:     Tue 16 Apr 2024 07:40:46 +0000
Files and hashes:         1: 00FFFF94E89C12D2D266ECF9ACD62277C894680B.crl (hash: We3zA7ywL5nChXHeEbiGgy3qHQ/Qg7D7FxeIP7arAn8=)
                          2: 323830343a363461633a3a2f33322d3332203d3e20323639343431.roa (hash: ZHAk7aNn6j/HQzxmjJeVk7QuAjj6UdIxxiQbmKZ3KCc=)
                          3: 34352e3138352e33392e302f32342d3234203d3e20323639343431.roa (hash: pKgN1pLfa46CBLUz6gXYC/nh/cyeU662oLH5AOuffGE=)
                          4: 34352e3138352e33382e302f32342d3234203d3e20323639343431.roa (hash: 3vrUTP02jmxXhAliw/w1bwrzUq+NeuLuLixDye4stz8=)
                          5: 34352e3138352e33362e302f32322d3232203d3e20323639343431.roa (hash: JJpjQdVI6g0e20SIcZQBS0aD5Oh2pEHV3LZlFLByEzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:af:0a:5d:ce:d3:03:a8:5e:22:ce:61:88:21:fc:60:b0:6d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
        Validity
            Not Before: Apr 15 06:46:46 2024 GMT
            Not After : Apr 16 07:40:46 2024 GMT
        Subject: CN=2400F0F6F826E4A3AB70159D675488487BACC845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:ef:06:41:6f:f1:97:83:ec:cf:c6:f9:e6:
                    31:33:aa:ae:1c:a0:5b:eb:06:ed:e6:48:96:90:64:
                    b9:f2:dc:0e:ea:c7:89:ab:92:34:09:83:47:34:96:
                    92:ca:43:d7:4d:8c:08:2e:14:a8:de:30:24:bf:65:
                    3f:b4:3b:68:75:ba:80:a6:58:fb:f6:de:8b:a1:69:
                    76:bf:4e:28:f1:a0:58:97:3a:ae:20:16:71:6b:9b:
                    b1:72:fa:90:23:fc:71:7a:be:cd:d9:d4:dd:1e:0a:
                    67:89:49:d6:6f:2c:7d:d8:1c:23:b6:31:76:06:b8:
                    d1:32:c9:ed:07:e2:3d:d8:41:26:9e:44:d2:3f:bb:
                    6b:1d:d7:66:af:65:41:f7:4d:e2:f0:2d:1e:0b:9e:
                    21:45:dc:72:2d:fa:d2:64:ed:ce:1b:c5:75:a1:9c:
                    ba:5f:37:8f:a0:21:fa:e5:c2:2e:60:91:1d:1d:ef:
                    9a:0a:5d:9b:7e:89:2f:41:72:31:24:5f:ac:a9:5f:
                    a9:53:cc:0d:19:3b:8b:2e:0e:fd:9e:2c:b4:0f:7c:
                    bc:28:eb:24:14:b7:b0:0b:7d:06:07:b1:34:af:5b:
                    0e:0e:5f:a5:c1:80:38:1c:14:fb:ad:de:21:ca:64:
                    81:4e:a8:58:e9:d0:6a:47:e8:66:87:41:83:c9:d6:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:F0:F6:F8:26:E4:A3:AB:70:15:9D:67:54:88:48:7B:AC:C8:45
            X509v3 Authority Key Identifier:
                keyid:00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:c0:a5:1a:aa:98:8b:41:44:b6:66:bc:3a:e6:50:80:15:
         6d:1b:32:6e:e9:04:52:87:8e:a2:b5:71:e0:51:4c:ab:03:ea:
         48:42:ce:68:aa:b3:f9:4d:ba:1b:01:ae:25:3e:ad:3f:ee:20:
         2a:5a:2c:01:22:78:cf:a6:85:57:9e:8f:ec:f3:8f:40:8c:4c:
         97:d1:b1:b4:6b:f7:87:df:8c:3a:51:e1:40:41:26:6f:d2:3d:
         87:8e:4c:a8:8a:d4:9c:85:6d:52:bd:13:aa:35:db:ff:86:91:
         e3:80:a8:f1:8f:d2:ed:06:5a:95:e9:d5:69:37:de:c9:e5:54:
         51:af:7e:64:23:d9:64:9e:e2:b9:5c:28:85:54:4b:d5:8f:de:
         c5:cc:d7:26:7c:61:4a:91:2a:f1:ea:82:b9:78:b6:1d:0b:cb:
         b2:64:07:11:4b:28:bc:40:0d:02:fb:9c:b8:ea:9a:b1:5e:af:
         66:9c:bb:40:25:67:dd:7d:f4:1f:d2:b8:16:63:54:4f:bc:8c:
         6b:55:22:dd:23:1c:5d:2f:9f:f8:02:3c:aa:d8:27:2f:1e:07:
         3c:17:58:1c:82:7e:9e:c3:97:0f:3d:3f:fb:1f:be:89:78:3d:
         fc:ec:a0:6e:0f:73:25:fb:fa:7b:c6:09:57:f2:71:2c:16:16:
         24:5c:fd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org