Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.mft
File:                     3FB949E473014D3A4378DE464207BB64491FC1FB.mft (raw, json)
Hash identifier:          qddv2guZUOh20l69V8Li3F1aTvxdQ0QaXys/J8ONcz4=
Subject key identifier:   1F:DD:04:B2:20:46:13:C4:79:BB:7F:14:B5:65:C8:11:44:27:25:C2
Authority key identifier: 3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB
Certificate issuer:       /CN=3FB949E473014D3A4378DE464207BB64491FC1FB
Certificate serial:       7B6A2F64230FE6A773415BF1ABA2508BFEAFAD48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.mft
Manifest number:          FF
Signing time:             Mon 15 Apr 2024 04:13:03 +0000
Manifest this update:     Mon 15 Apr 2024 04:08:02 +0000
Manifest next update:     Tue 16 Apr 2024 07:41:02 +0000
Files and hashes:         1: 3FB949E473014D3A4378DE464207BB64491FC1FB.crl (hash: 7X6BIRUEF49GyodMsraVyGyoSjOFPCeBbgxDTcbJndk=)
                          2: 3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa (hash: FjnePqY28Dpt0Ed6II0gpxRvUANGT3U+kU5rG1CcO0M=)
                          3: 3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa (hash: YJ/HlO2nFg5pYAa20V8lQ8hVGdR4L8jWdC8wZGrW+l4=)
                          4: 3138312e3232342e31322e302f32322d3232203d3e20323731343638.roa (hash: WWeaaim4t9S2NBjZ9reEYYexe+IF8RmfV7nj5S4BFmc=)
                          5: 3138312e3232342e31322e302f32332d3233203d3e20323731343638.roa (hash: OI8OYkG+2BgSlbK538ATzf+DuIpYdJSfpuy+WZTEUaw=)
                          6: 3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa (hash: IxYePNzSo3i5EqGOu84ToLfbIzQlc13WWMPE11jJiEQ=)
                          7: 323830343a376266633a3a2f33322d3332203d3e20323731343638.roa (hash: 9/n11eMgHUwlOMR3hoXnmBBI5R/y/mUQZqUfFpaR1RM=)
                          8: 3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa (hash: SC1jjsWVtdzika4JsJNFyJ0kAsR3qPSqNgic7tM8qds=)
                          9: 3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa (hash: TEXragrykHj45COQSz7BhNX49i1EFwdjG5Fl017ed2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6a:2f:64:23:0f:e6:a7:73:41:5b:f1:ab:a2:50:8b:fe:af:ad:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB949E473014D3A4378DE464207BB64491FC1FB
        Validity
            Not Before: Apr 15 04:08:02 2024 GMT
            Not After : Apr 16 07:41:02 2024 GMT
        Subject: CN=1FDD04B2204613C479BB7F14B565C811442725C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:45:12:69:1f:bb:1e:eb:19:8a:88:13:0d:
                    b5:48:e0:5f:88:45:cc:46:93:73:0b:55:2c:48:89:
                    dc:a1:61:13:de:90:f6:94:fa:87:3b:6c:e1:ed:95:
                    25:ab:07:8a:2f:d6:41:23:bd:79:99:3e:7c:bc:66:
                    a9:3e:f8:75:87:bb:e7:28:88:30:a4:6b:e3:b8:f0:
                    50:7a:f3:6a:5a:c0:65:0e:5d:58:96:b2:5f:ad:4f:
                    6c:85:b6:ee:e6:88:fc:eb:61:6a:19:f8:97:cf:41:
                    6b:a2:d9:c0:f4:d2:73:b7:57:c8:07:01:75:f1:c3:
                    27:96:12:a5:8a:e8:9b:fa:80:14:bb:f7:a6:9f:11:
                    98:a6:d3:16:54:f4:f6:8f:1c:c8:27:06:0a:70:4e:
                    f4:3c:2b:65:f8:18:d8:6b:43:ac:cc:6c:9a:16:20:
                    ba:b0:f1:55:f9:a1:35:fd:5d:10:fa:21:e2:5e:59:
                    25:c6:61:8f:76:fd:7b:0b:50:bc:d1:bd:d7:88:e8:
                    2f:29:45:3d:c2:2f:f3:0e:f0:4f:1f:18:b7:01:fd:
                    9b:46:f7:0e:90:4b:f1:5a:6a:92:c9:16:91:c6:f1:
                    c6:b6:d2:8e:00:ec:ab:5b:57:06:b8:a4:e8:a9:74:
                    83:a9:e0:78:4d:2e:93:ed:1e:fc:4a:55:2e:af:8c:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DD:04:B2:20:46:13:C4:79:BB:7F:14:B5:65:C8:11:44:27:25:C2
            X509v3 Authority Key Identifier:
                keyid:3F:B9:49:E4:73:01:4D:3A:43:78:DE:46:42:07:BB:64:49:1F:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB949E473014D3A4378DE464207BB64491FC1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3FB949E473014D3A4378DE464207BB64491FC1FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:82:46:a5:36:ef:dd:e0:ed:8e:3c:10:62:db:cc:80:7b:
         ad:bd:4e:26:99:63:8c:c6:c8:22:17:5e:6a:e3:82:c7:4b:87:
         21:76:4a:23:1c:31:80:4d:4c:1b:4c:05:35:67:30:f5:74:e4:
         4e:41:aa:c9:5b:ac:43:73:20:dc:4f:df:3f:12:ba:47:ec:4f:
         38:d0:14:4b:a7:bd:fd:2d:78:ba:35:3e:2a:6d:ab:98:46:ac:
         8c:4c:90:8d:8c:fb:97:08:42:fc:75:c5:83:a5:7d:91:20:6d:
         15:af:0c:91:55:86:87:e9:de:03:6a:80:e3:6b:24:68:39:ec:
         e8:56:21:76:8a:8a:a6:ba:fc:30:09:9a:db:9a:0c:81:82:30:
         ab:90:fb:51:e6:90:48:b4:d1:7c:01:c3:54:04:08:19:5f:1e:
         e4:11:8b:3b:73:32:4f:e2:03:0d:35:bd:f5:62:d4:4d:93:e4:
         0f:f1:f0:f5:bc:48:fd:fd:10:e7:b9:32:3e:4e:e8:b5:31:fc:
         0b:f9:a1:43:c6:c2:9b:61:48:15:20:ef:c6:7b:3c:8d:f7:c8:
         0d:1e:50:03:bd:c7:c9:b6:27:36:30:be:f4:36:65:1b:ca:d5:
         9f:f5:93:bc:d6:e1:f7:e1:fb:80:05:6c:74:b5:78:d0:6e:8b:
         77:a2:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org