Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/B6FB969780345CD6DB145EA28DBDC6037ED4561E.mft
File:                     B6FB969780345CD6DB145EA28DBDC6037ED4561E.mft (raw, json)
Hash identifier:          ILWiBpS4NBrtxgLQCSUBPVjOAcEnna4qGRhPNolTDjM=
Subject key identifier:   21:7B:76:E1:CF:31:07:98:B5:9D:A7:2B:53:03:27:50:7B:7C:A7:5C
Authority key identifier: B6:FB:96:97:80:34:5C:D6:DB:14:5E:A2:8D:BD:C6:03:7E:D4:56:1E
Certificate issuer:       /CN=B6FB969780345CD6DB145EA28DBDC6037ED4561E
Certificate serial:       6B621915EC6D8349AFA18C2C1389C25F011368C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FB969780345CD6DB145EA28DBDC6037ED4561E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/B6FB969780345CD6DB145EA28DBDC6037ED4561E.mft
Manifest number:          01D2
Signing time:             Sun 14 Apr 2024 23:03:34 +0000
Manifest this update:     Sun 14 Apr 2024 22:58:34 +0000
Manifest next update:     Tue 16 Apr 2024 00:57:34 +0000
Files and hashes:         1: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: JZheiPHG0eTFnZRrZiQHX3ZRZQ9n18nQaTx2IPJuKIk=)
                          2: B6FB969780345CD6DB145EA28DBDC6037ED4561E.crl (hash: OJoJnZMvdLb9vnNYApoMq/Z5QKxzqW/KIu4an9eXF0A=)
                          3: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: hiRb82wJLlpfW2pmdEGgIo9kR5/m051KvLzaQ93U/Jk=)
                          4: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: 8BPb9w8wiu5tq0APoKBPCHw++470qh1zMa+Mgf0eSZw=)
                          5: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: reXz4T8ztDzWmxDPVWrlbuhnlPBioJ+WkL8p1MpBs8U=)
                          6: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: IU+HWTgWlaesa9mT6zZx0svSaoRSRT3/KJJeax10JRs=)
                          7: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: uYwJvvhX09LwgdLBdpG4KDEyT/m+b3iwgQEsf3SmmZs=)
                          8: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: gWXlnct2kmbglQwodq11125GTgFc5YJEogtdUT3yv4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:19:15:ec:6d:83:49:af:a1:8c:2c:13:89:c2:5f:01:13:68:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6FB969780345CD6DB145EA28DBDC6037ED4561E
        Validity
            Not Before: Apr 14 22:58:34 2024 GMT
            Not After : Apr 16 00:57:34 2024 GMT
        Subject: CN=217B76E1CF310798B59DA72B530327507B7CA75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:d4:0b:5b:27:69:b6:4d:57:e9:c3:8f:c4:
                    1c:10:ef:dc:3f:40:c0:22:e6:c2:e8:44:b7:6d:95:
                    85:b7:cb:e3:4b:a9:14:64:0f:7d:8c:60:74:a6:d1:
                    6b:7b:2a:49:b0:13:70:4c:ec:b4:78:72:a1:ca:da:
                    46:4f:39:d6:0c:fe:d1:26:b4:22:eb:d7:5c:b4:15:
                    44:c8:67:74:44:1b:b6:f5:24:1e:8a:52:99:58:91:
                    1f:79:3e:57:ce:61:2e:da:4a:e8:2c:c2:6f:ee:3c:
                    95:b8:21:27:0b:84:9b:01:14:be:fd:23:c7:cd:89:
                    9d:3e:c4:a2:b3:3e:21:92:18:f7:fd:73:a3:22:1a:
                    ee:0e:ef:1f:fd:5d:ec:b2:99:c5:35:40:8d:32:cd:
                    f1:2d:9c:7d:9f:41:bb:ea:c5:53:b0:01:2f:a5:d4:
                    61:be:c0:a4:25:31:ae:ec:f8:3f:0f:60:35:31:9a:
                    af:94:75:b3:df:83:02:6c:b8:cd:84:8f:05:63:ed:
                    db:0d:f8:a2:67:0d:bb:38:eb:04:56:b5:ef:de:0d:
                    56:6b:6c:fe:89:1e:85:ff:ec:53:e9:b0:88:94:87:
                    c6:2c:e4:a1:c1:b5:d1:0d:76:ed:e6:9c:14:5b:08:
                    01:61:ad:24:04:d3:e0:31:c3:d5:ff:78:9a:df:54:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7B:76:E1:CF:31:07:98:B5:9D:A7:2B:53:03:27:50:7B:7C:A7:5C
            X509v3 Authority Key Identifier:
                keyid:B6:FB:96:97:80:34:5C:D6:DB:14:5E:A2:8D:BD:C6:03:7E:D4:56:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/B6FB969780345CD6DB145EA28DBDC6037ED4561E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FB969780345CD6DB145EA28DBDC6037ED4561E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/B6FB969780345CD6DB145EA28DBDC6037ED4561E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:32:7a:0e:0d:39:c3:dc:9c:85:9c:b0:0b:b3:0b:30:22:5a:
         7f:91:50:19:fb:4d:3d:97:55:44:4f:ff:57:9d:aa:22:b8:3a:
         4d:13:dd:79:b0:dc:08:d3:84:65:7e:f7:a1:dc:70:3f:6f:33:
         cd:a5:bb:a5:a9:a5:c7:b9:95:0c:64:61:2b:56:07:92:18:d3:
         e1:df:f4:94:c7:33:8b:6b:de:f9:36:3b:b0:9a:cc:6c:ff:43:
         18:58:62:a6:6e:66:fa:22:46:ef:e5:1f:3a:21:77:6d:70:04:
         a7:20:cf:77:ae:84:7c:eb:17:1b:d6:ce:6b:85:c8:56:16:ab:
         f6:1f:16:35:7d:2a:8f:a2:8e:1d:a8:5b:a4:79:1f:ac:73:57:
         56:7d:9b:f9:5e:2a:e0:f2:2e:82:ae:d2:88:aa:97:2f:99:a8:
         fd:8b:90:59:4e:4e:f4:6f:5b:a6:a7:69:07:e3:3e:e4:e2:4d:
         1e:4c:97:d6:fa:07:17:cd:8f:4b:ff:cb:14:cc:a6:53:f5:7f:
         e7:82:11:08:a7:51:50:4d:24:25:ab:b0:dc:2b:36:18:4a:c7:
         02:7e:1e:1e:73:6c:14:eb:cd:f0:78:68:7f:96:2b:a4:7b:44:
         ea:ac:b1:08:82:5c:0c:31:e1:c4:c6:ee:b7:ca:5f:46:3a:08:
         78:b0:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org