Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.mft
File:                     FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.mft (raw, json)
Hash identifier:          YiWufHIyXpkwKsPJWNWQSxJsGbRJugWBDEMUuOeqAQc=
Subject key identifier:   A3:27:F5:AA:AD:C5:82:CB:98:5F:AA:58:0B:33:2F:F3:8B:DE:BA:A5
Authority key identifier: FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9
Certificate issuer:       /CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
Certificate serial:       0DB5A3150DE0649104459D0D236E32EAE15B6412
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.mft
Manifest number:          01A9
Signing time:             Mon 15 Apr 2024 03:59:03 +0000
Manifest this update:     Mon 15 Apr 2024 03:54:03 +0000
Manifest next update:     Tue 16 Apr 2024 05:28:03 +0000
Files and hashes:         1: 323830343a376561343a3a2f33322d3332203d3e20323731363337.roa (hash: QgcumjB8ADqsPGYO8vIOyztx3l2unEeDF9YGRuvLKI8=)
                          2: 323830343a376561343a3a2f33332d3333203d3e20323731363337.roa (hash: 9OvlwZvTzRyFJ8y2szohhN+Wejz+bQx4T38UdldbPDc=)
                          3: 323830343a376561343a383030303a3a2f33332d3333203d3e20323731363337.roa (hash: V6ubHWlkewCXQZSiS7MuOrTyc9buEwVHYjt7DxKUXI0=)
                          4: 3137392e36332e302e302f32322d3234203d3e20323731363337.roa (hash: upVjsQcZBsUAZ/H4TDzlggvbveXWskh8yUnFc0EIMLg=)
                          5: FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.crl (hash: Q61vuviFhmprPWZCFngHoF/B1LsG8djeZNrFBABCtTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:a3:15:0d:e0:64:91:04:45:9d:0d:23:6e:32:ea:e1:5b:64:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
        Validity
            Not Before: Apr 15 03:54:03 2024 GMT
            Not After : Apr 16 05:28:03 2024 GMT
        Subject: CN=A327F5AAADC582CB985FAA580B332FF38BDEBAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:5d:1c:07:02:dc:fa:96:14:c0:97:52:93:
                    00:bf:7f:d4:ec:ad:ba:e2:fd:e3:bd:60:66:0f:03:
                    3f:da:25:19:40:fc:28:77:b3:53:a4:db:ea:20:53:
                    f3:41:4d:39:98:33:fd:d5:aa:f3:8f:2d:28:55:e2:
                    94:ff:2f:94:55:11:4d:d0:6a:13:69:d6:b7:5e:ea:
                    d5:54:f0:db:4e:39:fe:31:7e:b7:d5:81:74:f3:f5:
                    22:e5:99:84:c2:fd:82:9a:96:2d:bd:b3:e7:94:5b:
                    ff:93:4a:76:c0:1b:05:44:d7:11:41:8b:23:e3:a2:
                    66:11:da:74:79:d5:df:06:9d:97:ff:db:f9:85:8d:
                    08:aa:92:9b:7f:4f:0d:f1:78:f9:d2:99:45:22:f1:
                    a6:f4:3f:ef:04:a7:0a:27:9d:53:aa:68:6f:35:f9:
                    3f:54:9a:dd:b2:d7:c8:62:79:a8:f5:3e:5c:37:8c:
                    cc:9a:96:a6:92:03:77:12:47:7c:35:d9:c1:d0:a1:
                    f0:8a:d1:65:bc:8e:3d:22:c0:78:91:9e:35:28:55:
                    09:07:e2:14:d2:2f:d9:a4:dd:ed:55:eb:4c:11:2d:
                    10:83:92:d9:e4:ae:28:75:7f:f9:89:69:2a:ba:83:
                    e8:86:96:b1:56:6b:82:c0:6a:ed:6b:aa:d8:9c:1a:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:F5:AA:AD:C5:82:CB:98:5F:AA:58:0B:33:2F:F3:8B:DE:BA:A5
            X509v3 Authority Key Identifier:
                keyid:FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:01:18:4a:3b:0e:1e:62:b9:ab:1f:1e:eb:b1:98:f5:3b:
         e5:ab:d3:75:bf:e0:dc:16:c0:07:32:e6:71:68:3c:fb:7c:92:
         4e:86:eb:8d:ad:0a:e7:14:41:d4:5c:6b:05:89:83:0f:e7:f1:
         d0:c7:ad:2e:41:db:25:18:59:47:ef:77:bd:01:70:48:be:56:
         10:92:dd:0e:a7:ae:f6:ef:ef:cb:6e:84:ce:d4:32:cb:52:26:
         84:d8:ba:f6:6e:b4:9f:3c:3a:8a:79:b1:8d:a2:3c:be:4a:4a:
         80:38:8b:e3:ca:07:c8:bb:8d:99:62:98:eb:06:23:fb:2f:0b:
         8a:5d:b6:05:bf:b6:4d:5a:9a:43:42:44:9a:e8:a1:f3:44:de:
         10:e8:42:e6:af:4e:84:a3:8e:45:4a:5b:55:ab:47:c9:45:2f:
         af:25:a2:11:e5:69:22:fe:45:97:a0:dc:31:be:c8:d4:5e:11:
         82:a1:0b:8c:17:5f:4a:58:74:93:89:1d:da:02:8d:ab:12:ee:
         fd:f9:9c:29:70:cc:02:b8:8a:a2:05:63:d9:38:98:68:f3:8d:
         96:30:83:5f:0e:19:31:1b:6b:a1:6a:23:17:96:21:47:f1:92:
         b3:8f:6b:69:fd:18:a6:cf:a5:23:33:f8:f9:65:0f:4c:a7:1b:
         5e:61:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org