Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.mft
File:                     FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.mft (raw, json)
Hash identifier:          7a7SEeGBMSeJWkOyam9iyP9Pwn81XRgOQZ9YuI0OxI4=
Subject key identifier:   25:D3:18:31:F3:93:9C:F6:44:EB:3F:35:15:62:20:A2:DA:EB:65:13
Authority key identifier: FD:74:C6:A5:39:FA:25:37:A4:A0:C1:90:E6:A0:6E:78:15:7F:5B:A6
Certificate issuer:       /CN=FD74C6A539FA2537A4A0C190E6A06E78157F5BA6
Certificate serial:       1A31069F1AED16A581BEA793F2ED2DDBCCEC4151
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.mft
Manifest number:          1D
Signing time:             Sat 20 Apr 2024 18:27:43 +0000
Manifest this update:     Sat 20 Apr 2024 18:22:43 +0000
Manifest next update:     Sun 21 Apr 2024 19:49:43 +0000
Files and hashes:         1: 323830343a363834343a3a2f33322d3438203d3e20323639363831.roa (hash: WBA4sw2f35oxaUGT5MiPjkshe8Sb5AVX2h6713g+fhI=)
                          2: FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.crl (hash: snDHGx2DoAloAk3u8nb0/1k+aIYl4uFzlZlVPPQCz4o=)
                          3: 34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa (hash: Esf5QenXD9VjbArSWWlpvdopZDrzyra9qgXKKngcn54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:31:06:9f:1a:ed:16:a5:81:be:a7:93:f2:ed:2d:db:cc:ec:41:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD74C6A539FA2537A4A0C190E6A06E78157F5BA6
        Validity
            Not Before: Apr 20 18:22:43 2024 GMT
            Not After : Apr 21 19:49:43 2024 GMT
        Subject: CN=25D31831F3939CF644EB3F35156220A2DAEB6513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:85:29:70:03:e0:b9:38:e4:46:30:70:e9:
                    9a:f7:df:3d:86:34:ac:89:11:8c:fd:71:02:51:3e:
                    38:44:03:93:7c:24:6c:29:ac:74:6c:21:73:49:07:
                    fc:33:91:5e:51:e8:0c:dc:90:5c:50:19:f3:23:43:
                    a4:df:b0:5a:f3:3d:18:e8:41:12:e7:cb:f7:68:13:
                    82:55:67:e6:d3:ae:ba:82:7b:7c:53:40:65:a0:b0:
                    a8:32:ad:fa:49:f4:42:0b:11:23:d6:e4:2e:33:a6:
                    46:e0:2e:ae:ca:7d:f3:bc:33:0a:29:38:a2:21:c2:
                    9e:dd:e7:7c:4d:b0:e7:c5:e9:07:31:c5:16:86:c8:
                    3a:2f:39:81:8f:d1:3c:19:aa:fd:0a:30:54:fc:e3:
                    57:8b:24:74:40:00:5f:ad:77:f2:a4:e4:f9:53:bf:
                    86:2b:5e:81:8f:1e:76:08:73:fa:77:fd:f8:df:a9:
                    5b:9d:cb:04:14:43:21:3c:3f:98:6a:95:7d:2a:eb:
                    c7:41:ff:91:75:91:71:7e:af:eb:73:44:dc:2e:f8:
                    2b:9d:c3:2d:56:30:79:2f:82:53:c4:64:7a:c7:51:
                    92:6b:fd:3c:4e:82:f4:d5:a0:40:0e:0d:c8:b6:0d:
                    f4:3d:83:de:ae:fe:8e:77:22:1c:06:65:2e:95:a7:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:18:31:F3:93:9C:F6:44:EB:3F:35:15:62:20:A2:DA:EB:65:13
            X509v3 Authority Key Identifier:
                keyid:FD:74:C6:A5:39:FA:25:37:A4:A0:C1:90:E6:A0:6E:78:15:7F:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/1/FD74C6A539FA2537A4A0C190E6A06E78157F5BA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:8e:dc:a5:83:d8:0c:32:59:c7:b1:20:87:22:ca:7f:0a:
         7b:df:4e:5e:f7:b5:35:0b:dc:13:f9:55:1c:3b:96:0a:7d:c2:
         ac:fd:45:8c:04:6d:b7:24:a6:eb:91:27:60:b9:75:3b:74:a2:
         aa:60:0d:f9:82:3c:b7:56:38:bc:69:94:90:22:40:00:f0:78:
         5b:39:21:0d:a1:72:00:e6:6f:5b:27:39:7f:f8:22:80:aa:67:
         22:d5:74:e6:8e:4b:3c:b2:a2:c6:65:b0:94:23:66:4d:d6:c7:
         03:b5:5c:3b:81:ac:3f:b4:4e:35:4b:92:ad:d1:90:53:54:76:
         55:89:1b:cf:1b:62:0d:ee:3e:60:0a:54:f9:8f:eb:9b:8c:6a:
         62:cb:8d:2c:9d:6f:e1:c1:11:1b:2d:57:c0:21:12:8a:9b:25:
         d0:14:0f:24:4d:c6:7d:33:8b:46:b5:4a:8d:e6:72:2b:07:fb:
         a3:a5:bc:f8:1c:91:56:61:51:12:f2:ed:41:28:68:71:1a:de:
         78:a8:d6:03:53:6c:40:0e:09:77:08:98:1a:9d:a1:3b:d7:d8:
         9a:44:d5:a9:dd:9c:0e:c6:6c:8b:52:75:c7:fe:29:89:f0:6d:
         ce:3e:74:44:0b:da:fa:4b:55:68:dc:7a:46:ad:4f:d4:8a:6e:
         cb:17:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----