Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.mft
File:                     FDDF05E443295DD5E2D256144A34564E7AFF3EDE.mft (raw, json)
Hash identifier:          GT2uUSZaFHsIexDT3p3CFQnBZB+G5hfLpGyNhquwtso=
Subject key identifier:   41:32:6C:7C:21:8D:B7:D9:99:AA:84:D2:6B:B7:C0:E8:11:FB:C3:97
Authority key identifier: FD:DF:05:E4:43:29:5D:D5:E2:D2:56:14:4A:34:56:4E:7A:FF:3E:DE
Certificate issuer:       /CN=FDDF05E443295DD5E2D256144A34564E7AFF3EDE
Certificate serial:       70227B3CD67E76579C468B1D787DAB4C74C17DC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.mft
Manifest number:          21
Signing time:             Sun 22 Oct 2023 04:33:30 +0000
Manifest this update:     Sun 22 Oct 2023 04:28:30 +0000
Manifest next update:     Mon 23 Oct 2023 05:37:30 +0000
Files and hashes:         1: 323830343a326436633a3a2f33322d3333203d3e20323635323831.roa (hash: L66qVc1u8WGsexZcl7KrPgBVy7wgArwGqrgevgw0l58=)
                          2: FDDF05E443295DD5E2D256144A34564E7AFF3EDE.crl (hash: 0snj/bkgxE0XSwseyIy2nGSD6oZAufp318zIbVzQYL4=)
                          3: 3136382e39302e3139322e302f32322d3234203d3e20323635323831.roa (hash: 510rKYYRycc2tRzjZPFF3uWlxLW1o44twlyA1OQRz0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:22:7b:3c:d6:7e:76:57:9c:46:8b:1d:78:7d:ab:4c:74:c1:7d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDDF05E443295DD5E2D256144A34564E7AFF3EDE
        Validity
            Not Before: Oct 22 04:28:30 2023 GMT
            Not After : Oct 23 05:37:30 2023 GMT
        Subject: CN=41326C7C218DB7D999AA84D26BB7C0E811FBC397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:e3:13:f0:3e:12:de:50:e3:00:5a:1a:d3:
                    38:d6:7e:89:b3:f9:06:7d:c6:ac:48:fc:df:6a:b7:
                    77:cd:66:ec:69:60:ef:c4:34:97:1d:6a:d2:6e:88:
                    5c:db:65:91:65:83:2b:45:e1:fe:45:ad:04:01:02:
                    67:70:e8:e9:27:86:b9:44:71:25:47:e1:2e:d9:6d:
                    25:51:89:0f:ca:8a:4b:bb:39:4f:aa:1a:e7:78:fa:
                    13:ad:57:5c:8c:a7:00:64:75:0d:27:4f:be:8e:a6:
                    73:2d:7a:86:89:3b:a6:52:c5:e2:d4:0c:85:83:cd:
                    a4:1e:39:c5:14:d9:78:7c:42:57:29:e5:fb:6f:62:
                    74:a4:68:c2:09:34:b6:37:24:23:34:77:b8:b1:20:
                    ca:7b:a5:ea:33:84:2d:a4:17:12:5e:dc:ed:ca:3e:
                    ed:b0:71:42:15:1f:fa:71:3e:ef:ba:a7:da:04:02:
                    6e:d9:42:b7:53:1f:b0:b7:ac:6f:ca:be:fb:45:7a:
                    cf:5d:12:80:e3:67:ca:dd:49:83:d0:7e:c1:94:f6:
                    f7:94:61:14:6b:ba:cd:75:22:9f:59:51:55:49:bd:
                    63:21:39:14:2f:64:b0:d1:b0:6a:9e:75:a3:46:c4:
                    8e:0f:a2:42:20:c3:c8:f3:7f:5d:d5:68:fe:8e:19:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:32:6C:7C:21:8D:B7:D9:99:AA:84:D2:6B:B7:C0:E8:11:FB:C3:97
            X509v3 Authority Key Identifier:
                keyid:FD:DF:05:E4:43:29:5D:D5:E2:D2:56:14:4A:34:56:4E:7A:FF:3E:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/FDDF05E443295DD5E2D256144A34564E7AFF3EDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:81:a4:41:fa:4e:4e:aa:61:8a:ee:e6:7f:b6:53:ba:39:
         dc:63:9e:49:2f:fc:55:77:81:a0:20:a5:27:f2:40:a0:b5:59:
         66:9d:54:87:c0:5b:23:b6:4a:df:26:fb:20:e7:5a:a9:78:c0:
         e2:2a:fc:1b:47:c1:5a:fd:17:5d:24:99:8f:1a:cf:d1:07:6d:
         2d:19:df:d0:6a:71:d7:b2:02:ed:49:e7:90:49:67:77:e5:0f:
         c7:8a:f6:ae:f3:ea:70:80:9f:90:ad:7a:c5:79:f9:a0:b3:c6:
         b1:f0:c4:1d:a1:3c:97:57:d2:85:a7:96:14:fd:1f:50:4a:bb:
         2a:27:b7:a8:0b:4c:3a:78:1a:16:56:c6:7f:80:b8:4c:06:48:
         b3:50:28:5f:c3:d3:0c:3d:10:a7:d5:14:09:86:c4:c0:7e:c4:
         2c:db:a5:0f:35:9b:09:22:40:30:fe:94:e4:3e:7a:cd:d6:9e:
         d0:ae:22:1f:3c:b5:00:70:e1:34:5d:c7:ce:33:68:d0:fa:e7:
         8f:fe:4d:7e:e3:55:dd:f0:ad:f0:43:0b:1f:62:95:e4:23:da:
         e5:42:b3:3f:d4:04:ff:ef:2a:22:67:0d:e9:40:c6:f5:d4:3b:
         43:49:a5:c5:c4:81:80:5b:92:0e:4a:9e:88:05:4d:e8:5f:a5:
         30:84:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----