Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.mft
File:                     6288854C1B45D74756C64B08ECA8E456AE06FB17.mft (raw, json)
Hash identifier:          rxS3+mhhbF4oQ/WaIeb+HutO6Tw3LmAspJmLtBYEFA0=
Subject key identifier:   B6:3E:82:BC:5F:46:35:B9:EE:30:8A:BC:D3:54:EC:90:ED:76:38:AD
Authority key identifier: 62:88:85:4C:1B:45:D7:47:56:C6:4B:08:EC:A8:E4:56:AE:06:FB:17
Certificate issuer:       /CN=6288854C1B45D74756C64B08ECA8E456AE06FB17
Certificate serial:       1A175DAAFDB072947350F680093C01A3AB77253E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.mft
Manifest number:          FA
Signing time:             Wed 09 Oct 2024 18:36:57 +0000
Manifest this update:     Wed 09 Oct 2024 18:31:57 +0000
Manifest next update:     Thu 10 Oct 2024 19:06:57 +0000
Files and hashes:         1: 323830343a386535303a3a2f33322d313238203d3e20323733343137.roa (hash: CqFcfhFbLnJiG5w2UufiHEPp6OwOjrrHVsQEPqAp6KY=)
                          2: 6288854C1B45D74756C64B08ECA8E456AE06FB17.crl (hash: 6x5Ve/5nEdgH+nryAzYALccqfs6VOTZ6Q11b5D+4euc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:17:5d:aa:fd:b0:72:94:73:50:f6:80:09:3c:01:a3:ab:77:25:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288854C1B45D74756C64B08ECA8E456AE06FB17
        Validity
            Not Before: Oct  9 18:31:57 2024 GMT
            Not After : Oct 10 19:06:57 2024 GMT
        Subject: CN=B63E82BC5F4635B9EE308ABCD354EC90ED7638AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:c9:9c:ac:9f:77:3a:1d:43:8b:c0:be:f1:
                    fa:24:1a:4e:b0:e9:74:fc:4f:b1:88:0a:54:b2:ee:
                    50:11:b0:95:c2:2f:0f:f3:ca:c7:dd:a6:52:07:55:
                    08:88:c7:86:b5:45:70:3b:b9:80:cf:0e:55:6c:46:
                    24:19:55:e6:6c:62:8e:9a:16:f7:47:76:10:f1:a7:
                    da:40:69:68:1f:ee:02:99:af:10:0d:13:5a:ab:cc:
                    0c:2e:d1:10:28:9c:47:a3:12:47:8c:40:45:54:13:
                    67:3f:69:f0:f3:fc:50:42:38:2b:28:0b:f9:63:37:
                    ba:b7:1b:c6:98:e3:31:d4:dc:41:8e:51:03:84:94:
                    3c:3a:fb:c5:69:cb:03:91:f4:fe:ee:e3:5b:ab:c4:
                    d6:50:ce:5c:e5:c0:66:9c:ae:6f:d0:28:4b:bb:f6:
                    d0:5e:d0:43:57:95:d7:07:47:3a:9d:8a:6c:3a:6d:
                    aa:ff:10:cd:cd:f7:a1:54:e9:d0:fe:7a:7c:27:c0:
                    30:cf:f2:b5:41:7a:af:71:56:f0:0d:ca:f5:97:4c:
                    e7:84:73:fe:55:db:1b:e0:e2:58:a7:91:0c:d5:82:
                    7f:22:b2:c9:61:6c:45:d7:c3:0b:fe:2b:39:3f:76:
                    5d:bd:16:79:5f:09:1f:d3:f8:24:09:f4:5b:8a:fa:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:82:BC:5F:46:35:B9:EE:30:8A:BC:D3:54:EC:90:ED:76:38:AD
            X509v3 Authority Key Identifier:
                keyid:62:88:85:4C:1B:45:D7:47:56:C6:4B:08:EC:A8:E4:56:AE:06:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/1/6288854C1B45D74756C64B08ECA8E456AE06FB17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:68:75:25:d7:d0:6e:7a:73:01:0a:72:a0:ea:ee:9e:a3:
         25:b4:c4:c2:2a:da:9a:57:aa:95:bf:57:0f:75:ba:80:3d:b3:
         af:07:bc:e2:7b:1a:e1:7f:d6:04:64:20:7a:bd:eb:b2:5d:16:
         31:ec:e4:a3:92:64:dd:af:6a:3b:23:9e:da:d2:73:80:2f:68:
         3f:0c:e3:d1:3c:49:b0:9b:80:b0:24:d9:9b:85:42:97:01:57:
         a5:78:1e:55:b5:c0:4b:56:85:b1:81:ec:59:89:0c:1e:c7:d8:
         88:60:86:74:7e:ed:6d:41:6a:19:bb:56:12:f4:34:5a:0d:04:
         65:16:6f:7d:37:e2:91:12:d5:8c:a5:48:e7:2a:6e:b3:87:7e:
         ab:67:0b:11:82:cc:12:ed:d3:30:49:c8:c7:6b:e6:b7:5c:14:
         06:03:c7:57:2e:69:37:85:0a:34:2f:40:86:fd:2b:34:74:06:
         25:db:aa:88:a2:ec:15:21:41:c3:6e:58:9b:71:c9:07:cb:88:
         3f:99:7e:11:eb:33:b8:f4:0c:ea:12:c7:b8:e5:f4:55:1b:03:
         1e:f8:55:03:a6:3f:03:c2:ce:de:b4:3e:50:b8:a8:1c:8b:f8:
         b7:e9:69:c5:64:89:06:4a:d1:a4:9c:0a:ee:2a:b3:fb:9c:e4:
         46:15:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 02:31:55 2024 by rpki-client on console-ams.rpki-client.org