Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.mft
File:                     FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.mft (raw, json)
Hash identifier:          i2M/pCG01zIMwMNJL5JfGvqFZKKzlAuTNfTrjZoMygY=
Subject key identifier:   11:F5:D3:1A:EA:DF:08:B5:5D:84:A0:39:2C:0A:FC:C0:77:B8:2B:97
Authority key identifier: FC:97:F7:FF:84:FA:8A:0B:59:91:12:EC:69:6E:0B:99:AC:0C:AC:54
Certificate issuer:       /CN=FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54
Certificate serial:       54A209ACDC1D27D06B8F25A7105216761754649B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.mft
Manifest number:          1F
Signing time:             Mon 15 Apr 2024 09:04:29 +0000
Manifest this update:     Mon 15 Apr 2024 08:59:29 +0000
Manifest next update:     Tue 16 Apr 2024 11:06:29 +0000
Files and hashes:         1: 3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (hash: GJVxWl+3y0GKLU99A+vD0Vc5HOMm7c5mF688gaal2vY=)
                          2: 323830343a363935383a3a2f33322d3438203d3e20323730323634.roa (hash: qXd+JBAIkfT6gPGlc4XexFJGLBS3tP6CyhN7ESQiubc=)
                          3: FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.crl (hash: r3dTF2i4OoobGforZt/TgzQjf38A5iE44f8ZQ6MPu3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a2:09:ac:dc:1d:27:d0:6b:8f:25:a7:10:52:16:76:17:54:64:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54
        Validity
            Not Before: Apr 15 08:59:29 2024 GMT
            Not After : Apr 16 11:06:29 2024 GMT
        Subject: CN=11F5D31AEADF08B55D84A0392C0AFCC077B82B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:5d:39:2a:a6:ad:4b:2b:05:ea:6d:ee:86:
                    e6:87:b0:4e:e9:73:0a:f4:27:30:39:ab:c5:f5:23:
                    d0:cf:80:e5:a7:8a:43:df:9b:51:23:64:de:6c:63:
                    3c:80:04:02:61:d6:54:fc:49:c9:88:63:c7:86:bc:
                    21:13:bb:58:fa:86:4f:a3:66:63:56:7c:85:ec:60:
                    58:35:c7:70:9b:8a:c9:06:9b:2f:c1:2d:e7:1e:9a:
                    75:d3:20:bc:5e:fc:ec:91:b1:6c:3f:85:a5:35:b0:
                    8b:bc:29:e3:81:55:f8:78:f4:18:1e:42:d9:54:c3:
                    80:c4:b3:7f:6b:b8:82:ef:3a:5f:f6:7f:e4:14:ae:
                    e0:2c:ff:0d:67:7e:4e:aa:a1:ba:c4:61:b2:ee:f9:
                    eb:42:b4:0a:34:4e:38:d7:f9:3a:67:97:c8:a7:c0:
                    f5:d1:80:f9:02:81:5e:b4:00:54:ca:04:5b:26:6c:
                    02:31:45:33:26:e9:62:d7:9f:d5:6b:a4:08:cf:ff:
                    78:6a:04:c2:16:70:e3:5e:60:93:7f:cd:d1:28:f6:
                    97:a4:a1:30:9e:98:75:b5:3f:b4:32:31:f5:0c:b9:
                    d6:95:64:63:ba:85:b0:1a:88:37:c7:5b:cb:d4:78:
                    bf:16:3b:32:dd:06:e8:09:de:81:2a:22:17:19:f0:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:D3:1A:EA:DF:08:B5:5D:84:A0:39:2C:0A:FC:C0:77:B8:2B:97
            X509v3 Authority Key Identifier:
                keyid:FC:97:F7:FF:84:FA:8A:0B:59:91:12:EC:69:6E:0B:99:AC:0C:AC:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/0/FC97F7FF84FA8A0B599112EC696E0B99AC0CAC54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:22:6e:8a:c9:90:2e:c3:47:68:6a:00:01:e8:68:d7:73:ec:
         d4:44:c8:5a:38:50:d4:91:e3:45:a3:e2:a4:4c:cb:2b:2a:9d:
         7c:aa:fc:29:fe:58:76:9d:80:6e:38:b8:ca:e6:f4:f5:53:cf:
         0a:88:29:ad:7d:e4:19:f3:7f:82:6a:50:ee:6f:a2:e9:36:1d:
         9b:de:3f:18:b8:99:2d:44:1d:ac:e1:35:c6:81:f5:25:af:a5:
         4f:a6:bd:38:7d:d9:2c:df:9d:22:6e:8d:de:63:23:27:d1:ef:
         16:15:58:c9:ae:6a:df:8d:38:c8:48:83:ff:fa:57:ed:e5:64:
         a4:80:fe:86:4b:c9:52:9b:99:a0:77:a5:37:bc:ee:ee:f9:34:
         9f:37:4f:34:76:b8:d4:07:b7:6e:ba:f4:26:76:93:9f:18:f8:
         d8:1e:38:b0:5f:34:68:55:39:2a:fa:10:1f:df:30:28:76:df:
         7e:4a:b9:d1:dd:6f:e8:80:a0:5c:bf:42:78:90:2f:97:15:06:
         e1:58:ac:d0:ad:ea:e2:3a:ee:5c:21:8a:97:77:bc:81:dd:66:
         69:5f:8e:08:99:5b:6c:6c:d7:ac:d7:83:88:c6:d2:de:31:2b:
         f1:c8:7f:44:f8:f9:a0:b1:82:15:0d:cf:ef:21:68:1a:47:36:
         0c:4e:dd:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVKIJrNwdJ9BrjyWnEFIWdhdUZJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5N0Y3RkY4NEZBOEEwQjU5OTExMkVDNjk2RTBCOTlB
QzBDQUM1NDAeFw0yNDA0MTUwODU5MjlaFw0yNDA0MTYxMTA2MjlaMDMxMTAvBgNV
BAMTKDExRjVEMzFBRUFERjA4QjU1RDg0QTAzOTJDMEFGQ0MwNzdCODJCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bF05KqatSysF6m3uhuaHsE7p
cwr0JzA5q8X1I9DPgOWnikPfm1EjZN5sYzyABAJh1lT8ScmIY8eGvCETu1j6hk+j
ZmNWfIXsYFg1x3CbiskGmy/BLecemnXTILxe/OyRsWw/haU1sIu8KeOBVfh49Bge
QtlUw4DEs39ruILvOl/2f+QUruAs/w1nfk6qobrEYbLu+etCtAo0TjjX+Tpnl8in
wPXRgPkCgV60AFTKBFsmbAIxRTMm6WLXn9VrpAjP/3hqBMIWcONeYJN/zdEo9pek
oTCemHW1P7QyMfUMudaVZGO6hbAaiDfHW8vUeL8WOzLdBugJ3oEqIhcZ8BQZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEfXTGurfCLVdhKA5LAr8wHe4K5cwHwYDVR0j
BBgwFoAU/Jf3/4T6igtZkRLsaW4LmawMrFQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9ZTXE5Tm9OOE04NmlUTTlvUHB2TlFMeFFYOEdFdVBMc01OS3lVRkJo
QWUvMC9GQzk3RjdGRjg0RkE4QTBCNTk5MTEyRUM2OTZFMEI5OUFDMENBQzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDOTdGN0ZGODRGQThBMEI1
OTkxMTJFQzY5NkUwQjk5QUMwQ0FDNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm9ZTXE5Tm9OOE04NmlUTTlvUHB2TlFMeFFYOEdFdVBMc01OS3lVRkJoQWUvMC9G
Qzk3RjdGRjg0RkE4QTBCNTk5MTEyRUM2OTZFMEI5OUFDMENBQzU0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIyJuismQLsNHaGoAAeho13Ps1ETIWjhQ1JHjRaPipEzLKyqdfKr8Kf5Ydp2A
bji4yub09VPPCogprX3kGfN/gmpQ7m+i6TYdm94/GLiZLUQdrOE1xoH1Ja+lT6a9
OH3ZLN+dIm6N3mMjJ9HvFhVYya5q3404yEiD//pX7eVkpID+hkvJUpuZoHelN7zu
7vk0nzdPNHa41Ae3brr0JnaTnxj42B44sF80aFU5KvoQH98wKHbffkq50d1v6ICg
XL9CeJAvlxUG4Vis0K3q4jruXCGKl3e8gd1maV+OCJlbbGzXrNeDiMbS3jEr8ch/
RPj5oLGCFQ3P7yFoGkc2DE7dfQ==
-----END CERTIFICATE-----