Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.mft
File:                     FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.mft (raw, json)
Hash identifier:          K1DgEN27FZzbQ0nv9XCetRCkXsTGlSM+OH4hEtQAmf4=
Subject key identifier:   E8:EB:B4:D4:91:5C:E3:8D:82:4A:14:29:1C:3B:82:02:47:69:F2:BD
Authority key identifier: FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
Certificate issuer:       /CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
Certificate serial:       59530F27BBF00AE491A69512962ED4A50FD8E20D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.mft
Manifest number:          10
Signing time:             Fri 07 Apr 2023 03:18:16 +0000
Manifest this update:     Fri 07 Apr 2023 03:13:16 +0000
Manifest next update:     Sat 08 Apr 2023 05:10:16 +0000
Files and hashes:         1: FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.crl (hash: Wu8MftPiUpCNX2UcQdJ4Mqw2bF9wnSEFx7XjmgpfiE0=)
                          2: 3133382e39372e3131322e302f32322d3232203d3e20323634313633.roa (hash: dPEWpWB09Cc5RX6ZkPhuzmpcwp3ok+pPt+G0v9YYmHw=)
                          3: 3133382e39372e3131352e302f32342d3234203d3e20323634313633.roa (hash: a5UHC+ee/Hjc2exzOISJiSoRLn5oWDa1h7EeiIbjJ54=)
                          4: 3133382e39372e3131342e302f32342d3234203d3e20323634313633.roa (hash: Mzg3J1U46JL5fs6JlPerruP91H11p9HSNL2/5mwLkGg=)
                          5: 323830343a323337343a3a2f33322d3332203d3e20323634313633.roa (hash: W7TsQgVJVQ6P1VjB7UTdVC/WPDpHgQ8FoUIIoMY4xxs=)
                          6: 3133382e39372e3131332e302f32342d3234203d3e20323634313633.roa (hash: effw3qhmMJL3vn5bJTMhqnFr5bihzC8CM9mQoj1weIU=)
                          7: 3133382e39372e3131322e302f32342d3234203d3e20323634313633.roa (hash: pExrbTK68DS9cOnKnLX43QkkIsAaJnkOmcAww/oKwUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:53:0f:27:bb:f0:0a:e4:91:a6:95:12:96:2e:d4:a5:0f:d8:e2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
        Validity
            Not Before: Apr  7 03:13:16 2023 GMT
            Not After : Apr  8 05:10:16 2023 GMT
        Subject: CN=E8EBB4D4915CE38D824A14291C3B82024769F2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:5e:5d:bb:8b:55:13:c0:bd:98:e3:36:95:
                    81:71:86:5e:ab:92:c5:5f:fb:14:a5:28:2d:3c:42:
                    ec:52:5e:b1:8c:0e:cf:83:f5:46:93:29:12:9f:7f:
                    12:b1:67:b9:6c:ca:5d:94:e8:0d:f4:d7:fe:78:05:
                    42:8f:91:27:63:0c:a5:d9:f6:98:0c:d0:3d:31:21:
                    da:28:a5:ba:44:26:7b:40:21:ee:c4:75:bf:e1:e3:
                    be:95:be:7d:6e:c3:b4:1d:81:29:9e:8f:79:6f:f8:
                    62:30:a5:1e:44:37:8a:79:39:fb:b3:66:ed:4a:7b:
                    7b:51:b2:26:e8:09:95:55:88:1a:90:f8:e1:d5:8c:
                    e7:8d:9f:59:12:eb:00:c4:e0:02:99:51:74:67:b0:
                    b5:81:8a:bf:94:d1:ef:1c:8a:93:05:fb:5a:36:f3:
                    84:59:59:2a:4c:78:a3:c6:02:47:5e:25:d9:0f:49:
                    5d:55:90:0c:ba:e6:a6:30:1c:07:7b:97:4c:15:9c:
                    48:59:87:06:39:fa:18:3d:6c:5f:a6:c5:19:21:44:
                    ec:a8:22:6a:97:79:5a:a0:11:ed:7c:cf:88:bc:da:
                    38:0a:9c:79:be:03:9c:79:ad:2e:eb:68:5d:f1:8e:
                    16:17:9a:19:0d:65:95:a1:ab:3a:33:ff:fa:24:77:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:B4:D4:91:5C:E3:8D:82:4A:14:29:1C:3B:82:02:47:69:F2:BD
            X509v3 Authority Key Identifier:
                keyid:FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:91:26:e3:0a:cd:00:64:c5:28:b3:f2:3c:d1:85:3d:e0:1e:
         15:52:09:1f:7e:bd:97:5f:e0:2d:60:db:d6:1f:ae:df:21:16:
         61:ab:6f:0b:98:6e:0b:1f:d9:09:75:df:9f:c2:c5:ff:53:c3:
         4f:98:19:51:23:fc:6a:98:a1:61:01:ce:11:82:ad:e5:4d:a0:
         18:f5:ca:69:68:ba:f8:d4:87:02:70:6b:42:62:7f:6a:d7:9b:
         a8:72:4c:f4:62:4b:3a:e1:8f:19:65:b0:47:f6:b3:94:8b:77:
         5e:0a:84:7b:d3:fe:fc:96:7e:37:87:52:77:f4:7f:24:a4:5d:
         fe:93:be:50:2d:ec:91:01:65:90:13:0e:3a:33:c2:c9:98:4f:
         d4:eb:75:4e:c7:f9:a8:19:32:4b:ac:40:82:f9:6d:cc:f4:99:
         08:bd:4b:fc:35:30:a5:9d:af:12:8c:71:61:2a:8c:25:41:a8:
         fa:8a:d0:48:96:e1:e8:e4:61:36:bb:f9:d0:6c:82:54:15:ec:
         1b:f1:ab:aa:72:b8:b0:6c:93:9e:34:a5:2d:0e:2b:8a:0c:8c:
         3c:fa:6c:04:b5:c0:9b:ca:56:54:d2:44:0d:42:c7:11:c1:fa:
         46:ea:19:5f:f1:df:7f:8f:b3:7b:53:73:29:9c:c2:30:41:7b:
         73:31:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org