Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.mft
File:                     FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.mft (raw, json)
Hash identifier:          WlWbpQuGmoPF1MIOPIVH5ExXo3sKwJLrFaCa8bROmYE=
Subject key identifier:   0C:0A:CD:20:1C:64:58:27:6B:6A:BD:10:F9:5F:DD:98:CF:C5:B5:B5
Authority key identifier: FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83
Certificate issuer:       /CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
Certificate serial:       73C6418869C1310860FD20A50059CE4366F72909
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.mft
Manifest number:          6C
Signing time:             Tue 17 Sep 2024 23:38:26 +0000
Manifest this update:     Tue 17 Sep 2024 23:33:26 +0000
Manifest next update:     Thu 19 Sep 2024 02:05:26 +0000
Files and hashes:         1: 3136382e3232372e3131362e302f32322d3234203d3e20323634393130.roa (hash: YiqJoX4W/Uu+LJT650cs4o3403KTGxvYXLhW0thPKvw=)
                          2: 323830343a326663303a3a2f33322d3338203d3e20323634393130.roa (hash: O4x1LwWOa2HYE7TKlawPkLot0p7YljNHnA+V1fu0iMM=)
                          3: FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.crl (hash: cTwxUO+u86Ybeh9VG4+KuzglU22SwPgIq3R57CHo05o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c6:41:88:69:c1:31:08:60:fd:20:a5:00:59:ce:43:66:f7:29:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583
        Validity
            Not Before: Sep 17 23:33:26 2024 GMT
            Not After : Sep 19 02:05:26 2024 GMT
        Subject: CN=0C0ACD201C6458276B6ABD10F95FDD98CFC5B5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:86:73:2c:34:bc:2f:4b:dd:4b:71:bc:2c:
                    21:eb:ad:ec:14:4a:c1:59:27:d4:0d:cc:f4:3f:04:
                    3d:87:5a:1b:b8:ae:57:3f:59:4d:7a:a5:65:bc:fe:
                    0c:12:fc:cc:2f:55:e2:cc:20:58:3d:77:b0:97:92:
                    92:ab:56:f6:65:69:ae:0e:50:72:96:3a:29:fc:b5:
                    f5:f7:1f:ac:cf:e3:3d:23:38:4b:43:1d:18:ca:8e:
                    13:7f:a1:d8:55:80:55:83:10:36:b5:c6:a5:4c:db:
                    ba:0f:27:4f:b1:df:a5:ca:80:a1:89:9f:31:ae:e4:
                    ac:7f:8d:73:2e:f3:73:93:9c:7b:2b:6d:09:79:c8:
                    bd:7d:ab:f6:a5:b7:9c:9a:f2:8e:97:31:9b:aa:1a:
                    98:23:6f:2f:ea:23:e0:9d:dd:2a:2b:30:fa:55:10:
                    58:ca:1e:f8:62:af:69:60:6b:0f:8d:f2:58:b9:76:
                    9c:8e:1b:72:36:f8:e8:9e:28:57:82:93:c8:a8:8f:
                    fd:7d:3a:27:58:86:39:4d:87:97:e4:82:87:95:35:
                    f9:54:a2:a4:2a:25:6a:c2:49:bb:c2:bc:28:86:56:
                    00:9c:11:b3:d8:b3:0c:52:f2:04:4e:99:ce:d2:60:
                    fd:86:e4:0d:41:f3:6c:b3:ba:32:b3:9d:77:a9:77:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0A:CD:20:1C:64:58:27:6B:6A:BD:10:F9:5F:DD:98:CF:C5:B5:B5
            X509v3 Authority Key Identifier:
                keyid:FD:1E:C9:07:2B:F5:14:B8:F7:BE:9A:8E:2C:1F:96:D0:8B:EF:F5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/FD1EC9072BF514B8F7BE9A8E2C1F96D08BEFF583.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:01:a0:58:6c:73:3f:45:41:2b:0f:d0:30:cc:53:69:c3:
         c2:16:14:40:fc:ec:89:d1:c0:8b:a0:cd:66:47:05:f1:1b:2e:
         bc:18:01:af:ea:93:ba:10:3b:a5:1c:6f:20:73:08:d0:a7:66:
         1e:79:55:59:cb:ba:f2:f2:dc:ba:13:13:21:b3:70:5b:37:40:
         1d:3f:7b:17:a1:89:74:95:ae:96:d8:31:85:ba:6f:f2:dc:cc:
         af:79:94:5a:6a:7a:8b:15:0f:8d:1b:9a:37:07:96:12:b8:69:
         14:88:0f:52:72:4c:b4:4b:20:32:92:93:50:5e:29:29:de:22:
         9c:49:da:55:1a:31:f4:b1:78:c9:7e:17:25:73:1b:ce:12:d0:
         e4:cd:17:4c:83:9f:9e:55:f4:e9:4d:fb:4f:8f:e3:e0:ab:76:
         4a:8b:41:9f:08:89:3c:0a:fc:e9:82:b5:98:63:49:a1:47:ba:
         7c:8a:ff:4f:a3:cf:8a:bd:62:0d:07:a3:87:02:4d:35:4d:a4:
         97:77:c8:36:2f:8a:5f:5a:1f:d7:bb:f3:dd:4e:3d:16:bd:e2:
         57:6f:4e:be:68:0f:02:0c:15:ba:c8:fe:b6:b3:b5:f6:d5:06:
         99:db:bd:4a:12:67:46:82:43:ac:6c:ee:20:6e:82:39:15:15:
         ab:1e:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----