Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/F212AF4C2A5D2078BABBEBE66DD262805FA950A1.mft
File:                     F212AF4C2A5D2078BABBEBE66DD262805FA950A1.mft (raw, json)
Hash identifier:          gpo7BMTyEayJhrSOFp3bliEfaSt7oRmIdr19dlE14nw=
Subject key identifier:   7D:19:88:25:93:BF:BA:6C:08:F8:42:B2:EB:35:D5:87:46:53:9A:54
Authority key identifier: F2:12:AF:4C:2A:5D:20:78:BA:BB:EB:E6:6D:D2:62:80:5F:A9:50:A1
Certificate issuer:       /CN=F212AF4C2A5D2078BABBEBE66DD262805FA950A1
Certificate serial:       27C12EE111495D6DFD600530EA55703FC7AA8FBA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F212AF4C2A5D2078BABBEBE66DD262805FA950A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/F212AF4C2A5D2078BABBEBE66DD262805FA950A1.mft
Manifest number:          08
Signing time:             Wed 21 Feb 2024 07:31:06 +0000
Manifest this update:     Wed 21 Feb 2024 07:26:06 +0000
Manifest next update:     Thu 22 Feb 2024 08:47:06 +0000
Files and hashes:         1: F212AF4C2A5D2078BABBEBE66DD262805FA950A1.crl (hash: ZPhI/lV7ve0FKt8RqklyVkU8RnHDRAKGEb4mKFm+Ofc=)
                          2: 323830343a323732303a3a2f33322d313238203d3e20323633383738.roa (hash: h5XkNuiDwTXvzaam5vSROcIJ0qBChqTe0AganufAq6M=)
                          3: 3133382e3230342e32302e302f32322d3332203d3e20323633383738.roa (hash: mLp40Vvnz+81cfHLGfluUL9XsK7Dypn+tEqAmaqnQtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c1:2e:e1:11:49:5d:6d:fd:60:05:30:ea:55:70:3f:c7:aa:8f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F212AF4C2A5D2078BABBEBE66DD262805FA950A1
        Validity
            Not Before: Feb 21 07:26:06 2024 GMT
            Not After : Feb 22 08:47:06 2024 GMT
        Subject: CN=7D19882593BFBA6C08F842B2EB35D58746539A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:f3:0f:f7:51:d8:11:49:19:21:73:be:55:
                    fd:ad:20:f1:cf:3d:46:ad:9c:e9:90:0d:ce:e4:81:
                    64:a0:d6:1e:9e:1d:99:fb:e9:f5:ee:1e:24:00:a6:
                    57:ee:2a:4f:90:91:f1:70:87:ba:28:4d:ba:60:9f:
                    a2:63:32:af:c4:75:df:02:82:f5:bd:e4:ea:f3:e3:
                    ee:21:72:b1:4f:fb:e7:a4:60:5c:20:e9:e8:8e:46:
                    c1:6e:29:4b:eb:85:92:5d:9a:6f:b4:02:0a:5d:ed:
                    36:7f:a2:72:e1:23:d5:3a:9f:e4:18:8a:0b:58:4c:
                    fc:22:73:cd:a1:60:31:e2:7e:94:7e:5d:bf:13:b7:
                    93:2a:9f:8f:21:56:d5:19:8c:f2:af:df:fb:86:89:
                    ac:58:db:82:36:c6:11:e6:eb:6d:c8:40:b2:73:79:
                    bd:bb:6f:0e:ea:29:30:20:9c:f2:cb:9c:97:54:c3:
                    16:6f:9f:0a:04:45:54:c7:56:0b:d4:ff:4b:bc:74:
                    a3:24:ae:3d:28:05:91:05:4d:82:3e:95:eb:9c:76:
                    d8:84:f9:67:72:61:f3:04:f0:73:b1:5c:83:2d:9a:
                    80:22:c7:dc:20:af:78:48:7f:bb:de:9d:9d:7e:c2:
                    bd:9d:cb:d0:95:42:41:5e:22:5f:60:ae:ae:f3:d5:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:88:25:93:BF:BA:6C:08:F8:42:B2:EB:35:D5:87:46:53:9A:54
            X509v3 Authority Key Identifier:
                keyid:F2:12:AF:4C:2A:5D:20:78:BA:BB:EB:E6:6D:D2:62:80:5F:A9:50:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/F212AF4C2A5D2078BABBEBE66DD262805FA950A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F212AF4C2A5D2078BABBEBE66DD262805FA950A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/F212AF4C2A5D2078BABBEBE66DD262805FA950A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:d6:a7:fd:5a:2b:b6:a7:38:17:35:44:11:54:b3:7b:d3:
         98:32:82:98:28:b4:a8:67:69:b3:c8:04:86:96:b7:4d:3a:34:
         27:2e:00:f6:6e:15:62:4e:f5:3e:cd:06:42:49:8f:15:1f:ad:
         a1:30:96:33:bf:5f:38:ca:b4:1f:c3:1c:ac:46:84:a2:b2:fe:
         59:6c:16:6b:cf:dc:9a:86:68:40:41:79:95:74:c2:9a:38:22:
         91:55:cc:d9:42:4b:f3:46:4e:4b:81:ba:b4:a3:b6:12:4d:1b:
         24:72:eb:d3:a4:85:6d:59:f9:77:92:7f:bc:74:aa:57:c0:c2:
         70:97:24:e1:fc:54:90:de:5f:d4:8f:77:d8:9c:f1:ea:4e:46:
         31:ad:71:9c:a8:d3:e2:49:99:57:6c:90:f1:29:2a:78:13:12:
         db:76:64:ff:d9:f6:cf:ed:d7:f9:5c:7a:39:64:79:f7:4b:00:
         98:97:09:40:8e:4d:a2:f7:57:2f:18:98:2b:dc:1d:bd:dc:78:
         32:3d:74:de:f1:62:e8:8f:9c:bb:65:ec:3f:85:38:c7:14:cb:
         54:21:c0:43:54:a3:a8:2e:2b:c0:8c:bd:77:9b:e6:a3:fb:83:
         c9:57:9a:86:bb:9c:51:b7:82:aa:12:78:da:0e:fc:5f:4c:f9:
         4a:3f:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----