Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft
File:                     F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft (raw, json)
Hash identifier:          v4quNYyehqj5Y4K58+x3RfrvzDp/Be6Q0TpRVkP1Nc8=
Subject key identifier:   2F:16:8A:6B:77:E8:01:6E:A3:8B:C8:F2:F4:C2:B6:5B:2D:34:22:EF
Authority key identifier: F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85
Certificate issuer:       /CN=F9AA4548FC56DE800F12B58EFA6C206EA63B0585
Certificate serial:       3A2227F97F0CF11FE29A462DE17C4715DB04342A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft
Manifest number:          36
Signing time:             Mon 12 Aug 2024 18:57:23 +0000
Manifest this update:     Mon 12 Aug 2024 18:52:23 +0000
Manifest next update:     Tue 13 Aug 2024 21:37:23 +0000
Files and hashes:         1: 34352e3136362e342e302f32322d3234203d3e20323637393432.roa (hash: VAgT33CS2JGfL/TvvRP7JsLtZPYNHUPXnZ5pbe3hAK8=)
                          2: F9AA4548FC56DE800F12B58EFA6C206EA63B0585.crl (hash: po32X7UYWBj2YVLAZqbpFrbTe12xSVojkZyyEzVIpWg=)
                          3: 323830343a353539303a3a2f33322d313238203d3e20323637393432.roa (hash: FUMY0wbsSdx/LAHr9ZWMLjeqqX4bWpYRCqms/TdW5Fo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:22:27:f9:7f:0c:f1:1f:e2:9a:46:2d:e1:7c:47:15:db:04:34:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9AA4548FC56DE800F12B58EFA6C206EA63B0585
        Validity
            Not Before: Aug 12 18:52:23 2024 GMT
            Not After : Aug 13 21:37:23 2024 GMT
        Subject: CN=2F168A6B77E8016EA38BC8F2F4C2B65B2D3422EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:23:20:17:40:35:b4:5c:38:9b:a8:f8:34:
                    9a:39:32:76:74:59:1e:52:a1:51:f4:2c:34:2e:21:
                    85:b1:3d:af:b0:c4:fa:3f:1c:84:c8:f1:4e:35:24:
                    1e:c8:6c:5d:6c:37:ec:f9:52:d9:3c:60:3b:45:c5:
                    1b:5e:a3:92:9a:ed:b7:67:fb:6a:bd:b7:ac:65:33:
                    96:54:42:e7:a7:6f:57:b2:1e:e6:cf:64:47:4f:4b:
                    98:b5:df:14:2e:f6:b8:39:8a:a0:3d:76:6c:06:e7:
                    e1:c9:b4:13:71:2b:dd:bb:5c:98:4d:7a:89:81:18:
                    e4:f1:02:04:53:db:4e:85:23:fb:77:bd:a9:66:47:
                    cc:83:35:a6:7d:4b:b3:84:89:25:45:96:e6:a7:76:
                    5e:69:9f:9b:a4:b7:16:d3:58:6f:0c:46:bb:a5:b8:
                    1e:39:69:de:7c:f9:76:9f:ef:bf:59:86:27:43:8b:
                    e6:37:61:00:94:b3:7a:02:99:dd:7b:12:ce:f8:e6:
                    c8:04:a9:2d:db:a9:b5:0b:0d:22:ac:f3:75:b9:1f:
                    bc:f8:e5:f2:9e:8c:ae:ae:a6:95:a9:fa:fe:ce:d9:
                    da:be:66:93:73:f2:2e:d6:aa:81:7c:01:09:e1:02:
                    f9:a9:c8:7e:68:40:40:3f:13:d0:d4:3f:2d:2c:ff:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:8A:6B:77:E8:01:6E:A3:8B:C8:F2:F4:C2:B6:5B:2D:34:22:EF
            X509v3 Authority Key Identifier:
                keyid:F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:f4:e7:ff:53:17:24:31:9b:cc:51:e3:17:b0:e1:93:e2:
         38:d2:25:3b:77:bb:90:11:8f:9f:00:d6:bb:03:58:90:0c:b6:
         d4:ca:2f:37:ce:03:d0:f1:03:92:ed:57:3a:ef:fe:f4:39:c7:
         8e:bf:dd:86:cc:fa:e5:d4:ae:f4:f4:1f:d1:df:d0:4b:27:73:
         96:9d:ce:de:e9:a0:0d:1a:37:79:31:23:e6:79:21:c7:4b:86:
         81:ed:b7:cb:91:6c:13:db:8d:39:ad:c6:e5:00:b9:8f:58:0c:
         15:71:00:df:02:55:a9:46:76:7f:21:36:d3:28:fe:b2:ed:cf:
         d8:b9:e9:24:a8:32:fb:5a:8f:c3:0c:2a:e8:c4:d8:b1:a3:87:
         0b:a5:3d:88:82:a7:e5:e0:4b:d3:20:9a:35:63:96:d5:8b:83:
         b6:75:0d:db:35:1a:c1:b0:61:6f:7c:1f:a4:db:aa:50:ee:f6:
         03:10:01:88:ef:4a:b9:5a:d2:87:23:dd:90:11:4a:a8:c8:d1:
         a2:63:59:78:7f:fe:2e:4e:d1:d5:a1:6f:58:17:7d:69:96:34:
         61:de:a9:f2:2e:8a:a6:d4:0a:49:7c:0c:77:80:42:77:12:43:
         32:67:36:29:d8:9a:0a:80:c5:0c:77:f2:43:4d:10:01:d0:13:
         05:62:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----