Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.mft
File:                     FB4BF9A320697AA48C489FC1AFF256419DED5EE1.mft (raw, json)
Hash identifier:          gke5+kQgMuzOF1CTFwSbLdycHkSN4dhn3QmJI/7Lxrw=
Subject key identifier:   7F:C4:A9:33:7B:BF:D6:64:F2:7D:A2:72:2D:18:53:C2:50:C2:2E:36
Authority key identifier: FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1
Certificate issuer:       /CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
Certificate serial:       2B4AB8F428C6ACC8D99FB3C945B9540A01B3BE1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.mft
Manifest number:          01CE
Signing time:             Mon 15 Apr 2024 11:32:23 +0000
Manifest this update:     Mon 15 Apr 2024 11:27:23 +0000
Manifest next update:     Tue 16 Apr 2024 12:19:23 +0000
Files and hashes:         1: 3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa (hash: LwWizgcTNBjjaI6BvLfkYny4pCnrQ5UYBOEzLBtsUno=)
                          2: 3137372e38362e32382e302f32322d3234203d3e20323632343932.roa (hash: +Avtqd2R4MoAQrmfT3u7ARPj9iw4nsvDZPGjn0jngGM=)
                          3: 323830343a313433343a3a2f33322d3438203d3e20323632343932.roa (hash: htw4u8T+YYjMp6b4b+PCRt0YFgkbydLnnfnVCtlGwKs=)
                          4: 3136382e3132312e3130382e302f32322d3234203d3e20323632343932.roa (hash: v3XObKspc2NMoUqs3NFjQsVcF+TzkB1DuNZ4ddCmxUE=)
                          5: FB4BF9A320697AA48C489FC1AFF256419DED5EE1.crl (hash: GLO1xO411PpdTSUKC8BbsDnEROzwU/F7VFy4PG0Xmts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4a:b8:f4:28:c6:ac:c8:d9:9f:b3:c9:45:b9:54:0a:01:b3:be:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
        Validity
            Not Before: Apr 15 11:27:23 2024 GMT
            Not After : Apr 16 12:19:23 2024 GMT
        Subject: CN=7FC4A9337BBFD664F27DA2722D1853C250C22E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:47:83:3a:0c:90:a3:8b:59:76:13:d2:6e:
                    3c:07:0b:74:07:c7:13:29:91:24:df:b0:43:cf:02:
                    73:a9:15:34:66:76:76:5d:4c:46:8e:11:7c:55:98:
                    ed:75:9f:35:3f:53:40:60:24:27:19:b2:0f:f7:d5:
                    13:3d:23:e9:05:56:b6:15:ab:23:d0:4d:46:b2:8b:
                    56:fc:75:b0:54:5c:cf:eb:70:cf:7c:af:8f:46:af:
                    6c:4d:80:a4:94:b5:b8:60:8c:f2:04:c8:c3:61:6d:
                    ab:d3:6d:4a:83:a0:f1:65:37:6e:76:c1:b6:64:76:
                    64:49:31:67:5b:60:55:5a:5c:db:b0:94:9b:ac:7b:
                    89:75:73:fd:28:59:3b:0d:37:35:5f:dd:54:76:a4:
                    f8:72:41:af:a8:c3:33:ef:f0:c0:9e:c0:2a:e8:91:
                    6e:7a:ab:e3:77:1f:ce:41:14:e2:1c:c4:38:63:9d:
                    f9:01:3f:24:5c:2b:bd:28:4b:ce:86:78:90:f1:42:
                    93:65:c7:7b:01:30:c7:6e:74:c5:03:8f:da:c8:b5:
                    2e:56:96:37:09:95:70:29:7d:1b:7b:db:49:3f:05:
                    69:ff:36:62:de:a2:20:fd:21:6f:76:bd:7d:8d:3c:
                    95:66:bd:08:0a:c1:87:10:32:8d:f4:71:5f:5e:61:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C4:A9:33:7B:BF:D6:64:F2:7D:A2:72:2D:18:53:C2:50:C2:2E:36
            X509v3 Authority Key Identifier:
                keyid:FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:b0:6f:a2:ca:76:e9:97:c5:b0:b3:cd:1b:d1:cc:03:2c:
         b5:a1:32:d4:48:eb:ec:00:96:9a:3f:97:75:86:7c:76:5f:1d:
         3c:3f:55:c7:34:49:a2:d1:dc:aa:5c:f4:57:e9:34:9b:84:89:
         2b:78:23:f5:10:aa:f3:73:00:6f:b2:a8:98:44:67:37:07:09:
         b7:87:23:b0:00:5e:b4:17:61:59:a6:c8:51:a8:5f:68:67:65:
         e5:b9:72:a0:e3:93:e5:43:d9:56:83:c6:e7:0c:97:38:0d:08:
         f6:c4:df:90:08:0f:8b:b8:ae:ba:27:b2:b4:1b:da:29:14:12:
         bc:98:33:f6:e2:1f:73:b2:0e:1f:9b:d9:82:23:86:f6:62:4c:
         d4:3f:1a:22:41:ae:7e:7f:55:83:c4:62:28:21:c7:65:32:ee:
         40:d1:58:55:61:66:f8:53:e8:a7:e2:fb:fe:a6:d9:7f:72:dd:
         af:f7:ba:48:b2:01:a6:5d:32:f2:73:a7:65:62:fa:e7:71:2e:
         32:2a:c1:29:d1:c6:41:69:1f:d2:33:75:7a:a8:e8:10:b5:30:
         06:30:d3:7c:77:81:80:86:26:64:d0:9f:33:d4:27:0e:f6:7b:
         82:b2:c9:b3:2a:f5:01:60:b0:ff:46:9c:84:df:21:03:36:ae:
         07:87:b0:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK0q49CjGrMjZn7PJRblUCgGzvhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0QkY5QTMyMDY5N0FBNDhDNDg5RkMxQUZGMjU2NDE5
REVENUVFMTAeFw0yNDA0MTUxMTI3MjNaFw0yNDA0MTYxMjE5MjNaMDMxMTAvBgNV
BAMTKDdGQzRBOTMzN0JCRkQ2NjRGMjdEQTI3MjJEMTg1M0MyNTBDMjJFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOI0eDOgyQo4tZdhPSbjwHC3QH
xxMpkSTfsEPPAnOpFTRmdnZdTEaOEXxVmO11nzU/U0BgJCcZsg/31RM9I+kFVrYV
qyPQTUayi1b8dbBUXM/rcM98r49Gr2xNgKSUtbhgjPIEyMNhbavTbUqDoPFlN252
wbZkdmRJMWdbYFVaXNuwlJuse4l1c/0oWTsNNzVf3VR2pPhyQa+owzPv8MCewCro
kW56q+N3H85BFOIcxDhjnfkBPyRcK70oS86GeJDxQpNlx3sBMMdudMUDj9rItS5W
ljcJlXApfRt720k/BWn/NmLeoiD9IW92vX2NPJVmvQgKwYcQMo30cV9eYUBrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUf8SpM3u/1mTyfaJyLRhTwlDCLjYwHwYDVR0j
BBgwFoAU+0v5oyBpeqSMSJ/Br/JWQZ3tXuEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtheWhnRjNNZnBpWFc1MVVtVzRLMzJVSHExUkpiZTg4ZTJWdFBmd2tw
YmEvMC9GQjRCRjlBMzIwNjk3QUE0OEM0ODlGQzFBRkYyNTY0MTlERUQ1RUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNEJGOUEzMjA2OTdBQTQ4
QzQ4OUZDMUFGRjI1NjQxOURFRDVFRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWtheWhnRjNNZnBpWFc1MVVtVzRLMzJVSHExUkpiZTg4ZTJWdFBmd2twYmEvMC9G
QjRCRjlBMzIwNjk3QUE0OEM0ODlGQzFBRkYyNTY0MTlERUQ1RUUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASJqwb6LKdumXxbCzzRvRzAMstaEy1Ejr7ACWmj+XdYZ8dl8dPD9VxzRJotHc
qlz0V+k0m4SJK3gj9RCq83MAb7KomERnNwcJt4cjsABetBdhWabIUahfaGdl5bly
oOOT5UPZVoPG5wyXOA0I9sTfkAgPi7iuuieytBvaKRQSvJgz9uIfc7IOH5vZgiOG
9mJM1D8aIkGufn9Vg8RiKCHHZTLuQNFYVWFm+FPop+L7/qbZf3Ldr/e6SLIBpl0y
8nOnZWL653EuMirBKdHGQWkf0jN1eqjoELUwBjDTfHeBgIYmZNCfM9QnDvZ7grLJ
syr1AWCw/0achN8hAzauB4ewow==
-----END CERTIFICATE-----