Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.mft
File:                     255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.mft (raw, json)
Hash identifier:          gKsgbRTYv0xvV/tBRvI5aeJeDppUul7YyCVrSNYwurY=
Subject key identifier:   FC:D1:3C:85:30:47:B7:9E:26:69:60:D4:3B:0A:67:EA:28:32:00:16
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Certificate issuer:       /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial:       1867F88C8D486ACC274CCDE25602F196C4188C2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.mft
Manifest number:          AA
Signing time:             Tue 09 Jul 2024 09:01:26 +0000
Manifest this update:     Tue 09 Jul 2024 08:56:26 +0000
Manifest next update:     Wed 10 Jul 2024 10:43:26 +0000
Files and hashes:         1: 3230302e33342e3231382e302f32332d3234203d3e203631363839.roa (hash: TQIV1JQwtxn9ceiRU0S5zFlg0oN5QeexzJNSoa4Ra0Q=)
                          2: 3137372e38342e3233382e302f32332d3234203d3e203631363839.roa (hash: ytp4pjOYrCjOekNnkpc1akIPL7pk/fFiOyXbB3VQ5/Y=)
                          3: 323830343a316430343a3a2f33322d3438203d3e203631363839.roa (hash: KchcJOWbckoOjwJwNiWmTaHBbeSF1iu503vNwodQ/bo=)
                          4: 3137372e38342e3233362e302f32332d3234203d3e203631363839.roa (hash: rRdfvOyMYpBr3+95tMbX3tDiJKOqhFQcngStsAojxQ8=)
                          5: 3133312e3130382e3132362e302f32332d3234203d3e203631363839.roa (hash: wi/Ls3yqkKmqdgqK/V4ZcmkN1hBQlrc4LOvMicCmw7g=)
                          6: 3230302e33342e3231362e302f32332d3234203d3e203631363839.roa (hash: KBCzPBBkH7H6r5mPH1OwdigWl5S+eAjWl5YmTRbhUfQ=)
                          7: 3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa (hash: mHDirhZP+OsL7DvrFgsw9ZJR+EYtkbU5lhCLxedECOo=)
                          8: 255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl (hash: SysLHYpcc/mZAOHze1ngh9o7Wk2QakZppcOz9xNVqVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:67:f8:8c:8d:48:6a:cc:27:4c:cd:e2:56:02:f1:96:c4:18:8c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
        Validity
            Not Before: Jul  9 08:56:26 2024 GMT
            Not After : Jul 10 10:43:26 2024 GMT
        Subject: CN=FCD13C853047B79E266960D43B0A67EA28320016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:ef:d6:c2:b8:f6:42:b8:84:1e:d3:6f:7f:
                    0d:ff:76:f8:65:fb:79:0f:ba:5a:f0:0d:de:63:bf:
                    5a:42:8c:bd:95:03:3f:99:f5:10:07:77:a6:17:a9:
                    66:18:bf:cb:b2:73:ba:b9:0e:82:9d:16:b2:5a:c4:
                    99:17:96:b5:59:70:8b:b2:5d:f5:c7:f6:29:d4:9c:
                    31:64:7f:bc:98:bc:39:33:9a:c3:92:73:1e:32:53:
                    33:a2:13:ef:ed:1e:17:e8:07:e1:1e:de:37:a2:d4:
                    22:44:1a:d8:94:ba:90:80:42:b4:d9:a7:38:c6:01:
                    4a:07:18:c6:8d:68:1c:dd:f8:46:b3:49:ab:ba:28:
                    05:04:b3:6c:e4:d0:5f:4f:55:50:10:01:cd:6e:2d:
                    95:05:af:99:15:6d:d3:cc:e5:33:1b:cf:cb:c6:51:
                    ba:d2:b2:ab:96:c7:f4:2f:50:42:01:a6:13:e6:86:
                    55:6b:2f:83:e4:ec:11:af:60:2f:73:20:e4:2e:91:
                    c3:1b:dd:ac:c3:fa:28:9b:07:e1:81:1c:f7:98:02:
                    10:57:e4:18:46:74:58:65:bd:b2:22:78:81:ed:8e:
                    21:52:32:c7:a1:92:f0:db:c6:4b:0e:b6:8a:fe:2d:
                    ed:64:db:30:dd:73:37:e4:63:b8:fb:b4:14:66:35:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D1:3C:85:30:47:B7:9E:26:69:60:D4:3B:0A:67:EA:28:32:00:16
            X509v3 Authority Key Identifier:
                keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:a0:f6:ca:13:88:7c:f0:36:62:93:54:10:93:05:b3:70:
         73:3d:2f:9f:c8:3b:3b:b6:63:df:66:ed:5a:7b:d9:b6:6e:15:
         ac:47:7c:4f:0b:79:f4:20:17:18:b8:7a:42:e9:f2:86:b7:9c:
         43:cb:b1:02:cf:d6:96:81:bb:ab:4c:68:91:de:00:1f:27:af:
         69:39:c7:92:ac:6b:b3:4c:28:88:7a:8e:38:96:cd:06:95:08:
         7d:28:48:ed:d0:7b:5d:ed:6e:87:46:45:19:59:e2:64:b4:35:
         cc:3e:bb:78:c1:30:8f:35:4a:74:82:74:c5:b2:4c:71:fb:ab:
         98:cd:27:c2:3e:42:47:b5:2d:fe:3a:03:6c:21:af:d6:63:ca:
         7b:17:ea:30:d7:d9:e9:8b:97:07:5d:fe:b3:14:27:8c:c1:50:
         86:d7:84:d9:a9:4c:83:f3:63:b3:e7:f9:f7:d9:e2:1e:91:b7:
         a6:8e:98:bd:69:24:92:e0:ed:95:fe:12:83:14:bd:eb:fa:e6:
         e4:08:3e:a3:15:2b:f4:22:4f:da:8e:ee:1f:be:e8:53:df:d8:
         05:42:4a:41:a3:fe:77:3a:8b:5f:6c:4b:87:4f:ce:b4:37:5b:
         71:d9:8d:a0:f8:fe:a0:99:1c:d1:54:ee:9d:ed:1e:86:e1:43:
         e4:87:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 04:39:52 2024 by rpki-client on console-fra.rpki-client.org