Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ednu8UmH5sZfAn9E1pEx2D3NH4YC5JwRttFi2tiTDDV/0/FFE27649959B84E46CB7BB756637223036D27AAC.mft
File:                     FFE27649959B84E46CB7BB756637223036D27AAC.mft (raw, json)
Hash identifier:          CMotbZkv/t8T8X5lbt++VNVtOi+lFR/UbBuf0b5Olfk=
Subject key identifier:   AD:93:C7:F3:F1:C4:10:6D:92:CD:26:5E:B6:40:9C:77:AE:AB:FE:EA
Authority key identifier: FF:E2:76:49:95:9B:84:E4:6C:B7:BB:75:66:37:22:30:36:D2:7A:AC
Certificate issuer:       /CN=FFE27649959B84E46CB7BB756637223036D27AAC
Certificate serial:       2B7386A37CE35E4B3192010FA6735CA137BD3FB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE27649959B84E46CB7BB756637223036D27AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ednu8UmH5sZfAn9E1pEx2D3NH4YC5JwRttFi2tiTDDV/0/FFE27649959B84E46CB7BB756637223036D27AAC.mft
Manifest number:          2D
Signing time:             Wed 18 Oct 2023 16:06:14 +0000
Manifest this update:     Wed 18 Oct 2023 16:01:14 +0000
Manifest next update:     Thu 19 Oct 2023 17:46:14 +0000
Files and hashes:         1: 323830343a3663383a3a2f33322d3438203d3e20323632363036.roa (hash: 9SkwGJtkQOa7H7mg1ORGm6JlqsiYwFjgVhYcuudxEBo=)
                          2: FFE27649959B84E46CB7BB756637223036D27AAC.crl (hash: zNBiPMpuWD18UfGu0ZJrH9vhW0S6ENHYfa8Nz+Ioiio=)
                          3: 3137372e3130312e33322e302f32302d3234203d3e20323632363036.roa (hash: +Fb7aTS5Kti42R0Ahl1MjI1Ow8LRILDofWEusq+ZOYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:73:86:a3:7c:e3:5e:4b:31:92:01:0f:a6:73:5c:a1:37:bd:3f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE27649959B84E46CB7BB756637223036D27AAC
        Validity
            Not Before: Oct 18 16:01:14 2023 GMT
            Not After : Oct 19 17:46:14 2023 GMT
        Subject: CN=AD93C7F3F1C4106D92CD265EB6409C77AEABFEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:7a:94:c9:14:1c:f1:5a:0e:78:91:ee:86:
                    21:5f:6e:76:3b:da:0e:98:67:b2:00:bc:61:e9:6a:
                    7d:83:70:b6:bf:92:c2:18:c4:50:a2:0d:93:5b:60:
                    db:23:0b:68:39:33:e3:a8:84:74:73:97:74:73:a6:
                    5b:86:fa:2a:e8:3a:68:61:87:5a:bf:14:d5:c2:96:
                    88:59:e7:4b:f4:0f:ad:78:2e:92:b5:c8:46:ee:43:
                    48:9e:ef:5e:da:0d:05:b8:c6:31:4f:bb:d6:32:28:
                    f7:25:cf:3a:e3:8e:bd:03:94:88:ba:3d:c3:44:01:
                    1f:96:4a:77:dc:d7:82:58:75:6a:47:c7:5d:f3:cf:
                    3d:ef:56:e8:f6:3a:ed:a5:d5:bf:71:b0:c1:25:cd:
                    ff:29:19:a7:7f:a1:ab:ee:8c:4a:95:9a:64:01:e4:
                    cb:60:4e:a5:90:57:c1:89:36:a5:a8:f8:b6:be:33:
                    56:5a:a2:97:a4:62:7b:28:3d:ac:9d:0c:bc:54:b2:
                    59:63:a9:54:1f:1f:9e:e8:a2:54:2e:14:96:e4:70:
                    36:ba:cf:f8:e5:db:96:0a:af:07:f7:85:63:9a:c9:
                    1e:02:9a:31:ea:46:70:a9:9d:b7:b6:e5:bd:cd:7a:
                    7b:dd:6f:60:96:75:41:7b:01:b4:db:44:a5:d1:57:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:93:C7:F3:F1:C4:10:6D:92:CD:26:5E:B6:40:9C:77:AE:AB:FE:EA
            X509v3 Authority Key Identifier:
                keyid:FF:E2:76:49:95:9B:84:E4:6C:B7:BB:75:66:37:22:30:36:D2:7A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ednu8UmH5sZfAn9E1pEx2D3NH4YC5JwRttFi2tiTDDV/0/FFE27649959B84E46CB7BB756637223036D27AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE27649959B84E46CB7BB756637223036D27AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ednu8UmH5sZfAn9E1pEx2D3NH4YC5JwRttFi2tiTDDV/0/FFE27649959B84E46CB7BB756637223036D27AAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8e:8e:85:8a:a5:77:03:ac:b5:0b:a3:4b:20:54:80:85:53:
         9a:82:bf:35:56:57:57:8b:f1:5c:f4:66:ed:4a:18:d4:19:c2:
         f6:4d:f8:35:04:f3:05:5e:24:1f:d8:7c:37:47:58:fb:2a:5d:
         cf:c3:03:56:51:58:57:5e:97:3d:38:c1:18:d2:81:fa:56:bf:
         4c:09:10:91:05:97:04:ba:6b:75:cd:4a:b8:ab:f7:0e:02:6d:
         c1:f5:76:78:44:93:00:67:28:cc:39:42:4c:99:48:cd:4a:86:
         45:99:e5:66:cd:e8:c3:2c:62:e7:f6:36:5f:df:7d:e3:fb:e9:
         26:a4:4b:78:25:d2:23:93:d0:3b:73:d2:36:af:0d:1f:0d:88:
         a0:94:1f:33:bf:13:e3:61:16:76:58:44:51:62:22:cc:d3:7a:
         29:26:f1:c4:8f:1d:35:79:6b:c3:b4:d1:26:d9:8d:24:05:10:
         f1:e1:4d:49:19:3e:43:2b:4b:07:0f:dc:e1:2a:7f:68:e7:90:
         5b:9b:09:9d:4f:01:ec:30:ed:4c:5f:00:de:0e:fb:84:4d:56:
         88:d3:62:5d:cb:55:7e:a5:43:60:c3:d5:b8:75:95:d9:0b:bf:
         c4:47:46:9a:cc:50:13:d5:03:c6:cf:32:ad:58:4f:a0:35:0c:
         47:fe:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----