Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.mft
File:                     FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.mft (raw, json)
Hash identifier:          zG9z/FYQIlmN1JgdD1aA7JmlPUV82zIzvnjyg//N6OM=
Subject key identifier:   89:B0:A3:F7:DE:CD:F5:0C:C7:2E:6B:D2:3C:F4:A8:86:4E:65:BD:D6
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       26BAECB1E711F3640115C6527BC0F2363630446E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.mft
Manifest number:          0292
Signing time:             Mon 15 Apr 2024 10:26:05 +0000
Manifest this update:     Mon 15 Apr 2024 10:21:05 +0000
Manifest next update:     Tue 16 Apr 2024 12:42:05 +0000
Files and hashes:         1: 3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (hash: DSYD6mTLP/DB1JGdLe5JrF9IjkuE+DRieH143pr2V7s=)
                          2: FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl (hash: IOzzZgvWlYx1U4kaFWdzqvXcengnsHGcFkZurqHIaug=)
                          3: 3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (hash: 2wkfXHRYJKqfQcEnp/YJ+MNyfPaf2PEr3Jb9Vu6jDg0=)
                          4: 3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (hash: 0pZYDVb/G2N87oe5wvgIQQGWmKw5DgZoZY6k9OWNT44=)
                          5: 3137372e33392e32342e302f32322d3234203d3e20323632333734.roa (hash: 1Z+0qXE/MtSX7h49raAMYTx4oGNPGHkXZsMokwIRpgk=)
                          6: 323830343a3837383a3a2f33322d3438203d3e20323632333734.roa (hash: S7AglbExF/kt006J+zSQukMOk3o5Ap9yZ7H5hpB6kw0=)
                          7: 3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (hash: pOHLGYriynrrTLQCHnZfS2k4zODox5u1FS1TSZLOe2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ba:ec:b1:e7:11:f3:64:01:15:c6:52:7b:c0:f2:36:36:30:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Apr 15 10:21:05 2024 GMT
            Not After : Apr 16 12:42:05 2024 GMT
        Subject: CN=89B0A3F7DECDF50CC72E6BD23CF4A8864E65BDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:3a:02:de:74:e7:7a:b4:db:4c:6e:7e:d3:
                    dc:17:51:96:63:ad:57:32:80:4f:c5:39:43:38:cb:
                    29:38:41:06:a7:25:78:7d:08:d7:2f:38:07:0e:28:
                    93:2a:96:56:a4:49:76:a1:72:25:9e:24:e1:f7:00:
                    40:c2:62:bd:e4:e7:13:58:f9:88:ce:05:37:c0:bd:
                    40:ec:9f:a9:97:fb:9d:d7:bf:d6:d4:1e:bd:d7:39:
                    68:f9:bb:b0:ab:bf:f8:bc:fc:21:f9:35:3d:6e:bd:
                    53:a9:96:51:cb:ef:03:7e:bc:12:2a:ec:f3:4c:fd:
                    e1:53:20:a6:07:68:11:17:8a:b0:1b:69:d2:44:32:
                    1a:3b:36:ee:44:dc:0a:fe:45:0a:00:c3:63:3d:36:
                    f2:44:46:a0:f2:8c:04:62:89:7b:ca:d2:ac:75:a4:
                    27:15:c7:ff:fe:ad:0e:01:16:61:f6:99:af:e0:67:
                    64:d5:24:cc:60:b7:87:a3:a4:97:1d:a3:87:ec:2f:
                    27:ea:56:ef:f9:d9:fd:e0:37:34:a8:16:1d:0d:fc:
                    ca:09:d6:c8:e4:8c:05:c4:04:55:c5:30:7c:34:bd:
                    e1:b0:9d:b1:10:b4:f8:42:a3:a1:d6:38:2c:4f:ab:
                    e2:65:0c:13:e3:05:e0:ff:cf:ef:00:2e:f6:d6:8f:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B0:A3:F7:DE:CD:F5:0C:C7:2E:6B:D2:3C:F4:A8:86:4E:65:BD:D6
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:47:e0:63:9a:bf:ef:df:4c:e8:60:06:4c:ed:20:ea:f4:
         29:b8:9e:5e:aa:f8:3b:a8:6c:80:5b:e8:b0:23:f1:cb:4e:57:
         47:89:00:4a:48:10:8b:39:de:3b:c4:a1:0e:26:45:b3:5f:d1:
         80:b3:c8:16:0f:61:4c:5e:11:3b:3a:2f:3e:fe:8e:94:43:8b:
         8f:27:0a:73:07:11:9d:89:cf:c1:03:8e:59:7c:5f:22:03:cf:
         1e:b9:68:47:39:7f:91:61:06:2b:6e:1f:52:76:e4:f3:2f:6d:
         c7:48:66:2c:09:1c:5d:5d:f4:0e:20:b5:c9:84:a9:01:3c:8b:
         b0:ee:e7:b3:a2:01:81:f1:ee:c3:6e:e5:e3:e5:f7:74:6d:35:
         19:5c:a3:55:b1:db:dd:eb:d8:73:2e:2a:fd:86:1c:80:bb:e7:
         b5:69:7a:2d:e4:e6:03:af:9b:e2:a0:cb:3c:53:f1:e5:ce:c8:
         d6:09:74:ff:ec:f8:e8:1b:3c:9b:c0:78:42:ea:ab:fb:ae:d0:
         24:6f:65:84:cf:78:a3:c6:2a:96:5f:68:0f:08:72:52:7c:e5:
         f4:95:1f:ab:74:3c:ac:28:f3:fd:f6:72:a3:4f:54:c4:20:99:
         de:f0:be:9c:1b:e8:98:80:9b:c6:dd:d8:03:2e:66:d8:97:9d:
         57:ed:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org