Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.mft
File:                     FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.mft (raw, json)
Hash identifier:          vGOFuA56Krvl+WhIYLPN/dzGaD1pRIHFhzKZGbrzZ4k=
Subject key identifier:   84:44:83:71:EF:01:BB:62:98:8B:B1:D4:0C:CE:6B:70:8C:87:AD:BD
Authority key identifier: FF:7D:A2:A5:38:E9:8D:ED:B6:1B:E4:DB:E0:00:C0:AF:C8:B4:1F:01
Certificate issuer:       /CN=FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01
Certificate serial:       4A405FA03A1D27D63E291A6A7EB8CDB255D26C9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.mft
Manifest number:          3F
Signing time:             Thu 28 Sep 2023 17:51:47 +0000
Manifest this update:     Thu 28 Sep 2023 17:46:47 +0000
Manifest next update:     Fri 29 Sep 2023 21:31:47 +0000
Files and hashes:         1: 323830343a326532383a3a2f33322d3332203d3e20323635333238.roa (hash: BZQ1LvooGQcI2gNRkHNUQEEiWhVAhPaGt8rfnlIplLY=)
                          2: 323830343a326532383a383030303a3a2f33332d3333203d3e20323635333238.roa (hash: 3tw/iJyrfmTb6YMuCwXtsyviYWwrb9IB8XJhiRaGbT0=)
                          3: FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.crl (hash: lP/d2t3P/JpFO/yOsftor8kYWm25YkQVv82vhvDvN/A=)
                          4: 3136382e3138312e36342e302f32322d3232203d3e20323635333238.roa (hash: GvDkvObm789Sm62q+kiffXNC4NmIsYU42zgUh29hTCk=)
                          5: 3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa (hash: aGAG+j9EAfb8DtogdKfLgkNAAv4qmtCa+Me0ICQKQiQ=)
                          6: 3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa (hash: lV0D/tCF2SnAtPw4+nbj+f94e9BUTda2+Zp1z53ZWBg=)
                          7: 323830343a326532383a3a2f33332d3333203d3e20323635333238.roa (hash: h6YFLDjlD5lP+mdr7NKWuqeneskPh4IByw6QOmXzSbg=)
                          8: 3136382e3138312e36372e302f32342d3234203d3e20323635333238.roa (hash: fIeAiP4wkw2EibHuJ9KNo5dhilnVPUuin5Yielv/g5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:40:5f:a0:3a:1d:27:d6:3e:29:1a:6a:7e:b8:cd:b2:55:d2:6c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01
        Validity
            Not Before: Sep 28 17:46:47 2023 GMT
            Not After : Sep 29 21:31:47 2023 GMT
        Subject: CN=84448371EF01BB62988BB1D40CCE6B708C87ADBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:1a:54:02:21:6f:38:f1:24:22:ff:4b:19:
                    4f:90:bd:a3:a5:24:13:52:91:f2:6d:18:db:72:7a:
                    c8:a3:87:e8:2f:5a:15:e1:8b:f3:41:b5:6e:cc:14:
                    71:73:74:d2:2b:3f:e6:7d:82:8e:4e:31:c9:c5:18:
                    48:f0:bf:14:a3:f1:48:c9:02:73:29:de:00:34:c4:
                    d5:84:73:fb:90:40:4b:e8:d2:94:d9:fc:42:e3:70:
                    52:a0:e2:af:84:5e:fd:43:2e:2e:08:10:bb:71:7e:
                    00:6c:4c:0b:7f:ed:32:3a:37:c2:37:b9:cd:4e:77:
                    81:79:68:0d:36:24:20:be:92:96:e1:90:97:da:84:
                    85:ff:42:38:8d:4a:63:d8:a1:38:17:85:44:e2:c9:
                    49:7c:fe:21:5e:a4:d2:3b:97:20:1c:06:f9:52:a0:
                    69:fa:e7:3b:e9:a3:8d:01:3d:5e:db:6b:91:5f:c3:
                    59:34:c3:ed:06:3c:7f:f6:48:1b:6e:4a:40:b6:0a:
                    5c:4d:38:0e:04:b3:6f:d0:ea:12:fd:9a:2a:e0:b2:
                    11:74:ed:02:9f:13:31:39:a1:71:61:08:39:16:22:
                    3d:26:01:08:30:6b:cb:5c:7b:00:97:50:41:fa:a1:
                    cd:94:83:40:8f:cb:1b:ee:af:d3:82:98:b0:90:08:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:44:83:71:EF:01:BB:62:98:8B:B1:D4:0C:CE:6B:70:8C:87:AD:BD
            X509v3 Authority Key Identifier:
                keyid:FF:7D:A2:A5:38:E9:8D:ED:B6:1B:E4:DB:E0:00:C0:AF:C8:B4:1F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/FF7DA2A538E98DEDB61BE4DBE000C0AFC8B41F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:07:d8:d0:aa:26:8f:98:67:54:f6:db:38:32:cc:0c:d1:
         33:41:ec:7d:e6:c9:8e:ae:99:9a:de:bd:4b:02:5b:b6:5a:3e:
         d2:48:ae:27:c6:b9:00:39:80:10:83:3d:86:4f:45:48:6b:c1:
         ff:e7:8d:b5:8e:06:e4:54:08:00:1a:82:d1:90:b0:2f:7a:92:
         9d:36:7f:cb:24:4e:73:c3:0f:27:72:22:fb:85:bd:c8:73:59:
         f1:27:c9:91:9a:a6:28:7e:d1:17:4b:78:25:95:96:03:aa:ab:
         ff:a9:61:b7:43:aa:a2:5d:6b:ef:c8:94:cc:b1:a8:14:8b:30:
         b2:b6:d9:a4:fc:18:13:0a:12:c4:90:dc:60:87:e1:c2:31:cb:
         7b:0a:cd:2b:1d:26:b3:27:60:b7:50:44:a4:a6:c8:57:28:e9:
         e1:0c:e3:d8:44:b4:27:57:a8:8b:1d:eb:bd:0b:04:bc:d0:cb:
         e0:3c:a2:14:5f:38:37:a2:97:f5:66:7d:ce:20:2d:b1:c6:e9:
         f7:b3:06:ee:94:f5:ec:94:f3:09:90:a5:8a:df:29:45:63:f9:
         96:98:c2:04:6c:85:84:70:fb:ab:04:e8:c7:8d:30:1d:63:20:
         df:2f:94:63:5d:95:b5:40:19:58:8a:e6:21:d4:72:1d:7a:d5:
         fb:ad:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org