Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.mft
File:                     F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.mft (raw, json)
Hash identifier:          QFz9fcv+MT5cR52deP8b4CiXJH5sClHwe3rGWNl29bI=
Subject key identifier:   E3:1A:02:8D:D1:8D:D8:13:CF:86:40:A4:21:06:67:3A:79:AC:B7:37
Authority key identifier: F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA
Certificate issuer:       /CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
Certificate serial:       1E3CD1CDEA457E4FBDD0768FBD43A14990A9DBCB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.mft
Manifest number:          017B
Signing time:             Mon 15 Apr 2024 03:57:46 +0000
Manifest this update:     Mon 15 Apr 2024 03:52:46 +0000
Manifest next update:     Tue 16 Apr 2024 05:41:46 +0000
Files and hashes:         1: 323830343a376164383a31313a3a2f34382d3438203d3e20323731333935.roa (hash: ZP3mTj68zD3N3u0+1xStdmKduq8JLqcOPFhlSmOoVHc=)
                          2: 323830343a376164383a31303a3a2f34382d3438203d3e20323731333935.roa (hash: 7KXJbrxEzpuFEOtOFXeWBoLAXhVxes0RgqzEjx6JU+A=)
                          3: 323830343a376164383a31323a3a2f34382d3438203d3e20323731333935.roa (hash: ScMIsDc3dKukKpZv9Od7o6guHqyRM/KVP3uxzFKRY74=)
                          4: F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.crl (hash: dNTe4IFNtQ09kgPdPzImycrxC9G49Sc0SF0TT9SltF0=)
                          5: 323830343a376164383a3a2f33322d3332203d3e20323731333935.roa (hash: 2tDwp4FiOhrMZRIl4x7rgk6cJHIk3NxMYiccTc5c9sU=)
                          6: 3138312e3138392e38342e302f32322d3234203d3e20323731333935.roa (hash: OcdpeJhQSK6/H+lTai2GgykQOL+FZkFCOEuo4SXKs2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3c:d1:cd:ea:45:7e:4f:bd:d0:76:8f:bd:43:a1:49:90:a9:db:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86C970181A2EA77E7BA82EC8C2F9D699CB790BA
        Validity
            Not Before: Apr 15 03:52:46 2024 GMT
            Not After : Apr 16 05:41:46 2024 GMT
        Subject: CN=E31A028DD18DD813CF8640A42106673A79ACB737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:bc:53:fd:5d:08:55:1a:f2:1e:b3:86:6c:
                    c8:f7:f8:e8:62:ca:ba:a6:8f:07:32:41:bf:20:91:
                    26:b8:93:3d:37:db:ed:8a:87:2f:98:94:92:3e:f8:
                    06:97:cb:e5:dd:69:05:cb:ed:0a:ef:1f:f1:fd:b8:
                    47:66:2f:a3:d4:97:38:d1:1a:fe:7e:b6:d6:4b:df:
                    7c:a0:f7:ef:81:8a:d9:d8:0c:64:5a:a9:bc:7f:08:
                    9c:32:a5:fa:d8:86:27:4d:7d:96:76:80:c8:99:d1:
                    67:ce:19:5c:7e:15:1e:37:2e:1d:7f:0d:29:da:04:
                    b1:d5:1b:fa:f9:02:97:d8:46:d0:03:dd:e8:09:96:
                    a5:91:c0:37:e9:b2:fb:0d:50:47:61:4e:21:bf:b9:
                    36:b5:b7:6a:32:c8:1b:b2:b9:cc:f4:cb:e0:e4:0a:
                    26:be:16:f6:46:92:6a:dd:8a:26:d1:20:13:fe:69:
                    83:50:c0:85:db:ed:cd:fa:73:75:55:49:91:fb:94:
                    bb:f4:02:ac:84:10:9b:c8:3d:14:f6:85:fb:fd:9d:
                    c6:43:43:76:f8:e7:94:f9:75:15:1d:fb:1f:8b:cc:
                    53:6b:9a:57:d7:40:dd:e9:65:f0:9a:04:90:57:ff:
                    11:d1:9b:bf:93:b7:7b:34:6a:e1:8b:66:54:a5:e0:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:02:8D:D1:8D:D8:13:CF:86:40:A4:21:06:67:3A:79:AC:B7:37
            X509v3 Authority Key Identifier:
                keyid:F8:6C:97:01:81:A2:EA:77:E7:BA:82:EC:8C:2F:9D:69:9C:B7:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjWXMwtiZXknuYxz4zyKrPiZJPeczVVMwDTsN1rspFoY/0/F86C970181A2EA77E7BA82EC8C2F9D699CB790BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:00:a9:8e:92:e8:dd:2d:32:71:4b:1b:0c:3d:d5:6d:27:41:
         92:f4:3d:4a:cd:4f:0f:94:1e:ff:98:34:46:72:d2:db:b2:bc:
         5f:87:7c:ab:a8:7f:da:61:bb:b2:30:39:47:9b:6b:82:d9:8e:
         a2:1d:02:ad:0f:e0:41:9c:60:f0:85:0d:d3:dd:6e:b9:97:01:
         42:73:19:d1:70:45:37:08:a1:b3:4b:70:cc:e8:88:6b:ad:30:
         cc:26:ce:d9:15:1c:e5:82:e4:c1:36:ed:47:0a:6a:a6:69:ea:
         1d:86:b6:3d:a2:ab:75:0d:41:eb:24:64:70:56:62:14:9c:bb:
         13:46:f2:f1:91:0b:8b:01:a9:72:db:1d:fa:d0:38:1a:28:cd:
         af:d6:69:2e:b6:19:44:bb:7a:9e:e4:cc:2b:fe:50:5a:5e:85:
         03:57:e1:a8:48:c1:91:60:7e:ab:98:25:a5:03:de:cb:61:b0:
         8a:e4:bc:c1:fa:56:15:79:12:2d:11:d5:45:71:61:1c:15:2a:
         01:c1:46:bd:f2:df:30:a0:84:de:9e:d8:9d:10:3e:28:67:4e:
         3d:db:c6:9f:ee:f0:1c:ea:4a:28:22:17:1c:88:b0:f6:79:49:
         88:c4:47:b0:81:c4:4c:15:01:23:5a:4b:1d:53:a8:14:58:fa:
         f9:8c:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org