Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.mft
File:                     F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.mft (raw, json)
Hash identifier:          52U/AjIWLdERQMNKF2MbzIwyBnqlfVVpBdMVRasKzl4=
Subject key identifier:   93:5A:73:99:14:59:6B:D7:16:8E:D4:AB:E1:D8:00:08:DF:B0:A5:00
Authority key identifier: F5:B3:F4:E6:F7:D5:F9:74:35:F2:46:14:41:A0:52:90:3A:7F:AF:2A
Certificate issuer:       /CN=F5B3F4E6F7D5F97435F2461441A052903A7FAF2A
Certificate serial:       7D1793C3453B88560C32E9ACAA7B441353610CE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.mft
Manifest number:          029C
Signing time:             Fri 15 Mar 2024 18:30:05 +0000
Manifest this update:     Fri 15 Mar 2024 18:25:05 +0000
Manifest next update:     Sat 16 Mar 2024 18:35:05 +0000
Files and hashes:         1: 323830343a316134383a3a2f33322d3634203d3e203631383530.roa (hash: uHbHx5skfDMpAVftqmKTyYeDQIeGL5yIqZR24f7AftY=)
                          2: F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.crl (hash: ZMFmJvVaPCUGIDdK3Uotz2GUPbutlV1lX9JNQ6QmMx8=)
                          3: 3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (hash: 6pND0O2v0Ik4RLVeZoYKXsHke916u8vvy3kNFRbnnJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:17:93:c3:45:3b:88:56:0c:32:e9:ac:aa:7b:44:13:53:61:0c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3F4E6F7D5F97435F2461441A052903A7FAF2A
        Validity
            Not Before: Mar 15 18:25:05 2024 GMT
            Not After : Mar 16 18:35:05 2024 GMT
        Subject: CN=935A739914596BD7168ED4ABE1D80008DFB0A500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:3b:eb:f2:7c:51:b9:f8:4d:56:37:36:51:
                    c1:34:09:0e:03:0f:63:92:25:a6:c0:a1:45:40:46:
                    94:72:99:49:3b:32:ae:ee:b4:70:d5:a3:92:02:07:
                    e3:e4:13:3e:9a:12:ab:ff:c3:8b:10:a3:51:2d:35:
                    41:45:e8:c6:c5:04:7e:61:87:44:06:42:2c:2e:f0:
                    89:cb:20:41:28:8e:41:24:14:7e:11:a5:c1:be:e2:
                    89:15:dc:6d:67:e9:2d:b4:48:13:a8:d0:57:4a:76:
                    7e:e7:4f:93:24:6d:f1:91:3c:d4:fd:27:d0:4d:69:
                    50:ba:3a:ac:34:99:bb:70:57:65:3b:0e:a7:47:70:
                    0d:4e:41:2b:40:da:aa:0c:36:f9:b1:e1:a0:46:af:
                    ba:71:1c:e0:69:be:c7:ff:b2:58:47:95:9d:49:b6:
                    78:ef:96:f4:d9:df:6a:71:70:73:83:f5:a3:55:8b:
                    6a:bf:94:53:d9:62:ea:14:d8:f7:05:b0:7e:3c:35:
                    1d:21:1c:a7:74:af:cf:2d:73:eb:81:e5:5c:7e:e4:
                    f4:6f:e9:19:10:75:77:41:14:d6:fc:3e:2d:00:a8:
                    c5:c3:00:e0:a5:1e:4c:5c:6b:48:fc:d4:c8:40:2e:
                    cc:ae:33:1a:08:85:2d:48:63:a7:b8:e9:be:3a:d6:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:73:99:14:59:6B:D7:16:8E:D4:AB:E1:D8:00:08:DF:B0:A5:00
            X509v3 Authority Key Identifier:
                keyid:F5:B3:F4:E6:F7:D5:F9:74:35:F2:46:14:41:A0:52:90:3A:7F:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/F5B3F4E6F7D5F97435F2461441A052903A7FAF2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e9:8a:8d:50:a4:e4:ba:4a:0c:90:bf:05:cb:b2:51:a1:71:
         aa:41:b0:fd:40:46:3c:57:67:13:dc:63:55:be:ed:ab:37:3e:
         df:eb:ce:c5:80:9d:5e:8b:62:a5:99:49:2c:2d:36:b9:01:07:
         d5:0b:27:65:49:cd:c8:54:81:a1:0e:6c:65:36:39:96:6d:16:
         7f:05:28:c9:bb:8d:4b:78:8d:d8:d0:79:18:f4:9a:95:85:8b:
         4b:24:87:09:cd:8a:b3:a6:46:7c:fc:5d:70:fb:b4:da:05:01:
         42:f4:70:72:08:cc:0b:b8:a3:a3:dc:f8:f5:92:f1:28:4c:68:
         b2:d2:a3:a7:fd:ee:80:96:49:55:40:2b:7f:67:c9:29:e2:8c:
         20:2c:99:48:b7:59:71:ca:ec:c5:db:e5:b2:f8:72:fc:82:0a:
         56:6e:3f:be:eb:e1:be:1a:70:63:82:e1:49:40:f6:7a:f9:ce:
         d9:3d:b7:a3:0e:f9:f5:c3:f9:e7:8a:b6:a9:4f:e8:e6:81:39:
         33:5c:d9:50:fa:5e:35:2e:24:b8:d2:4b:b6:df:3d:77:63:19:
         80:c1:56:ce:e8:d3:eb:82:77:6a:b1:5f:71:a0:0a:dd:33:3c:
         c8:8e:09:0d:9b:3d:b4:28:75:9f:22:a9:58:ad:94:09:e4:8d:
         96:b2:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----