Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/F1CA11701480AFA714542D6F661F153EE56E9403.mft
File:                     F1CA11701480AFA714542D6F661F153EE56E9403.mft (raw, json)
Hash identifier:          HbpeTYSbIsAMm9eTgCMmwMuo2oD/M0QBJroANX193AA=
Subject key identifier:   D2:B2:A1:C8:FA:51:CF:83:EB:3C:C9:36:D9:11:0E:E5:50:D9:43:39
Authority key identifier: F1:CA:11:70:14:80:AF:A7:14:54:2D:6F:66:1F:15:3E:E5:6E:94:03
Certificate issuer:       /CN=F1CA11701480AFA714542D6F661F153EE56E9403
Certificate serial:       58FB3199078DA4098B0EB542EAF5AEE279D5DA78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA11701480AFA714542D6F661F153EE56E9403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/F1CA11701480AFA714542D6F661F153EE56E9403.mft
Manifest number:          0242
Signing time:             Fri 02 Dec 2022 15:53:28 +0000
Manifest this update:     Fri 02 Dec 2022 15:48:28 +0000
Manifest next update:     Sat 03 Dec 2022 16:42:28 +0000
Files and hashes:         1: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: IZLw4gDzodr8FvhAK6890JD0h/AeSFlLefbBhrGADeI=)
                          2: 323830343a323232633a3130303a3a2f34302d3430203d3e20323634353936.roa (hash: 4SvYbbeN7vrJAxwyxw7JHalkYXR0xdDrB41nW3F7l3k=)
                          3: 323830343a323232633a3330303a3a2f34302d3430203d3e20323634353936.roa (hash: MFuzqTyJMBHrB8faKFEYpT/YShB7ASKe7R19mW2+9QE=)
                          4: 3133382e35392e34302e302f32322d3234203d3e20323634353936.roa (hash: RJoqz/TVB8nEBQg210m8vZHuw1qpFfFJYsgihpg+JRg=)
                          5: F1CA11701480AFA714542D6F661F153EE56E9403.crl (hash: TGk3taP9AmA6EQg6oW0x0Jr/wU249ZXwrfUDnbljeOU=)
                          6: 323830343a323232633a3230303a3a2f34302d3430203d3e20323634353936.roa (hash: iPQDZGJTCQnB4mv9eUM68aHnliuNAXWxInWHuAHsaHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fb:31:99:07:8d:a4:09:8b:0e:b5:42:ea:f5:ae:e2:79:d5:da:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CA11701480AFA714542D6F661F153EE56E9403
        Validity
            Not Before: Dec  2 15:48:28 2022 GMT
            Not After : Dec  3 16:42:28 2022 GMT
        Subject: CN=D2B2A1C8FA51CF83EB3CC936D9110EE550D94339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:86:79:68:2f:bb:b3:dd:eb:bb:8f:6b:c2:
                    c5:19:cd:ce:f9:9a:88:b4:35:44:ee:55:f7:fe:d4:
                    47:77:99:7a:db:ad:65:b3:58:0a:76:dc:13:5c:70:
                    9d:4b:a1:6b:9b:30:ff:2e:8e:67:75:8d:16:60:1e:
                    2e:51:a6:2e:0d:1d:03:2c:49:1d:e0:fd:df:97:99:
                    21:7b:f5:38:38:e3:dd:39:af:92:3b:9a:47:cc:60:
                    47:9a:cc:94:ad:df:b3:b8:d2:fb:b7:1a:c4:23:8b:
                    ae:4a:97:0e:b5:eb:4d:45:51:6c:f1:09:eb:04:16:
                    f6:f3:8b:7b:62:1c:af:f3:e7:5f:31:2c:84:65:1b:
                    ce:75:54:af:a2:da:19:eb:a9:56:80:44:59:25:09:
                    ec:e9:13:80:81:d9:46:d0:ab:63:36:5c:8b:d9:c3:
                    84:ba:16:4a:8f:f7:83:7b:91:c9:3c:6c:98:d9:77:
                    0c:d8:ec:0e:03:6c:41:98:8f:eb:15:83:5c:63:dc:
                    40:46:57:0b:03:97:e7:7c:17:fe:d4:9d:b6:1b:18:
                    51:90:68:5f:52:90:7d:61:5e:69:1c:15:f5:8a:53:
                    76:30:9c:a1:a7:d0:c3:21:7d:b9:22:8c:e4:bf:87:
                    52:5e:8c:e8:51:33:2b:92:34:0f:b0:80:51:f7:d9:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B2:A1:C8:FA:51:CF:83:EB:3C:C9:36:D9:11:0E:E5:50:D9:43:39
            X509v3 Authority Key Identifier:
                keyid:F1:CA:11:70:14:80:AF:A7:14:54:2D:6F:66:1F:15:3E:E5:6E:94:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/F1CA11701480AFA714542D6F661F153EE56E9403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA11701480AFA714542D6F661F153EE56E9403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/F1CA11701480AFA714542D6F661F153EE56E9403.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:a5:92:c5:72:c8:e3:ca:df:c1:3b:cf:a4:54:1e:c5:bd:
         af:07:bd:83:0a:0c:f6:d6:41:8f:4a:7f:83:04:55:29:e4:05:
         bb:f3:d5:bf:69:74:f3:c3:99:47:9e:a3:a9:c4:9a:58:7a:7d:
         93:6f:3d:57:b4:f5:8f:f9:18:bc:b5:c7:f1:d3:7c:a4:ca:c6:
         c9:9e:08:8e:da:76:ad:2b:47:66:21:0c:65:c6:61:40:27:c7:
         60:e9:df:bc:62:29:df:a0:e9:34:e4:a7:0c:5c:ed:38:c1:a2:
         7b:46:2f:c7:a2:f0:91:72:32:8b:bd:f1:8b:3b:00:92:e9:8e:
         97:49:58:cc:ef:53:9c:ec:bb:d9:68:73:0a:db:64:6c:98:df:
         b7:c0:38:6e:35:29:90:e4:9a:f4:a5:11:8c:48:a0:b6:72:86:
         e7:f8:df:07:7f:cf:bd:fa:c3:c8:e4:63:ca:8d:bf:05:ec:1b:
         d9:8f:b6:6a:89:9d:c1:33:47:08:cd:9e:ff:d0:fb:e2:a0:6a:
         2a:b2:0b:21:ca:bf:b9:19:ee:ef:b7:e6:df:d5:38:eb:fb:0f:
         73:13:f1:75:e5:e4:cc:b2:d4:8d:54:29:dc:e8:ca:dc:3c:d4:
         45:32:e4:d6:9b:31:e1:07:c8:ab:82:f5:c2:a2:f7:96:06:5e:
         35:cd:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org