Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft
File:                     F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft (raw, json)
Hash identifier:          G5kXYUK+rPqyHVDTEypxyhUyO4pGe8ZLmf38VU3lZMI=
Subject key identifier:   48:D4:B5:7D:39:91:E9:5D:AC:5A:CC:90:3D:CB:B4:4E:0C:77:37:04
Authority key identifier: F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
Certificate issuer:       /CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
Certificate serial:       283942673C79EE37A92DB4112A6F4B2B95E3AA39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft
Manifest number:          2E
Signing time:             Sun 14 Apr 2024 19:24:02 +0000
Manifest this update:     Sun 14 Apr 2024 19:19:02 +0000
Manifest next update:     Mon 15 Apr 2024 20:15:02 +0000
Files and hashes:         1: F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.crl (hash: 8S5pQ+aUiQ55ev7SPxuBdjd7WonC8LlrYm+Us+CbIJg=)
                          2: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: V2vm3ruYgGcJPKfVgB8nwDHUfTD7TOLWhakpHMb13LQ=)
                          3: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: QidbNHqjD97FTP1O6Wf86WnfqLTi+TXeoPlQNizMPfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:39:42:67:3c:79:ee:37:a9:2d:b4:11:2a:6f:4b:2b:95:e3:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
        Validity
            Not Before: Apr 14 19:19:02 2024 GMT
            Not After : Apr 15 20:15:02 2024 GMT
        Subject: CN=48D4B57D3991E95DAC5ACC903DCBB44E0C773704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:df:6e:a0:a6:f0:2f:e4:62:1d:c9:4b:b0:
                    bc:d7:5a:3e:f0:94:94:6d:2f:bd:22:34:11:14:63:
                    0f:c6:fe:c0:21:8f:88:65:e2:e6:62:28:43:cc:77:
                    e8:4e:8b:22:81:92:7b:83:94:a1:67:9e:84:12:c5:
                    25:86:79:3f:b0:45:cf:2b:88:eb:a1:9d:05:e9:d1:
                    8d:0e:bf:de:40:b8:9d:a8:33:4a:9c:e7:b2:86:23:
                    1c:5c:85:26:59:74:e7:69:57:63:b3:b7:62:16:aa:
                    3b:18:a6:64:88:8b:98:ff:dc:04:25:68:0a:97:6f:
                    ce:b3:8f:00:42:39:c9:a2:f0:77:55:e3:55:38:18:
                    51:84:f3:90:e1:3e:6c:aa:93:8d:ac:c2:83:a9:e8:
                    e7:a6:bd:e8:13:cf:54:17:1b:ee:20:2a:84:e6:55:
                    28:30:ba:34:10:ba:45:1c:c3:7c:75:0e:ef:5a:ff:
                    9b:42:05:50:c4:3f:e5:0e:a0:cf:f8:39:6c:4b:98:
                    48:00:4e:d9:8c:62:93:0f:ef:e7:a9:37:ca:d2:d2:
                    14:be:fc:26:bc:57:4d:08:e6:0c:6d:7a:59:d4:e2:
                    f9:d1:ad:55:6d:1b:6b:cb:02:c6:75:de:14:17:2c:
                    e7:2e:df:61:27:62:82:d9:d5:a5:e0:2b:b3:b8:13:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D4:B5:7D:39:91:E9:5D:AC:5A:CC:90:3D:CB:B4:4E:0C:77:37:04
            X509v3 Authority Key Identifier:
                keyid:F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:91:35:21:6b:31:28:df:a4:d8:d5:de:2f:0a:1f:dc:90:
         c8:13:b4:11:f8:f4:16:df:22:71:cb:5e:7a:61:07:2a:16:d8:
         10:cc:45:1e:da:6e:57:de:3e:47:84:de:80:4b:cf:98:61:5e:
         f4:cb:b9:21:aa:3d:13:96:f1:1c:30:02:0d:33:b9:12:e0:62:
         2d:a7:94:30:84:74:6c:6d:2f:50:19:90:db:f4:c6:1f:4c:d1:
         a4:a8:7a:3c:c5:1f:50:cb:fb:05:70:ed:e5:bb:0f:6a:fa:38:
         10:9c:b5:f1:a1:4c:63:79:68:8f:28:58:3e:e6:28:c2:b4:29:
         a2:60:36:ae:41:19:0f:95:17:31:81:97:e3:08:43:51:ac:ec:
         f3:7d:d1:58:6f:d9:16:76:45:ff:25:09:0d:81:e1:f4:37:1a:
         0b:a5:7f:7b:dd:61:3b:75:11:62:ce:88:6a:11:41:a5:64:a4:
         c8:05:5a:02:fb:7e:11:fc:30:b9:e0:7b:f9:e7:0e:66:af:d0:
         92:2d:b0:49:94:e0:77:ee:a9:69:99:2c:30:45:7c:9e:9b:e3:
         5f:10:62:51:bf:50:cb:20:28:3a:50:60:c3:69:62:a9:b8:e5:
         df:de:a2:fb:78:92:fe:fb:2f:90:79:d2:32:9d:5a:dc:a8:1c:
         9e:b2:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----