Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.mft
File:                     FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.mft (raw, json)
Hash identifier:          GK7VMBZyLi1fi7JtM/YN+nJU7J1COZfDF+hDgUSBr30=
Subject key identifier:   AA:E5:EB:E8:7C:79:9C:59:A4:CB:50:83:E0:09:0E:35:60:DE:0E:D7
Authority key identifier: FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F
Certificate issuer:       /CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
Certificate serial:       2EB78F0CC202A5D259EACFFCEDC3FBFE9338DD7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.mft
Manifest number:          0C
Signing time:             Mon 15 Apr 2024 04:50:00 +0000
Manifest this update:     Mon 15 Apr 2024 04:45:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:50:00 +0000
Files and hashes:         1: 34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa (hash: ZHfOmX6P9KDcw1qNuuCb456/MY7HshfitichYD8+iyg=)
                          2: FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.crl (hash: V797r1FoCy/9BPn0HDDyKsXDVNEB9gGCy5o+k74Mzdk=)
                          3: 323830343a363538383a3a2f33322d3332203d3e20323639343937.roa (hash: a1SlE2Cvu5+ymBlgO5di/HAZWJp+rFaPZ0Y/FL18LqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b7:8f:0c:c2:02:a5:d2:59:ea:cf:fc:ed:c3:fb:fe:93:38:dd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
        Validity
            Not Before: Apr 15 04:45:00 2024 GMT
            Not After : Apr 22 04:50:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:0a:5a:35:a5:48:af:00:14:f4:06:05:23:
                    a6:f2:f8:1e:79:03:90:ad:4b:d7:0f:43:13:31:4b:
                    26:e5:b8:6c:43:38:5b:8a:30:23:26:83:b5:eb:ae:
                    c1:bf:a0:1f:b2:db:74:1c:12:3d:6a:c6:9f:3c:5a:
                    8c:6e:0a:1b:bc:40:07:35:41:bb:c4:fd:e1:86:d5:
                    15:a9:eb:be:ea:57:69:bc:e7:67:3b:36:4b:da:77:
                    01:f6:69:d1:8a:f0:b9:a1:da:5b:40:f5:87:74:4e:
                    b9:e4:ac:0a:e1:8a:d0:f4:e2:d6:7f:31:14:8c:28:
                    d7:f7:90:1a:24:20:62:2c:60:14:30:56:52:d1:c8:
                    f7:d4:d8:68:41:81:61:02:e4:8a:d1:17:6e:74:14:
                    74:c8:32:bf:17:b4:62:9c:1d:75:43:bf:2a:cc:20:
                    41:cb:07:3c:9b:a2:e9:08:c4:10:db:a4:1e:4d:27:
                    5c:f7:f8:1b:14:8b:9e:8c:5f:ee:5a:73:7b:1a:93:
                    0d:34:72:63:98:b2:e4:5c:e8:21:4c:db:f0:61:d9:
                    0c:6b:8f:d2:fd:bf:19:f9:b6:fc:f3:65:c7:13:be:
                    ad:d5:5f:9c:ce:e6:4a:8f:79:67:cb:14:0f:09:f5:
                    2f:21:0d:6a:ec:f2:50:00:1e:af:cc:91:ea:76:eb:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:EB:E8:7C:79:9C:59:A4:CB:50:83:E0:09:0E:35:60:DE:0E:D7
            X509v3 Authority Key Identifier:
                keyid:FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:87:c6:df:99:69:50:c8:03:c9:f7:af:67:6e:8b:03:58:
         b5:a2:e3:e9:61:62:2d:17:1b:6c:c6:bf:66:8b:fe:cf:eb:59:
         67:7e:0c:2b:ef:83:96:ec:82:b8:f3:1b:d6:75:e7:d4:f1:34:
         94:dc:0b:bb:f7:a8:45:73:0a:0b:cd:4c:44:97:12:e6:90:93:
         6b:14:e9:9a:e7:c4:d6:30:ae:a7:ab:a6:0e:7d:bc:8b:a6:1e:
         db:6d:cc:6a:76:86:3d:3b:38:40:88:40:43:83:3e:2d:2a:7a:
         fa:c5:05:7e:86:b2:88:de:4e:27:9f:7c:1a:1e:41:05:28:49:
         14:4d:3b:6c:b8:18:ab:fd:da:bb:e3:49:b9:1c:02:b9:16:06:
         a4:21:db:4a:3b:8b:c9:7a:74:e7:e8:7d:42:a5:19:b9:8a:dc:
         36:f9:f4:c4:82:b5:40:9f:dd:1f:41:d9:c3:1f:ce:bf:35:b7:
         74:6e:ac:78:d6:2c:51:b8:ba:d9:98:65:d9:54:50:21:7d:5c:
         ec:37:2a:ac:16:29:d2:91:09:c4:e0:b1:bf:55:3e:4d:61:a7:
         de:be:fd:45:f0:7d:99:04:32:a0:52:dd:9a:83:9b:0c:81:c2:
         d5:3e:ac:35:c7:61:d1:4e:00:73:4f:f0:cf:96:07:7b:ba:df:
         1b:51:fc:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org