Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.mft
File:                     C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.mft (raw, json)
Hash identifier:          T+Bjfkp5iR2JgPw7Kn3MHQrkUCNqDbCfOiPxShsVcJY=
Subject key identifier:   C0:7F:4A:0C:C9:57:B3:BC:2B:FD:C0:AD:8C:01:F1:7F:C4:17:FB:C2
Authority key identifier: C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8
Certificate issuer:       /CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
Certificate serial:       01A7CE918A28D127D6926B0F2D3F20D6D83D11F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.mft
Manifest number:          FC
Signing time:             Sun 14 Apr 2024 21:40:06 +0000
Manifest this update:     Sun 14 Apr 2024 21:35:06 +0000
Manifest next update:     Mon 15 Apr 2024 21:54:06 +0000
Files and hashes:         1: C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.crl (hash: DERedXtnmLR0Ynl/m1YeTF3LB9t+tEKZo0hYp13kc3M=)
                          2: 32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa (hash: DoJOWrRl/TzuzVXHl7joP/YliIEmP/OHLdsCx01F0Js=)
                          3: 32342e3135322e3130352e302f32342d3234203d3e20323730353139.roa (hash: cJfhm12mwD5x1h152u0As+miwz5ZDgOc1eXdIbQH3XA=)
                          4: 32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa (hash: BBLdU3Q1hLQGW0j1vajGw/dAUBN49yAR6YPOIhLvNnc=)
                          5: 32342e3135322e3130362e302f32332d3233203d3e20323730353139.roa (hash: 0RXf42xxUiCNBOCc8rU14ie7g4YOUc+XwJmagVT/Kcc=)
                          6: 32342e3135322e3130342e302f32332d3233203d3e20323730353139.roa (hash: WMNF4mDXfzPxbh+6Ri8ZJTPizO/1ld+H4Xqfe+eqLHY=)
                          7: 32342e3135322e3130342e302f32322d3232203d3e20323730353139.roa (hash: iuepURZDfBOFSBb3wPo81qVU6I1O463uKiO0P36iX1g=)
                          8: 32342e3135322e3130372e302f32342d3234203d3e20323730353139.roa (hash: uemaNrcReVkHCdtLG15o/qQhmNU64CnVowvgf4xK7iM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:ce:91:8a:28:d1:27:d6:92:6b:0f:2d:3f:20:d6:d8:3d:11:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
        Validity
            Not Before: Apr 14 21:35:06 2024 GMT
            Not After : Apr 15 21:54:06 2024 GMT
        Subject: CN=C07F4A0CC957B3BC2BFDC0AD8C01F17FC417FBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:58:9c:f2:34:ca:64:88:ba:e3:c9:eb:94:
                    4b:b0:16:8d:1e:a4:84:a5:b1:9e:cf:3f:22:4e:ce:
                    ae:bb:8a:ec:bb:cb:46:fd:f7:39:09:a9:62:ef:f9:
                    dd:0b:24:bf:f5:0a:68:80:d8:28:cf:2d:09:5f:54:
                    b4:ae:6d:df:1e:6f:a8:87:dc:8c:70:0a:38:bd:e0:
                    55:a3:ce:ee:40:7e:73:e0:25:0f:73:c0:b8:de:b7:
                    cd:9f:fa:b1:c1:76:c8:92:3f:0d:36:a4:df:57:5a:
                    11:35:ba:bc:43:ad:55:09:0f:79:17:1e:60:48:3d:
                    e2:6d:da:83:d7:38:93:b0:8c:87:d2:ad:b2:5f:b0:
                    b2:00:94:f1:82:10:65:75:94:7b:39:5f:0e:a2:bf:
                    d3:8e:97:f9:0a:b6:2d:3b:c8:21:70:71:6c:f5:79:
                    e3:14:2d:6c:e1:34:d8:3a:0d:21:74:90:ad:5a:9a:
                    bb:1c:bd:7a:70:9b:21:a5:6e:83:1d:07:9f:04:a8:
                    fb:70:1e:31:62:53:e0:c9:5d:e5:0e:86:a2:97:9a:
                    c3:63:7e:b2:71:ab:42:98:e3:d3:42:07:60:5d:46:
                    81:05:5b:7d:28:89:64:85:70:20:4e:56:2b:cd:2d:
                    c5:1d:73:84:29:9b:56:cd:b4:27:0c:e5:2a:2b:fe:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7F:4A:0C:C9:57:B3:BC:2B:FD:C0:AD:8C:01:F1:7F:C4:17:FB:C2
            X509v3 Authority Key Identifier:
                keyid:C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:7c:0d:53:e5:fc:44:4a:a4:7e:ee:06:02:17:07:cf:25:
         3e:0f:f7:55:63:1d:34:bf:4c:d6:7f:4b:3b:87:6a:7b:01:fe:
         6c:9e:b4:19:14:55:12:75:6a:10:bd:0d:25:89:e4:92:00:e8:
         5f:6a:23:08:be:88:47:96:03:b0:ff:cc:77:01:3a:93:34:2b:
         8d:a4:a7:5a:5b:21:88:c7:34:41:fb:10:47:8b:90:de:d8:31:
         a7:bc:ad:53:68:af:bf:3e:a4:7c:46:cd:45:64:15:db:8c:b6:
         a3:af:5c:98:0f:61:b4:d1:95:68:f3:b8:ee:25:b9:54:0b:be:
         67:48:e2:a0:3d:d6:61:35:e4:f0:33:8b:17:f8:9f:23:a3:5d:
         11:2b:35:33:72:26:9d:e9:55:fa:65:90:2c:6d:c0:d0:4e:dd:
         9b:fb:a8:50:7b:93:84:4e:09:45:23:24:26:f9:96:8c:ae:40:
         af:6b:fa:04:08:45:70:6a:b0:34:40:cd:b9:99:f2:90:0c:be:
         a1:69:44:41:d6:73:18:32:d9:1e:80:73:bb:9c:e5:07:dc:b3:
         c5:32:7d:25:3a:6b:f9:b0:19:95:15:2a:ad:18:0d:b2:be:c8:
         a5:42:5f:47:2d:b2:de:e5:86:13:68:6b:65:e5:49:a1:bf:1e:
         58:09:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----