Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.mft
File:                     FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.mft (raw, json)
Hash identifier:          6zMTPPuh/NOodlYyROfHCNpUGLYf4yMv7c+KFH8acAw=
Subject key identifier:   6C:B7:D5:15:FA:B5:93:96:B0:E8:79:B3:02:F9:04:2E:D5:68:B2:2C
Authority key identifier: FB:6B:4D:E3:43:D8:43:DE:8E:E9:9B:F9:4C:FF:EF:8F:97:46:AA:B8
Certificate issuer:       /CN=FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8
Certificate serial:       4336B2EEB927FC89E164A782BE06B10C3D165AF2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.mft
Manifest number:          073B
Signing time:             Sun 14 Apr 2024 23:42:09 +0000
Manifest this update:     Sun 14 Apr 2024 23:37:09 +0000
Manifest next update:     Tue 16 Apr 2024 01:48:09 +0000
Files and hashes:         1: 323830343a363662343a3a2f33322d3334203d3e20323639353737.roa (hash: rH6BBuRjAOVLx9n/gXP6cD0xGQeR8ayUsRkAnTDdzj8=)
                          2: FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.crl (hash: LiQTqBzQ5D/JYIxsAzg6B6YS+eocFPiIoSEHmHeAyCw=)
                          3: 34352e3138392e34342e302f32322d3234203d3e20323639353737.roa (hash: wDfwUocViz55QmGUEdTJfP/xbaBCQKSkKpcGTIUdKao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:36:b2:ee:b9:27:fc:89:e1:64:a7:82:be:06:b1:0c:3d:16:5a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8
        Validity
            Not Before: Apr 14 23:37:09 2024 GMT
            Not After : Apr 16 01:48:09 2024 GMT
        Subject: CN=6CB7D515FAB59396B0E879B302F9042ED568B22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:bb:ee:39:9a:39:87:3b:83:c5:01:2f:0c:
                    28:f1:a6:01:c0:de:ee:17:18:af:ee:ed:22:ed:74:
                    b4:da:02:7b:21:77:ef:57:0f:10:77:08:39:b3:02:
                    81:50:2e:24:8d:a4:ce:e3:da:35:c5:b9:10:44:6c:
                    21:1a:35:30:ce:bf:40:fb:13:58:f3:e4:e0:b1:24:
                    6c:e1:bd:24:5b:1c:92:14:0b:32:97:25:2c:28:df:
                    d3:b9:4e:0c:28:08:1d:54:38:8e:b0:a4:72:b3:da:
                    c6:eb:21:74:f4:7c:d4:f7:fd:7c:e7:5c:54:70:1a:
                    b2:35:65:3f:cb:c5:08:43:ee:fd:70:3e:5d:8f:46:
                    2d:29:7f:91:05:bb:12:68:7e:4d:16:d3:86:7e:51:
                    0d:b8:21:ce:f2:e5:86:fe:c2:cf:bf:cd:ef:bb:9a:
                    c4:88:61:cf:6c:f6:26:b5:2a:e2:eb:56:0e:74:c2:
                    a8:07:47:f0:39:45:3f:10:c8:f4:74:c7:cd:1c:ec:
                    81:74:0f:4c:c5:15:7c:ea:c0:32:38:5d:9d:8b:e2:
                    55:df:c4:54:53:55:f0:94:bf:5c:e0:bd:60:8c:ac:
                    1b:99:e6:f5:88:b9:5f:9a:f3:ff:c4:47:1c:fb:3d:
                    0a:81:2f:79:08:0e:ae:f6:b9:21:59:8d:65:54:79:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B7:D5:15:FA:B5:93:96:B0:E8:79:B3:02:F9:04:2E:D5:68:B2:2C
            X509v3 Authority Key Identifier:
                keyid:FB:6B:4D:E3:43:D8:43:DE:8E:E9:9B:F9:4C:FF:EF:8F:97:46:AA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:f4:d3:f4:c1:f5:fe:49:a6:ed:a2:33:c4:f9:10:64:fd:
         70:5e:25:5d:78:dd:48:3d:c4:fd:7c:40:53:44:ff:a0:39:cd:
         d8:99:23:fc:95:ce:d7:3b:73:af:1f:5d:28:d5:f9:49:4a:f6:
         0b:09:74:83:a1:cc:b8:1e:2e:fc:ad:28:10:e6:b5:c9:22:f7:
         4f:47:84:14:19:81:9c:bf:6b:ff:ec:60:03:22:78:a6:ac:e4:
         b6:f1:18:86:12:ab:56:33:0f:60:02:3d:61:89:59:5a:49:e2:
         45:ee:68:55:fd:cf:1f:28:76:a9:94:15:0b:a9:53:01:31:e2:
         c0:0b:4c:0e:bf:a0:57:f0:99:9c:1f:b2:88:5b:b9:59:d2:4c:
         67:dc:d8:c9:f2:b3:e5:2b:fa:c0:e8:2d:81:d4:03:aa:47:f6:
         ae:04:53:4e:aa:c3:c2:bc:f6:89:40:b4:f4:12:80:a9:40:f5:
         49:9e:47:23:5a:19:a1:d4:3a:d4:45:73:d0:7b:7f:f0:d9:d0:
         ea:d5:72:22:57:c4:71:63:2c:c4:5a:53:f0:6c:59:03:46:dd:
         88:35:dd:b8:d9:13:61:0f:a6:de:46:eb:ea:2d:8b:bc:3d:41:
         6d:90:af:71:78:72:c7:4b:25:16:86:e3:50:15:8e:c5:02:6e:
         34:84:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----