Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.mft
File:                     5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.mft (raw, json)
Hash identifier:          pLnRLLuu46RgS7yuc2cOarTwEajdN/4EV13a6o7UdmY=
Subject key identifier:   FE:F8:77:06:B1:8B:E8:6F:80:E7:54:46:63:B9:0C:DD:B1:FF:08:42
Authority key identifier: 5F:F2:81:58:7D:ED:2C:C2:9C:EC:66:FE:B1:B9:B4:8B:29:7F:52:B8
Certificate issuer:       /CN=5FF281587DED2CC29CEC66FEB1B9B48B297F52B8
Certificate serial:       36FFABFE2FD65D28FA1EEE6EB656EE04D31077F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.mft
Manifest number:          19
Signing time:             Mon 08 Jul 2024 14:00:33 +0000
Manifest this update:     Mon 08 Jul 2024 13:55:33 +0000
Manifest next update:     Tue 09 Jul 2024 16:45:33 +0000
Files and hashes:         1: 3136382e3138312e3136382e302f32342d3234203d3e20323635333338.roa (hash: YxdXLKjGIklujAGH/ay2fXlTUcAoBKPrAsB4n1V1gXo=)
                          2: 3136382e3138312e3136382e302f32322d3332203d3e20323635333338.roa (hash: G10sGb+OHd+10/KEHkRRpg7+MW8MmLbtHdxhxUBnkgI=)
                          3: 3136382e3138312e3136392e302f32342d3234203d3e20323635333338.roa (hash: S09Q6AZNolwJ+EdoDAPDytu+Iby/mm9qgLGXASc3DJo=)
                          4: 5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.crl (hash: ODO2sMPhk9eH1z1esgmYWudUVkgemBWdy/UVpiQr6lM=)
                          5: 3136382e3138312e3137312e302f32342d3234203d3e20323635333338.roa (hash: yXP3APBDx70HkJ5XXGnl390+BfJoJQKBMfA0qLsUHB4=)
                          6: 323830343a326535303a3a2f33322d313238203d3e20323635333338.roa (hash: 7JJ9/pGwwEvhVo7Hp+kiA7y7BEKG+sjotESxUyqX2og=)
                          7: 3136382e3138312e3137302e302f32342d3234203d3e20323635333338.roa (hash: z/CQWzDpWA04Ip5bML41TP+bfB/xCFzsR0T6/pR0ifk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ff:ab:fe:2f:d6:5d:28:fa:1e:ee:6e:b6:56:ee:04:d3:10:77:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF281587DED2CC29CEC66FEB1B9B48B297F52B8
        Validity
            Not Before: Jul  8 13:55:33 2024 GMT
            Not After : Jul  9 16:45:33 2024 GMT
        Subject: CN=FEF87706B18BE86F80E7544663B90CDDB1FF0842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:ef:14:62:5a:b5:df:ad:64:54:a6:e9:c0:
                    be:df:d4:72:06:8a:de:9a:3e:e3:b3:0a:85:85:9d:
                    47:13:04:0f:2b:b6:e0:fe:3f:e5:61:b0:f7:e2:dc:
                    28:cb:69:fa:1d:67:07:2c:cb:33:6e:92:81:1c:e4:
                    5e:02:04:4d:f6:93:b9:5c:c3:6d:60:31:6a:4d:30:
                    5c:08:d9:86:12:ad:d5:4b:09:d2:4d:55:8f:cf:bb:
                    ab:c8:7b:66:39:bf:42:f6:90:01:f9:fd:af:4b:21:
                    0a:8e:22:2a:43:53:9b:26:a9:a8:f1:bf:31:cc:79:
                    5b:b7:a9:63:85:92:c0:b1:db:30:05:1c:1e:23:ee:
                    51:49:e5:68:7f:9a:6a:9d:14:cf:5a:22:1b:bd:1d:
                    33:48:d8:02:d7:7a:fd:44:16:51:6b:b6:c0:9d:45:
                    ac:a6:fb:8b:ed:0b:29:5e:0a:c1:1e:c2:13:9f:60:
                    3e:2d:af:fa:f4:3a:9b:bf:45:aa:b3:b3:6b:2e:3a:
                    62:10:4b:32:71:c5:1b:ee:69:64:60:fa:48:11:31:
                    e3:c9:74:a0:cf:c5:bf:5b:97:1d:41:52:99:0c:58:
                    5d:b1:05:c0:b1:ee:e7:93:ea:c9:ee:09:83:46:2f:
                    4f:51:c0:99:76:89:ca:02:d5:41:50:d3:e4:5d:85:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F8:77:06:B1:8B:E8:6F:80:E7:54:46:63:B9:0C:DD:B1:FF:08:42
            X509v3 Authority Key Identifier:
                keyid:5F:F2:81:58:7D:ED:2C:C2:9C:EC:66:FE:B1:B9:B4:8B:29:7F:52:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/5FF281587DED2CC29CEC66FEB1B9B48B297F52B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:f3:8b:63:cb:5f:3c:fe:94:e7:22:ba:4f:1f:e0:cb:6d:
         1f:eb:bd:da:14:53:39:b5:c4:89:82:42:f9:44:b5:52:e7:8c:
         8f:1b:cb:63:38:40:a6:2d:8d:52:25:74:a1:10:51:d2:46:f4:
         a6:26:fd:e8:d6:43:5d:5b:42:65:95:2c:79:31:ab:d6:e4:5b:
         02:f5:30:99:8e:23:02:80:d4:70:28:a5:45:39:f1:19:9c:19:
         e2:2a:95:aa:71:8c:6c:c1:96:47:2b:1f:1d:90:48:55:64:07:
         f6:16:02:ed:5b:a8:f2:e5:0e:8f:6d:db:db:62:6a:1d:9d:b8:
         4f:24:2c:a7:10:9e:bc:6d:89:b0:c9:10:41:64:d0:87:e7:7b:
         ea:a7:10:91:4f:f3:a5:5f:9d:97:a4:33:9a:1e:72:92:94:ec:
         df:76:0e:73:cd:b6:19:7a:ea:24:bf:e7:90:59:11:7f:04:e0:
         f9:74:45:8b:82:51:d5:fb:50:a4:d9:ed:9b:e4:8d:48:40:4d:
         25:c0:69:44:85:da:16:79:17:ef:e6:f0:10:de:cc:45:e9:49:
         a3:dc:86:87:0f:00:ad:0d:f5:a8:c2:ab:18:cb:60:f4:d6:e3:
         fd:34:f9:4c:45:de:65:1a:3b:fc:b5:ce:df:40:66:8d:2c:f6:
         e6:a4:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 10:46:35 2024 by rpki-client on console-ams.rpki-client.org