Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.mft
File:                     0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.mft (raw, json)
Hash identifier:          VvCH/YfHg+6k6Tn3NJrXbPiptu35Hi7Mm6rJ60tssnk=
Subject key identifier:   F2:49:A3:0B:D5:CB:E4:45:43:C3:64:0F:FF:0D:58:9C:12:96:2D:43
Authority key identifier: 0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D
Certificate issuer:       /CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
Certificate serial:       7269CAF61B88981DAF6980D4CD20024F4B3FDCE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.mft
Manifest number:          9E
Signing time:             Mon 15 Apr 2024 08:55:37 +0000
Manifest this update:     Mon 15 Apr 2024 08:50:37 +0000
Manifest next update:     Tue 16 Apr 2024 10:24:37 +0000
Files and hashes:         1: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (hash: SBvjf6vAOHdOU9aptJyEu02MF6KPFBM4UfLWBy+G924=)
                          2: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (hash: uS2TvC9fEz5foEKlaR/xyCYDdNXZRmKCk11+8ho4YUA=)
                          3: 0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.crl (hash: QVXtbHawKN9bFBRwqcdanK6gvlRQs2qzmP/0EFWFT0I=)
                          4: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (hash: piyLeItpHtCjN2AwjpWY06Bg/fQkn3DBTmekhxo1YNw=)
                          5: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (hash: boVkv6gdVHB4wUwIs8sHCRm7LbAHqu3XQX606kUXPI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:69:ca:f6:1b:88:98:1d:af:69:80:d4:cd:20:02:4f:4b:3f:dc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
        Validity
            Not Before: Apr 15 08:50:37 2024 GMT
            Not After : Apr 16 10:24:37 2024 GMT
        Subject: CN=F249A30BD5CBE44543C3640FFF0D589C12962D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:34:aa:48:be:a1:91:d1:ad:bc:02:99:e6:
                    ab:3b:52:d5:a8:54:e7:30:0c:e5:8f:88:1f:47:8e:
                    3a:c1:0b:c1:e5:75:d4:76:1a:fa:90:aa:7c:28:76:
                    db:f8:bf:05:50:f6:dc:dc:3b:7a:a5:dd:0b:c0:cf:
                    bc:b5:86:72:15:dd:f4:80:8a:99:28:3f:46:03:35:
                    b1:c4:f2:07:00:25:ee:4f:47:b1:55:4b:51:d8:96:
                    f5:b4:21:68:a9:76:51:51:b7:0e:c4:81:ae:19:a7:
                    ca:ee:14:a0:26:99:b6:a8:b4:32:d9:63:3d:44:3c:
                    dd:4d:c6:e1:2a:72:06:74:d0:87:e1:56:24:66:9e:
                    75:d8:ff:70:84:8b:13:9d:67:08:86:8b:69:2c:58:
                    88:76:5d:48:9f:95:03:5a:fa:7e:84:64:2e:01:19:
                    78:55:4b:29:ae:17:d7:c4:7a:b1:57:90:44:fd:98:
                    91:52:db:af:b5:63:c6:29:7b:49:d4:b9:5e:62:59:
                    17:5a:b4:d3:fc:c2:5a:d1:21:e0:89:33:a1:e9:63:
                    ee:eb:d4:04:d4:27:d3:cd:51:f6:9b:85:74:7e:78:
                    00:e2:3e:ff:d1:d4:c4:a7:aa:f0:e6:49:a5:85:d9:
                    80:72:69:b3:7e:df:fc:cf:cb:0f:36:4b:d0:60:c0:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:A3:0B:D5:CB:E4:45:43:C3:64:0F:FF:0D:58:9C:12:96:2D:43
            X509v3 Authority Key Identifier:
                keyid:0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:74:f1:fe:df:90:58:42:66:83:05:55:80:0c:6d:a3:39:9d:
         0d:bf:df:f2:8d:54:a1:44:3f:d0:ef:6b:e4:0d:c5:bc:86:5d:
         ae:d5:df:da:14:20:68:b6:cf:54:40:f2:dd:86:3f:24:98:9e:
         e9:9e:59:46:d2:5f:b2:66:7b:45:75:0c:28:10:80:52:23:b0:
         85:f8:9d:be:34:e1:05:ae:e9:91:5b:6f:01:c0:98:3f:8b:8d:
         35:b0:4f:57:d5:bd:2d:e1:1b:4e:f7:9f:42:13:74:a4:31:47:
         a9:31:48:52:1f:01:d5:40:27:d4:12:3f:1d:f5:63:71:46:25:
         32:7f:43:41:5a:a7:01:25:9c:57:03:07:7e:ab:6e:60:3c:52:
         f3:31:84:5c:bd:eb:8e:cd:f6:55:2e:f6:cf:31:b9:ab:7e:55:
         ed:d0:94:59:1c:27:bd:9e:28:d7:7c:a7:d8:8c:5e:b1:93:9c:
         3b:05:c7:1a:83:ff:3c:66:94:9b:d1:1a:64:c0:6a:a5:0b:0f:
         1e:80:37:9e:02:aa:6a:ae:06:46:52:a7:1c:45:de:fc:53:b4:
         01:f7:17:c5:19:b8:3e:62:a7:56:dd:dc:a1:bf:86:9b:e8:6f:
         de:fa:fd:a3:b6:7e:07:7e:e4:4f:89:87:8a:15:d8:26:c1:3b:
         03:de:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org