Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.mft
File:                     7FBEA60114E93180DF0AD8726842AAD2B761AAAB.mft (raw, json)
Hash identifier:          2ecT7lbS6nL2pJ+bP809vbHu3P2UArxR5P4gF7y/13g=
Subject key identifier:   A9:49:F6:26:2B:09:DB:2E:29:32:A1:99:F4:94:D8:C6:C8:F2:FB:E5
Authority key identifier: 7F:BE:A6:01:14:E9:31:80:DF:0A:D8:72:68:42:AA:D2:B7:61:AA:AB
Certificate issuer:       /CN=7FBEA60114E93180DF0AD8726842AAD2B761AAAB
Certificate serial:       55F43E66EC91B87D62B255FA75D3D6FA7EA49471
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.mft
Manifest number:          CD
Signing time:             Tue 03 Sep 2024 16:05:29 +0000
Manifest this update:     Tue 03 Sep 2024 16:00:29 +0000
Manifest next update:     Wed 04 Sep 2024 18:33:29 +0000
Files and hashes:         1: 3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa (hash: 9FVesT2UMEdsAaT81X2LSAdOIeoBNNOuRL4E3Xty0Og=)
                          2: 7FBEA60114E93180DF0AD8726842AAD2B761AAAB.crl (hash: 15czTwlyL+WeQe8KxQdqNEmN5Ff5hZ9xmLESQqxL2ds=)
                          3: 323830343a373734633a3a2f33322d313238203d3e20323731313639.roa (hash: q7ovtsfmazIyUCNHUamDNkUp4EnndJwP0s5sbuyOleY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f4:3e:66:ec:91:b8:7d:62:b2:55:fa:75:d3:d6:fa:7e:a4:94:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FBEA60114E93180DF0AD8726842AAD2B761AAAB
        Validity
            Not Before: Sep  3 16:00:29 2024 GMT
            Not After : Sep  4 18:33:29 2024 GMT
        Subject: CN=A949F6262B09DB2E2932A199F494D8C6C8F2FBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:8d:2d:33:ff:7f:90:df:99:e4:30:73:dc:
                    58:48:51:73:0e:bc:0b:34:96:67:8b:b5:f2:a0:89:
                    28:13:43:22:ec:38:d9:f8:ba:f3:27:4f:f5:a9:9e:
                    78:69:b6:6d:5b:af:ea:8a:18:c4:e8:8a:be:29:3d:
                    c3:98:12:62:3b:db:cd:c2:b5:f7:4d:3e:0e:6f:20:
                    f3:98:ca:33:fb:8c:6a:9f:f2:3e:7d:b7:c3:05:20:
                    6e:b1:9e:fb:02:b6:34:30:8f:c2:7a:7a:5c:f8:35:
                    87:29:3b:67:80:e9:86:42:ee:2a:70:bd:e2:e2:2f:
                    96:21:c1:2b:84:50:0e:90:9b:cc:fa:88:29:e6:90:
                    a6:31:7e:d9:54:53:5b:52:fb:b7:0a:ba:6c:ba:d6:
                    71:9c:95:4b:5d:17:8e:74:21:d8:80:0d:d8:86:73:
                    1b:10:55:c4:66:84:0e:7c:99:b8:d5:d4:44:72:56:
                    98:d8:5a:ac:2c:df:23:77:5b:b4:96:07:39:47:bc:
                    08:58:e2:4b:e6:49:53:69:2b:fc:5f:e9:36:80:db:
                    bc:8d:e5:6b:20:79:ad:58:74:42:28:7f:d7:08:87:
                    87:ad:4e:9f:f9:46:3b:1d:98:2c:d3:ed:a8:08:55:
                    6f:db:db:0f:f6:b1:60:5f:d3:e8:b0:95:da:65:cb:
                    ba:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:F6:26:2B:09:DB:2E:29:32:A1:99:F4:94:D8:C6:C8:F2:FB:E5
            X509v3 Authority Key Identifier:
                keyid:7F:BE:A6:01:14:E9:31:80:DF:0A:D8:72:68:42:AA:D2:B7:61:AA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/1/7FBEA60114E93180DF0AD8726842AAD2B761AAAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:70:93:da:8c:14:b6:83:da:82:37:7f:74:eb:ff:5a:aa:
         a6:68:98:c1:39:11:f4:17:a4:59:d3:93:be:f4:5d:d2:40:23:
         74:19:d4:56:8b:35:32:a1:37:a1:d3:87:55:fb:0d:ac:4b:24:
         07:87:0c:a3:35:24:d0:97:4e:67:ad:4b:15:df:95:b4:b5:4a:
         aa:73:3b:a0:e2:6a:7a:ca:5b:8c:38:7a:99:68:06:bb:07:7c:
         8a:08:4b:94:01:8b:f6:04:ca:32:87:f2:b9:ed:71:7b:31:8c:
         07:4c:6f:2f:d1:09:55:61:2e:18:77:20:cf:c3:cc:ce:b7:0a:
         d0:16:f5:bb:0b:bc:a9:71:bc:09:94:31:bc:d0:49:7d:a8:d2:
         89:e2:f2:96:c1:57:98:3e:58:00:3a:d2:52:6a:3c:35:ae:8e:
         f8:bd:b7:f3:0a:4b:f6:05:47:b3:15:b7:4c:79:df:7f:35:6f:
         95:6e:34:2b:53:45:eb:d4:55:fc:65:56:2f:e3:46:1c:94:66:
         67:69:f0:20:e2:0a:6e:28:61:29:29:7e:95:19:db:57:f6:79:
         4c:8d:8a:37:31:4a:ce:98:3d:00:a2:86:6b:85:16:a7:82:e7:
         21:94:97:31:3f:90:aa:ac:43:d3:87:fd:d9:05:48:cd:1d:9f:
         3f:4b:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 20:58:31 2024 by rpki-client on console-fra.rpki-client.org