Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft
File:                     0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft (raw, json)
Hash identifier:          j37cdSHfaT59eO7p8eGnEFyVnJ2ue4ANp4xgUYi70AA=
Subject key identifier:   D2:0F:64:5E:6A:D4:CA:0A:AD:37:57:9D:C5:63:4F:15:07:51:74:22
Authority key identifier: 0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC
Certificate issuer:       /CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
Certificate serial:       017EBD3D27F88CB5A5C08749A9867D482BCF82D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft
Manifest number:          0115
Signing time:             Thu 14 Nov 2024 04:19:31 +0000
Manifest this update:     Thu 14 Nov 2024 04:14:29 +0000
Manifest next update:     Fri 15 Nov 2024 04:57:29 +0000
Files and hashes:         1: 323830343a343034383a3a2f33322d3438203d3e20323635393439.roa (hash: wjV7CVfxSzn52g2DAXR8VzpWVprWic4hQDXNLakOsKM=)
                          2: 0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.crl (hash: SZ6saiusFa5KX37Yl3zW4rsRb+jc0a9B4Wnt8ScumcI=)
                          3: 3136342e3136332e39362e302f32322d3234203d3e20323635393439.roa (hash: bQzM45Cdby9RefW2gTHDskniBlcBmX7vHUxu5qBMyxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7e:bd:3d:27:f8:8c:b5:a5:c0:87:49:a9:86:7d:48:2b:cf:82:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC
        Validity
            Not Before: Nov 14 04:14:29 2024 GMT
            Not After : Nov 15 04:57:29 2024 GMT
        Subject: CN=D20F645E6AD4CA0AAD37579DC5634F1507517422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:10:6d:49:68:38:ce:a5:28:5d:a3:b9:9e:
                    38:21:e9:7b:aa:1b:0a:b8:3c:dc:54:d7:bd:32:53:
                    56:c1:85:b1:cf:34:1f:53:ab:3a:fb:37:f8:7e:e1:
                    dd:d6:4e:25:33:cf:35:5a:a5:cd:9f:21:92:1a:1c:
                    f1:9c:2b:9c:8b:a0:c4:3a:77:2e:dc:8f:75:b6:81:
                    dc:8f:a7:86:ba:40:1e:56:b5:dd:b6:30:e8:8e:51:
                    c4:5f:e8:13:92:08:88:ba:f0:c0:60:78:46:c5:c7:
                    d5:84:15:a5:35:c2:3c:ef:0a:d1:eb:fa:cb:ea:65:
                    b2:ec:ec:36:a0:2b:cb:3b:2d:32:ca:1a:2f:96:9e:
                    ba:da:7c:7b:74:de:9e:48:1d:ee:b7:c3:ee:0e:08:
                    80:8d:80:0e:34:39:ad:51:85:a7:7f:d7:38:45:02:
                    f8:61:fb:ae:a7:cc:6d:5c:13:cd:e8:ee:45:94:6e:
                    a5:bc:9f:09:90:6a:c9:a0:bb:74:c5:e6:27:58:31:
                    2d:26:9c:c0:b4:e1:3d:07:37:57:2d:31:9f:07:0a:
                    b5:80:f4:6f:77:7e:a2:7e:af:4c:0f:99:90:5c:27:
                    34:be:fd:f6:fe:e9:56:1f:20:c0:7d:bc:b2:ce:91:
                    86:8b:2d:7b:98:2f:81:02:a6:de:93:6e:48:cc:9f:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0F:64:5E:6A:D4:CA:0A:AD:37:57:9D:C5:63:4F:15:07:51:74:22
            X509v3 Authority Key Identifier:
                keyid:0F:C5:60:2B:B8:97:FF:FC:47:89:7E:B3:67:6B:FE:1B:32:CA:D4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/0FC5602BB897FFFC47897EB3676BFE1B32CAD4FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8f:b2:6a:2c:62:ba:e2:e1:60:ad:1d:32:22:c7:03:f5:c6:
         e4:09:34:9d:13:ef:ce:81:3b:e3:1c:03:fe:b0:a0:5e:f6:5d:
         be:2d:65:f1:da:b0:53:7d:31:50:1e:a3:ce:f4:8a:1a:14:64:
         3d:b9:6f:1e:57:d4:fd:18:67:dc:d0:5c:1d:86:13:28:14:54:
         e8:4e:f4:c4:ac:c6:8c:78:5e:db:b3:cd:27:8c:1f:71:fb:11:
         71:46:76:e3:03:e8:32:49:60:6d:38:8c:7b:cb:65:6d:79:4a:
         c7:a1:63:0e:0f:51:75:88:92:c3:4c:8b:82:a3:d9:e3:7d:2a:
         7f:ae:2a:59:18:b2:6c:f0:fd:56:c8:5d:2e:ae:6b:ae:7e:6b:
         09:be:b1:97:b7:8b:33:db:41:96:b4:b8:35:23:48:02:4c:94:
         a3:53:7f:60:6e:d3:0d:ce:f2:98:91:8b:5c:34:c0:50:41:0f:
         fb:87:fc:b1:8f:72:6c:f6:a0:78:ea:28:df:f7:b8:3f:dd:44:
         b0:72:d6:d6:8b:b1:49:7d:e9:54:a0:ef:62:79:8d:f1:ee:8e:
         87:b1:8c:fc:60:73:8c:1f:55:dd:22:71:e4:f6:5b:14:4d:c6:
         d1:ed:b4:13:80:55:b5:6f:8b:a8:e0:f4:18:a2:8a:ba:4b:97:
         46:be:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 00:23:18 2024 by rpki-client on console-fra.rpki-client.org