Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.mft
File:                     FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.mft (raw, json)
Hash identifier:          +5rVdx6ibIWZmyytytNWcbRm8F3QKyhQJngFAstPvYg=
Subject key identifier:   2A:EB:D1:CC:9F:06:54:69:CC:A4:64:5E:2B:72:13:BB:DA:4E:46:A8
Authority key identifier: FA:BD:83:A9:A4:04:3A:0D:F1:BF:A7:64:01:87:B4:19:CB:2E:3A:2B
Certificate issuer:       /CN=FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B
Certificate serial:       79D3A2F8F221B5B927827ECE868F5C6F90F1DC2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.mft
Manifest number:          4A
Signing time:             Mon 15 Apr 2024 03:12:46 +0000
Manifest this update:     Mon 15 Apr 2024 03:07:46 +0000
Manifest next update:     Tue 16 Apr 2024 06:35:46 +0000
Files and hashes:         1: 3137372e37322e382e302f32312d3234203d3e203532383134.roa (hash: muRdk1i6CV811JIg79IwU8ORFZLqiwfJHnahDonDFzw=)
                          2: FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.crl (hash: sGzh9JDhe/Gg2Bkuj7rX+cb6HAXjlU1drmOWXo8ijOw=)
                          3: 323830343a343565383a3a2f33322d3438203d3e203532383134.roa (hash: Uo5ylaOnjSnAS93SzkDnJk/6k8qYJdj4I1dPgMYJ0kE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d3:a2:f8:f2:21:b5:b9:27:82:7e:ce:86:8f:5c:6f:90:f1:dc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B
        Validity
            Not Before: Apr 15 03:07:46 2024 GMT
            Not After : Apr 16 06:35:46 2024 GMT
        Subject: CN=2AEBD1CC9F065469CCA4645E2B7213BBDA4E46A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:9b:a9:f3:88:0e:f1:72:53:df:42:32:85:
                    10:c1:ea:9e:35:e2:4a:28:eb:0b:6d:84:65:90:de:
                    55:27:65:d1:62:64:f5:e6:ac:eb:5e:f4:0f:3a:39:
                    e4:10:36:66:d6:c2:54:98:7c:a5:c4:ae:53:76:3b:
                    6d:47:8e:42:73:82:f9:4c:e9:fe:ee:8f:8f:c3:a1:
                    6c:8c:3f:9f:56:c0:70:d1:2b:02:6d:57:31:77:ab:
                    39:b6:0f:07:ea:3b:71:5e:3f:f8:34:00:35:56:5f:
                    b0:7b:78:88:e8:c3:cd:3e:17:c4:2f:06:b5:34:5a:
                    70:58:ca:4a:c0:15:16:ae:af:b9:4f:bf:06:85:78:
                    dd:8c:e7:7e:3f:7d:ec:f9:f9:4c:d5:98:3e:3b:ef:
                    88:aa:fa:f2:e0:d1:0b:13:2d:55:fe:95:bf:c8:08:
                    3f:21:5b:05:1a:83:d6:f8:1e:2e:56:c9:8c:f4:08:
                    bb:e7:7c:73:b5:a6:5b:b7:fb:c7:59:77:41:a5:ed:
                    df:d6:cf:e5:ef:81:39:0f:e4:fb:97:04:b0:f1:81:
                    31:e9:8a:17:79:b0:3c:ca:dc:61:ae:4c:29:fa:28:
                    09:11:e6:95:cc:0f:aa:c4:62:eb:e6:95:e9:6d:2f:
                    87:f5:fa:3d:92:f8:50:73:2b:c5:c0:b2:59:f9:48:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EB:D1:CC:9F:06:54:69:CC:A4:64:5E:2B:72:13:BB:DA:4E:46:A8
            X509v3 Authority Key Identifier:
                keyid:FA:BD:83:A9:A4:04:3A:0D:F1:BF:A7:64:01:87:B4:19:CB:2E:3A:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/0/FABD83A9A4043A0DF1BFA7640187B419CB2E3A2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:f3:91:bd:3d:3e:88:fb:d2:de:47:33:b8:d5:35:cf:23:
         3a:43:36:95:58:db:68:42:01:37:59:94:69:3d:1b:65:54:c4:
         33:d1:4b:95:3e:22:ed:77:f6:0d:ca:35:6d:1b:a4:f6:25:c1:
         96:80:fa:36:f4:ad:1e:4e:87:d3:80:70:41:76:b5:86:5a:85:
         1f:39:0b:6d:76:0f:7f:7a:86:e5:00:d3:10:27:82:9f:36:51:
         ad:12:d1:36:f4:a1:a4:41:61:82:95:0a:18:48:64:04:99:16:
         9f:b2:05:9e:eb:63:82:aa:25:a9:f3:e9:49:bb:fe:fa:1e:73:
         a1:dc:87:56:aa:b3:65:a5:5a:7a:8c:65:2f:5f:ab:13:ff:7d:
         3a:f5:58:89:97:6e:12:c5:fd:f4:68:78:71:aa:38:60:53:c7:
         77:89:66:7c:4d:48:5f:89:b4:b0:bb:be:57:05:25:b5:55:d6:
         88:1c:8e:af:3a:63:42:07:d4:02:24:9a:a7:15:b6:10:fc:06:
         aa:64:33:fd:64:89:23:43:83:24:75:00:63:8b:ba:17:7a:84:
         fa:8e:2e:ca:c7:d8:62:5e:ef:3e:f1:5e:04:17:77:ad:71:44:
         b8:d2:c9:aa:c2:23:44:95:ac:1a:d4:7e:76:08:82:02:57:37:
         7f:7d:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----