Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.mft
File:                     FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.mft (raw, json)
Hash identifier:          VMHzK3jIUFxge4lPAXuaN4fwGhXWIboRqO9tPIUFICg=
Subject key identifier:   22:BF:96:FC:C7:99:95:FA:62:DF:AE:D4:A6:1C:E9:A5:13:0F:27:35
Authority key identifier: FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB
Certificate issuer:       /CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
Certificate serial:       503AEAC33A74053BBBC68CAFBA54CC8E35963A3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.mft
Manifest number:          02C3
Signing time:             Mon 15 Apr 2024 03:14:32 +0000
Manifest this update:     Mon 15 Apr 2024 03:09:32 +0000
Manifest next update:     Tue 16 Apr 2024 05:16:32 +0000
Files and hashes:         1: 34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa (hash: kbiZkg8VtWFT1AGZzyVj6BkFdZVH22tjLURfZticmU0=)
                          2: 323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (hash: 17N4rQWvLujVQBDcqCFy6f4dgMcNNiHbJXAnhQ+YcqA=)
                          3: FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl (hash: 4DWRe7yw9hgMEnh7m7adaeBT51A8vtWbB8hxz3lDdqA=)
                          4: 34352e3136382e3130392e302f32342d3234203d3e20323638303537.roa (hash: nWQluWFN3pliS/fvNFYp2UJ9UHu1+BY3y6xtnjP0ytk=)
                          5: 34352e3136382e3131312e302f32342d3234203d3e20323638303537.roa (hash: co8Cj0Woh7ZFtU8oHLG7Ka91Im55TXsU/CuXHqY/k3Y=)
                          6: 34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa (hash: n1tLOLN8t3K0MBrDFpOGuFqjemoiTeQ2SomXsCwXNAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3a:ea:c3:3a:74:05:3b:bb:c6:8c:af:ba:54:cc:8e:35:96:3a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
        Validity
            Not Before: Apr 15 03:09:32 2024 GMT
            Not After : Apr 16 05:16:32 2024 GMT
        Subject: CN=22BF96FCC79995FA62DFAED4A61CE9A5130F2735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:7f:19:1f:4a:6c:74:42:07:5e:e1:9c:1e:
                    9d:9f:af:ac:08:a1:72:d0:dd:1e:ef:d7:93:7e:5a:
                    05:89:d4:2e:13:d9:bb:ce:27:6a:47:2f:d1:e9:fa:
                    26:3b:04:25:77:84:ca:30:96:70:17:78:50:d9:59:
                    71:f3:f6:8b:fe:62:12:d7:0f:4c:c4:ef:cd:70:b5:
                    6b:93:df:c4:09:eb:11:3a:8f:88:e3:de:f5:38:11:
                    d4:96:5e:35:b9:bc:9c:92:30:11:15:28:02:86:2e:
                    12:86:5b:76:61:92:db:11:94:46:c3:22:16:85:a5:
                    00:b0:ba:38:57:f0:0e:69:a3:e3:68:77:90:d3:83:
                    6a:ac:cf:1d:6c:79:b2:74:d7:8a:8e:98:8a:26:f1:
                    f8:eb:34:1f:3c:c9:34:45:44:e0:cb:90:50:96:17:
                    3a:c7:1d:bc:59:f7:3d:19:12:1d:9c:70:e2:ef:47:
                    34:db:97:0b:8b:69:ef:67:82:5f:c9:bf:47:0d:f6:
                    1c:ef:bf:51:e6:bd:9d:7f:03:c1:d9:88:91:f3:95:
                    72:fe:cf:9a:8c:a7:33:57:71:82:68:eb:a5:c9:bd:
                    5a:e1:fc:a7:f4:a2:d0:d9:06:62:d0:76:8b:bb:35:
                    7b:3f:c3:b8:1a:d9:00:78:72:6a:07:ad:78:6f:4c:
                    e8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:96:FC:C7:99:95:FA:62:DF:AE:D4:A6:1C:E9:A5:13:0F:27:35
            X509v3 Authority Key Identifier:
                keyid:FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f0:49:d9:53:9d:48:2f:23:c4:06:67:40:c3:b0:0b:8a:b0:
         09:10:1a:0e:f8:99:da:44:33:c1:68:36:a0:2e:3a:f9:36:80:
         4f:a6:4a:43:84:51:43:2d:ee:87:d5:ec:8c:97:f7:b7:37:08:
         27:c1:7d:cd:3f:1d:3a:f3:08:a8:19:cf:eb:6f:c4:88:36:71:
         7a:df:22:fc:c5:55:43:dd:d7:ee:1a:d6:c8:95:7c:5c:97:ac:
         47:43:28:83:49:cd:0b:62:da:d9:7b:bc:b0:82:fa:d3:82:a4:
         ab:ba:e1:93:64:65:84:55:38:f5:91:f6:3b:31:dc:67:a4:eb:
         5a:80:36:2f:c6:0f:d2:ce:48:42:d3:04:99:3a:b7:fa:70:d1:
         e4:a8:00:8c:8d:ec:11:7c:c8:21:c7:55:05:92:cb:9c:cc:c9:
         59:e4:3a:3d:74:7c:83:59:2f:3c:f0:b3:58:d8:bd:6b:46:fd:
         1c:23:98:f2:70:44:17:30:80:f8:1d:cf:8c:b0:e6:c4:87:c9:
         58:a6:fc:08:ed:eb:53:d2:e9:80:ae:3b:94:3d:c5:01:07:0c:
         c8:e2:c7:d1:18:eb:5a:f5:53:d2:36:f2:82:00:d5:c7:3a:00:
         8b:0d:8d:eb:53:a2:bc:c0:52:fa:17:8f:17:df:0d:19:7c:2d:
         27:d9:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org