Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.mft
File:                     AF989BC34E39408F11829121DDD4BE12E79A7C16.mft (raw, json)
Hash identifier:          aeumvRoS2fCqUtJ7GNywejrkvWxtFmKGfsTf0nto2Io=
Subject key identifier:   F4:66:CC:6F:7D:47:4A:DC:26:A6:A5:4F:4B:7E:0B:DC:96:41:F9:15
Authority key identifier: AF:98:9B:C3:4E:39:40:8F:11:82:91:21:DD:D4:BE:12:E7:9A:7C:16
Certificate issuer:       /CN=AF989BC34E39408F11829121DDD4BE12E79A7C16
Certificate serial:       38E52622D02EE211392FBAEF797A8D0DAA8EAFCD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.mft
Manifest number:          4F
Signing time:             Tue 29 Aug 2023 10:51:09 +0000
Manifest this update:     Tue 29 Aug 2023 10:46:09 +0000
Manifest next update:     Wed 30 Aug 2023 12:13:09 +0000
Files and hashes:         1: 3138312e3138392e36382e302f32322d3234203d3e20323731343232.roa (hash: RbfDUbIWH4RHAU16fR9fCpQxOXZdKx2/eFcm9X7qq44=)
                          2: 323830343a376234383a3a2f33322d3438203d3e20323731343232.roa (hash: t5kb8GPqzgTYauEG/8VAF0U9mbGTMUiciLtrIN1PVMI=)
                          3: AF989BC34E39408F11829121DDD4BE12E79A7C16.crl (hash: bb7IZ36DJiuJaOEaHvMar/aGbIQ4rZA7TyTGYsXx9Eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:26:22:d0:2e:e2:11:39:2f:ba:ef:79:7a:8d:0d:aa:8e:af:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF989BC34E39408F11829121DDD4BE12E79A7C16
        Validity
            Not Before: Aug 29 10:46:09 2023 GMT
            Not After : Aug 30 12:13:09 2023 GMT
        Subject: CN=F466CC6F7D474ADC26A6A54F4B7E0BDC9641F915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:c0:f4:7b:e3:d4:50:16:cb:49:8c:01:29:
                    ac:ea:8f:ee:a7:1f:b8:2f:cc:18:61:a7:81:9a:93:
                    48:ad:e4:55:7c:0b:34:1a:db:1d:31:d9:e0:f4:98:
                    6d:28:7d:24:fb:55:8b:33:94:8d:54:3b:b0:5f:07:
                    a7:46:d2:37:25:7a:c2:e1:5e:7d:1e:f6:57:50:a3:
                    52:b0:b4:71:8a:0c:29:e6:2c:79:ca:27:96:15:3a:
                    77:86:23:53:3a:5a:36:74:1a:6f:a8:dd:12:ae:aa:
                    37:ec:4c:41:e6:bb:41:33:f0:1e:9a:30:1f:83:6e:
                    a6:bc:0e:63:42:81:0a:94:5b:1a:5a:8d:fc:20:31:
                    68:7b:79:ed:14:b7:44:47:ca:52:89:55:2c:97:8b:
                    9b:ed:25:33:b7:1e:8c:96:6a:04:c3:66:a9:66:b9:
                    02:05:f4:11:da:fc:7a:fb:d9:63:3b:ee:49:be:6c:
                    4f:02:01:a8:77:70:68:20:42:72:bb:27:d5:b5:2a:
                    08:47:63:0c:fd:46:60:96:1c:94:4f:3f:c5:5c:b9:
                    38:c5:15:a6:34:5b:b0:0b:76:d9:6a:0b:d1:0d:b6:
                    5d:bd:02:bc:e6:9a:7e:e5:f1:af:ed:44:0f:4f:3f:
                    87:e1:c8:3f:9e:1b:12:b9:fe:72:41:76:8c:d1:b2:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:66:CC:6F:7D:47:4A:DC:26:A6:A5:4F:4B:7E:0B:DC:96:41:F9:15
            X509v3 Authority Key Identifier:
                keyid:AF:98:9B:C3:4E:39:40:8F:11:82:91:21:DD:D4:BE:12:E7:9A:7C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/AF989BC34E39408F11829121DDD4BE12E79A7C16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:0f:d5:35:f4:0e:e1:da:38:1e:65:a8:cf:d9:16:aa:38:06:
         b6:c3:e8:d2:f7:d0:a7:ce:ff:7c:18:ff:2a:28:16:f2:1e:7a:
         41:23:15:ec:b8:6f:a1:18:4f:2d:2e:53:1a:db:ec:c6:f3:fc:
         c4:8f:32:aa:0a:7e:53:b6:82:e9:e7:c3:b2:ee:42:d8:20:f6:
         a8:85:72:fd:a9:da:47:e2:f3:39:a6:21:f4:f5:a2:d4:39:e1:
         d3:4f:77:95:1c:78:9a:3a:67:31:9a:8e:bf:bd:05:18:6d:b8:
         33:5b:36:ac:2c:75:30:3e:ba:41:b1:b7:c6:5d:46:5e:22:79:
         9c:d5:d3:f3:54:9a:c8:27:f1:d0:94:f9:f4:27:94:5f:e7:6b:
         db:41:13:5c:26:bb:bc:ae:a8:1f:79:b7:6c:75:b5:12:43:08:
         7b:7d:71:d5:59:2a:e9:c3:d2:4f:5a:d7:73:79:72:c8:14:da:
         77:48:29:61:8c:44:ba:da:01:d8:cb:e2:60:f4:28:e9:4f:6a:
         c1:f9:b1:33:a8:30:60:7d:2e:4e:e0:b4:c4:8d:46:3b:d1:df:
         d3:fa:a4:9d:f1:3d:5a:c2:58:2e:cc:1c:78:26:7d:06:cd:5e:
         ee:b5:49:d1:b8:6f:3e:8c:c7:87:c2:90:2b:ba:c9:50:8e:90:
         f2:74:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----