Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.mft
File:                     12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.mft (raw, json)
Hash identifier:          5yHlXEgti7/Xph75CIcLDC+8reHNh9ZubRdIz1wbPnY=
Subject key identifier:   64:B1:58:CE:C9:29:43:3B:8A:B8:2E:0C:E4:C7:59:C6:F2:98:CD:73
Authority key identifier: 12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00
Certificate issuer:       /CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
Certificate serial:       35394C8E618766F2BD8F72FC08D6EB9FDC0FF7F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.mft
Manifest number:          01FA
Signing time:             Mon 15 Apr 2024 05:20:38 +0000
Manifest this update:     Mon 15 Apr 2024 05:15:38 +0000
Manifest next update:     Tue 16 Apr 2024 06:30:38 +0000
Files and hashes:         1: 12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.crl (hash: wPG2V9tTTYu3SOE8jl7ZqmhipP9C8qzozWVkmjcD8hk=)
                          2: 323830343a323433383a3a2f33322d313238203d3e20323634323039.roa (hash: Ka5Boo0UaNpouXXNjqKbppli/b98ycp9+RPjVNL/rLk=)
                          3: 3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa (hash: K4ASlRlpj1tDHqFQaHMY1INZnc0jGPu2tnxtaRNkycM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:39:4c:8e:61:87:66:f2:bd:8f:72:fc:08:d6:eb:9f:dc:0f:f7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
        Validity
            Not Before: Apr 15 05:15:38 2024 GMT
            Not After : Apr 16 06:30:38 2024 GMT
        Subject: CN=64B158CEC929433B8AB82E0CE4C759C6F298CD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:e3:e4:64:c7:93:98:1f:2e:f8:6b:16:d6:
                    59:2b:39:3f:11:3b:bc:b5:0a:79:97:fd:e9:ec:02:
                    e0:b3:87:b0:5b:c2:6f:f0:8c:5b:73:f7:9e:41:af:
                    10:d9:cb:3f:f5:1c:ed:bd:bd:d6:f7:7f:de:79:11:
                    ab:95:05:a7:13:f7:0e:81:0a:f1:3f:65:00:fb:dc:
                    05:d7:5b:3f:c5:f2:d8:af:b9:28:cc:fe:71:c9:75:
                    0c:ee:a1:54:7d:6a:bb:33:93:56:e5:9b:a6:2c:fd:
                    42:ab:13:83:9e:a4:47:1b:0e:76:df:9f:97:55:43:
                    a5:ee:6f:0c:00:f6:5d:e8:77:9f:ed:f6:63:11:8d:
                    64:b9:93:6a:bb:21:23:59:46:ac:00:40:83:07:5b:
                    1f:08:64:fd:25:75:ae:fb:66:4c:76:2d:e3:e8:d7:
                    bb:d1:7d:81:6f:2c:71:15:36:12:16:80:82:cd:b7:
                    3d:1b:a3:4b:76:8b:e8:89:d0:42:fc:a5:d3:32:0e:
                    10:8c:44:0c:b8:b5:99:4e:1f:0b:0d:ca:3e:59:ba:
                    fa:54:bd:65:d3:9c:fd:02:ea:9f:c7:29:39:d6:01:
                    b3:e7:41:13:6d:be:e7:2e:41:23:af:f8:aa:43:52:
                    83:2d:2d:44:f8:13:22:c9:99:6d:f0:9a:6b:a6:40:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:58:CE:C9:29:43:3B:8A:B8:2E:0C:E4:C7:59:C6:F2:98:CD:73
            X509v3 Authority Key Identifier:
                keyid:12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:1c:3a:95:8f:76:b2:be:5b:03:3f:46:ba:e4:85:b7:d3:
         28:c8:77:62:e3:36:14:18:4b:4d:c7:3d:69:d9:ff:9c:1f:88:
         39:35:cf:fb:53:bd:a9:20:ce:14:a4:cf:b4:ad:0d:68:4a:d2:
         70:99:93:ff:ad:48:8e:a8:1d:ad:cf:c4:80:0f:0e:be:17:e6:
         e3:88:0a:a6:7c:27:ed:75:07:54:f5:d9:2f:e4:c2:72:33:76:
         3f:34:f1:72:24:38:52:0f:2d:71:d4:6c:74:2b:fd:4c:27:ad:
         47:79:5b:6e:4f:1f:d2:f4:60:d5:60:e0:4f:01:9f:8e:30:e9:
         f6:06:fa:30:a1:93:57:3b:10:5a:b8:5b:be:6b:a9:4b:7c:29:
         a1:a8:68:fc:c8:5f:ec:a2:26:e3:bf:4a:7b:bf:b3:c5:c2:3a:
         50:03:30:78:fd:bd:e5:7e:ec:b0:bc:70:dd:3d:48:cf:44:66:
         c8:d2:31:c6:6c:ef:5d:41:ed:45:89:d6:ac:91:d1:78:7f:6e:
         af:d6:8f:64:0b:12:31:42:02:d1:1c:8d:05:8a:65:39:4e:d4:
         cc:61:81:ba:65:ef:e8:9b:08:40:11:a1:9a:8a:57:d0:5a:fe:
         6b:53:f1:5d:41:75:91:fc:ae:78:c0:bd:3b:38:4b:6c:b7:63:
         07:d3:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----