Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.mft
File:                     F8A856531D031C268A60E567AA8452F1F7F438A4.mft (raw, json)
Hash identifier:          xgpstA5R+g0KARzX6Gy9kYuq8lnJbWXNTlf5I9ck0zw=
Subject key identifier:   81:B0:1A:C5:86:15:EF:D2:1A:67:CE:D5:7C:08:A8:71:15:3B:D0:09
Authority key identifier: F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4
Certificate issuer:       /CN=F8A856531D031C268A60E567AA8452F1F7F438A4
Certificate serial:       4806D448132363D6AB426E570067F08B3BF27214
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.mft
Manifest number:          0102
Signing time:             Wed 09 Oct 2024 05:10:02 +0000
Manifest this update:     Wed 09 Oct 2024 05:05:02 +0000
Manifest next update:     Thu 10 Oct 2024 08:44:02 +0000
Files and hashes:         1: 3138392e38342e35362e302f32322d3234203d3e20323731373030.roa (hash: UC7Arpj5KJ83nfAN2QgmtUVJp5kD2F2Y+l9QccSctgk=)
                          2: F8A856531D031C268A60E567AA8452F1F7F438A4.crl (hash: vNA/U3wk4OHzapPJ3AXQlHTcakNRd/HV1OEqA9PHavg=)
                          3: 323830343a376661343a3a2f33322d3438203d3e20323731373030.roa (hash: LH+9SfwyhKxur+/1H9xiHlcumWy6F/MHXTbfSOxiZdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:06:d4:48:13:23:63:d6:ab:42:6e:57:00:67:f0:8b:3b:f2:72:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A856531D031C268A60E567AA8452F1F7F438A4
        Validity
            Not Before: Oct  9 05:05:02 2024 GMT
            Not After : Oct 10 08:44:02 2024 GMT
        Subject: CN=81B01AC58615EFD21A67CED57C08A871153BD009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:c8:cb:1c:a8:82:b5:82:9f:c2:d0:9d:47:
                    de:47:ff:f2:fa:fe:64:c0:e8:c8:3e:73:55:43:3e:
                    56:1c:a5:91:91:71:57:b7:58:09:10:af:80:80:10:
                    8e:7d:03:b2:30:1d:47:b7:e6:4e:1a:69:7f:0e:f1:
                    3a:c0:28:90:a1:35:a0:94:6a:2f:b5:22:7b:87:08:
                    67:66:75:69:0b:1f:ae:8a:35:42:c3:a2:1f:cd:b7:
                    d9:a0:25:b2:c7:c9:39:2b:35:7f:b7:33:90:7f:26:
                    84:22:c5:42:a7:9c:02:b1:f8:18:94:d2:a2:c9:fe:
                    3e:75:1d:f2:19:c3:81:40:35:9a:fa:f8:d0:c1:c4:
                    d0:16:64:3c:9f:f4:ab:f2:4a:b9:35:0c:52:63:a5:
                    0d:6a:f4:0a:19:61:80:ba:f0:35:85:e3:e5:ba:14:
                    7f:28:4b:e4:bd:af:d0:7c:1f:40:68:7d:8b:dd:78:
                    9d:d1:3a:95:7a:f4:7a:c2:f1:09:9b:df:7d:55:5b:
                    5c:9a:1b:1a:c5:a4:57:03:a7:81:14:e9:ee:3d:f5:
                    10:b0:64:85:f0:9b:b9:1e:db:55:cd:00:55:2a:9d:
                    a6:d4:e8:9d:f8:c9:40:13:ae:bf:25:2e:ce:e5:c7:
                    2d:52:07:f2:19:c2:7f:f4:18:70:c5:1b:02:50:cd:
                    5f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B0:1A:C5:86:15:EF:D2:1A:67:CE:D5:7C:08:A8:71:15:3B:D0:09
            X509v3 Authority Key Identifier:
                keyid:F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:7c:f4:87:f6:fb:51:29:7a:21:2b:fa:7f:1f:50:8a:37:
         50:f6:6d:ce:6a:86:9a:0c:e5:92:e3:fc:0c:1d:5c:bd:0b:52:
         8a:c8:13:cb:a6:34:3a:aa:72:9b:39:a5:e4:c7:83:27:1b:2d:
         5b:34:3d:98:9d:62:60:ed:9b:8f:a4:e8:a7:9b:3e:10:b1:cc:
         a4:fd:80:d1:96:33:46:37:15:76:de:ba:db:7a:b4:1b:4f:7d:
         19:5a:75:12:ad:55:36:39:18:9b:77:40:e8:3f:cc:46:6d:42:
         80:1e:a1:99:90:06:fd:29:8e:f9:63:92:5a:a7:f4:92:04:b6:
         7d:f7:83:15:f7:cd:64:2f:25:b3:94:5f:02:a3:ba:18:0d:fb:
         49:49:60:a3:3d:bf:d5:5c:4b:5d:28:24:52:04:4f:35:f4:89:
         96:75:93:48:8c:df:cc:13:89:89:6d:40:aa:2b:1f:93:b4:d8:
         dc:02:96:fc:87:13:88:68:a1:53:01:cc:d0:66:af:4f:5b:fa:
         8d:73:71:76:8e:70:19:6e:26:bb:14:53:dc:48:63:85:f6:33:
         20:24:aa:5c:e1:ce:0f:51:22:43:ad:0b:37:7b:60:86:c4:65:
         43:51:d4:07:d9:97:a4:48:5b:79:34:1f:58:e6:4c:91:f6:e1:
         33:13:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----