Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.mft
File:                     1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.mft (raw, json)
Hash identifier:          4TEV/f73kHT+2cV4Z8MJ7dXFu1yP3HVDM1Syho3vbCM=
Subject key identifier:   17:2C:5E:BD:8F:03:8A:AF:A4:02:66:39:C7:76:BA:CF:2F:CE:1A:7F
Authority key identifier: 1F:03:81:96:A9:CC:9C:D9:67:E3:F5:DA:06:C7:7C:F9:EA:A4:F9:86
Certificate issuer:       /CN=1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986
Certificate serial:       657CE54CF122AFA989BA8BEC80BA0FAE61A3C1FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.mft
Manifest number:          0279
Signing time:             Mon 15 Apr 2024 06:46:30 +0000
Manifest this update:     Mon 15 Apr 2024 06:41:30 +0000
Manifest next update:     Tue 16 Apr 2024 08:04:30 +0000
Files and hashes:         1: 323830343a336638303a3a2f33322d3332203d3e20323635383937.roa (hash: 8qXKtnyGqOOB83GD1Mgjimn3tYdDjb6vfH0pB7VjMag=)
                          2: 1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.crl (hash: MrVPnsAqcVjjfkMX+nzTgyRr1fYlaodGTwwrATkf1a8=)
                          3: 3132382e3230312e3139362e302f32322d3232203d3e20323635383937.roa (hash: xF+WCCnyCQb9RKR+6Oial0y7G0gP9zxP9wMZYVj06A8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:e5:4c:f1:22:af:a9:89:ba:8b:ec:80:ba:0f:ae:61:a3:c1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986
        Validity
            Not Before: Apr 15 06:41:30 2024 GMT
            Not After : Apr 16 08:04:30 2024 GMT
        Subject: CN=172C5EBD8F038AAFA4026639C776BACF2FCE1A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:0b:ab:60:cf:af:c0:6e:49:68:23:50:f6:
                    cb:02:e7:a5:69:14:9d:f2:3f:f0:4a:67:e2:0e:0b:
                    a0:b5:6c:8e:b9:e9:92:f3:4a:1d:9d:68:76:d3:35:
                    c2:bf:53:b0:85:07:d9:17:d4:89:02:c7:76:24:e2:
                    2c:06:d7:68:f3:8b:a2:14:4d:f1:da:ad:c6:70:96:
                    f5:27:2a:ad:ef:04:27:f6:8c:4e:7c:de:fe:d4:57:
                    d2:5d:da:35:53:ce:29:0a:6f:3e:3d:21:0d:65:b6:
                    4c:dc:10:6e:ac:eb:a8:13:ec:52:ed:e8:ad:eb:f0:
                    35:88:24:9a:9e:ae:60:86:b0:3c:a0:1b:f0:6f:8f:
                    32:58:9d:2e:ab:e4:b9:66:85:57:62:a9:3e:99:cb:
                    85:aa:32:1e:63:15:a5:b9:a5:64:9a:8d:85:80:77:
                    6c:c6:df:50:7e:08:f9:34:eb:ad:12:76:9c:bf:bc:
                    72:7a:64:f7:6e:16:09:71:3a:99:6a:45:27:21:01:
                    61:ef:a2:0b:c0:68:d2:d2:37:07:f7:72:67:ca:14:
                    00:7d:75:12:da:2e:67:8d:aa:6c:85:8a:e8:7f:58:
                    16:2f:50:23:76:08:05:74:32:95:35:d9:9c:88:4b:
                    e0:97:0a:62:29:8c:ed:76:4c:26:ea:ab:46:db:ce:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:5E:BD:8F:03:8A:AF:A4:02:66:39:C7:76:BA:CF:2F:CE:1A:7F
            X509v3 Authority Key Identifier:
                keyid:1F:03:81:96:A9:CC:9C:D9:67:E3:F5:DA:06:C7:7C:F9:EA:A4:F9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/0/1F038196A9CC9CD967E3F5DA06C77CF9EAA4F986.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:ad:a4:ab:f2:af:39:a0:c4:65:e4:8e:2f:18:9a:d7:f5:
         2e:3f:fb:05:b5:1f:9d:6f:29:4c:14:7a:c7:84:12:75:53:9e:
         66:23:64:3e:48:f5:52:3b:b5:d6:d3:1c:bc:73:f5:ad:94:d0:
         cb:53:32:b8:bd:e4:e1:40:9e:12:cf:31:be:ed:82:d3:60:f2:
         03:d5:11:95:ed:72:fb:62:94:01:b6:87:5d:00:7c:89:b6:a7:
         3e:63:bf:31:9a:89:a3:d5:f9:04:c6:0f:c3:63:43:4c:bd:a3:
         c5:75:83:d3:4c:7f:72:34:14:82:59:c0:d1:1f:c1:ee:4e:fa:
         e7:7c:f0:dd:a1:dc:a1:88:16:9d:63:dc:3e:f7:4e:7e:6d:9a:
         cb:96:b5:d8:51:86:73:6c:fe:c3:7a:f1:3d:e5:ad:77:fa:8e:
         6f:92:13:17:7e:5c:1a:ec:81:28:48:0b:43:0d:c9:21:c9:f2:
         ca:af:e0:5e:81:d6:49:1b:7a:49:ce:b0:29:74:d9:27:d3:fe:
         23:4b:57:7c:a4:91:10:69:35:e8:22:51:3b:ab:67:9d:c0:98:
         1b:04:1d:62:5f:57:75:5b:69:be:58:d6:32:56:4c:7f:4b:bb:
         18:0b:68:43:34:bc:34:9d:01:56:ab:3b:89:74:b2:e0:ab:63:
         54:6a:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----