Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.mft
File:                     813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.mft (raw, json)
Hash identifier:          dhY0r3deB/cOOROtAR9cTttWol8awVt2M7r2IUuodx4=
Subject key identifier:   FA:63:8A:FE:34:53:65:E5:50:B8:69:C2:13:AB:D6:3B:16:14:E4:12
Authority key identifier: 81:36:14:C4:3A:5B:26:F0:DF:D7:BA:0A:35:78:F1:F6:8B:3A:0A:C5
Certificate issuer:       /CN=813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5
Certificate serial:       72ECE4A0EB6B711C44732D02553C24175E0E0DD3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.mft
Manifest number:          025A
Signing time:             Mon 11 Dec 2023 01:55:32 +0000
Manifest this update:     Mon 11 Dec 2023 01:50:32 +0000
Manifest next update:     Tue 12 Dec 2023 02:55:32 +0000
Files and hashes:         1: 813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.crl (hash: ldm98KN2ITmaymd8JXrC8VBMQfHo60U91XzojbTWNS4=)
                          2: 323830343a343034303a3a2f33322d3334203d3e20323635393437.roa (hash: uhy1O7nmNd6S8ysIOSkJF1XHu8dm+j/lNJOdEJIenRQ=)
                          3: 3136342e3136332e37362e302f32322d3234203d3e20323635393437.roa (hash: erKDex+iUvPSMpRiJU4LLQ52+G7THzYNcqvZZ5Qxblk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ec:e4:a0:eb:6b:71:1c:44:73:2d:02:55:3c:24:17:5e:0e:0d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5
        Validity
            Not Before: Dec 11 01:50:32 2023 GMT
            Not After : Dec 12 02:55:32 2023 GMT
        Subject: CN=FA638AFE345365E550B869C213ABD63B1614E412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:f0:4b:87:a9:7e:da:ad:97:ee:01:11:72:
                    78:31:33:1b:86:5c:ef:be:d2:69:60:6a:c5:9c:10:
                    4a:df:74:4d:5c:3f:e6:92:63:68:7a:9f:63:59:29:
                    1c:e7:98:e1:b7:3a:a7:91:c5:56:db:34:d3:ce:84:
                    4f:39:4d:9f:e4:f0:26:19:9a:18:8b:c1:06:6f:fc:
                    4a:e2:db:2e:1e:04:78:ad:2b:e1:10:c3:1c:a6:29:
                    db:db:8a:a7:23:75:97:0a:40:ba:0d:6e:24:1f:eb:
                    b3:49:bd:09:e9:5e:ce:8a:ea:24:8d:48:99:e5:a9:
                    0c:6e:d1:9a:ca:3c:80:f3:ed:65:c5:89:45:12:19:
                    f1:25:4d:9b:80:20:ad:be:98:0d:ae:6b:bb:82:c0:
                    a3:5f:78:60:1f:2f:a0:93:95:24:67:1e:b9:50:21:
                    5d:50:22:14:79:90:ef:f8:0b:56:01:13:52:43:49:
                    fe:bb:74:c9:de:87:22:f5:ef:56:aa:d3:fa:7f:97:
                    e6:d5:a8:89:8d:6a:26:f9:0f:61:0a:b1:41:cf:52:
                    7b:8a:6f:c5:3b:c9:8a:4e:8a:52:23:34:3d:3a:ba:
                    11:52:c8:82:54:ee:44:0d:43:63:34:ee:8b:7b:78:
                    e4:c1:51:ff:78:b2:ea:cf:46:45:bb:21:95:3e:43:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:63:8A:FE:34:53:65:E5:50:B8:69:C2:13:AB:D6:3B:16:14:E4:12
            X509v3 Authority Key Identifier:
                keyid:81:36:14:C4:3A:5B:26:F0:DF:D7:BA:0A:35:78:F1:F6:8B:3A:0A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FEMGmkL6CpWnue3WgXpNgnvssfiWJ2Gnoa5CqTbLvShv/0/813614C43A5B26F0DFD7BA0A3578F1F68B3A0AC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:7d:13:8e:24:86:43:40:11:a2:25:af:a6:a4:6b:ab:f0:
         5a:8e:b9:7c:13:c4:a5:d4:f7:56:ba:e7:6b:25:2a:16:3f:1f:
         9b:c4:e3:00:f3:b0:41:00:e6:8e:5f:82:58:7d:89:2d:1b:1c:
         91:83:2c:9b:11:be:ef:9f:1d:67:43:75:7c:59:7f:6c:8d:02:
         42:66:c6:85:7c:53:6a:ca:fb:23:a1:36:2c:1a:a4:e0:8d:3f:
         75:41:03:cc:82:d6:77:00:00:62:23:e2:52:5c:55:e2:47:d0:
         55:eb:9f:6c:94:a2:c6:c8:2d:09:5d:76:2d:3f:e2:6a:69:f0:
         7a:ea:c5:9f:5d:ee:c3:3b:15:c1:d8:6c:b7:fb:88:1c:5f:89:
         5e:d0:bd:d0:95:fe:57:1f:63:46:9e:c5:24:30:3a:ca:4e:ef:
         dd:44:78:73:17:b8:e9:6f:47:d5:fb:72:0e:ea:11:81:d1:db:
         fa:48:60:5c:81:b5:5d:04:db:55:78:e3:da:05:55:25:a6:f6:
         60:a8:69:c7:8a:c7:b2:ff:b0:71:40:22:66:b2:af:35:01:f3:
         e0:d4:08:ec:b5:0e:bc:0a:03:69:b3:de:55:7c:e2:55:5c:d9:
         48:13:5a:fe:08:6e:3b:2b:dd:c5:1a:1d:29:12:8b:ef:b6:44:
         92:e4:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----