Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/0/C994CAEDEA43F52AA73862843BC3D59F732B3BC9.mft
File:                     C994CAEDEA43F52AA73862843BC3D59F732B3BC9.mft (raw, json)
Hash identifier:          s0kLfBiGraSh6NAzU2YKUEL945R/aZE5LLCQZ7ScC1c=
Subject key identifier:   85:21:B6:D8:6B:5E:98:78:8E:3E:E7:3A:CA:B7:8F:E7:1E:28:6F:FA
Authority key identifier: C9:94:CA:ED:EA:43:F5:2A:A7:38:62:84:3B:C3:D5:9F:73:2B:3B:C9
Certificate issuer:       /CN=C994CAEDEA43F52AA73862843BC3D59F732B3BC9
Certificate serial:       731B1171EC69B629D460F358FD47678C23485592
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C994CAEDEA43F52AA73862843BC3D59F732B3BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/0/C994CAEDEA43F52AA73862843BC3D59F732B3BC9.mft
Manifest number:          01F7
Signing time:             Wed 17 Jan 2024 18:55:08 +0000
Manifest this update:     Wed 17 Jan 2024 18:50:08 +0000
Manifest next update:     Thu 18 Jan 2024 19:38:08 +0000
Files and hashes:         1: C994CAEDEA43F52AA73862843BC3D59F732B3BC9.crl (hash: 4+3nb361RB4Q9YZAAUKIcwTG5hg1CS8ht4Zf4QTpYCg=)
                          2: 323830343a383138303a3a2f33322d3332203d3e20323732343538.roa (hash: ATom7Pq4wX655NkuCZitznraUwXudUe5thpd1is2vlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1b:11:71:ec:69:b6:29:d4:60:f3:58:fd:47:67:8c:23:48:55:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C994CAEDEA43F52AA73862843BC3D59F732B3BC9
        Validity
            Not Before: Jan 17 18:50:08 2024 GMT
            Not After : Jan 18 19:38:08 2024 GMT
        Subject: CN=8521B6D86B5E98788E3EE73ACAB78FE71E286FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:b5:d5:71:65:dc:26:78:cb:a5:26:f4:7d:
                    14:99:a4:23:8b:c1:b1:d9:e0:9b:f2:a4:e7:c6:f7:
                    1b:93:53:10:ac:96:82:35:c3:f8:5c:51:be:a6:f1:
                    c4:ed:d8:6b:5b:ea:69:ba:ca:57:6e:93:c8:aa:05:
                    d8:0f:a6:1a:b3:f1:c6:07:45:bb:38:5f:e5:ea:0c:
                    5d:25:ce:39:3d:8d:bf:07:5a:b7:76:fd:43:c3:f8:
                    f1:7f:76:b7:92:21:b9:64:19:7d:c6:3e:dd:b9:c2:
                    54:0d:5c:db:1a:3f:07:da:73:17:10:36:0e:e6:10:
                    f1:07:3a:19:1c:a1:3b:9a:9f:b0:20:a0:4a:76:25:
                    b0:54:7d:5d:74:55:56:41:b6:23:d9:b4:ea:b8:82:
                    d6:4d:7b:1f:29:60:45:cd:6d:b4:2b:26:c2:b8:ef:
                    a2:74:ba:2d:23:cd:39:72:40:34:34:8c:c3:e4:78:
                    e5:c8:f3:67:18:63:9f:98:eb:ec:db:f3:75:9b:a0:
                    42:da:34:8a:47:d4:58:b6:59:91:87:aa:37:49:40:
                    c8:66:72:c8:c0:3f:f0:f7:eb:9f:15:29:73:b0:b6:
                    e0:85:7d:c9:9f:e9:96:51:7f:4a:3c:72:18:56:f2:
                    bf:6b:e1:36:d6:bf:1e:68:c3:9b:14:8c:9b:20:49:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:21:B6:D8:6B:5E:98:78:8E:3E:E7:3A:CA:B7:8F:E7:1E:28:6F:FA
            X509v3 Authority Key Identifier:
                keyid:C9:94:CA:ED:EA:43:F5:2A:A7:38:62:84:3B:C3:D5:9F:73:2B:3B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/0/C994CAEDEA43F52AA73862843BC3D59F732B3BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C994CAEDEA43F52AA73862843BC3D59F732B3BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/0/C994CAEDEA43F52AA73862843BC3D59F732B3BC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:09:b0:6b:44:a9:49:eb:35:3d:5d:51:2f:82:bc:54:5b:50:
         a2:06:f4:99:c9:52:d9:c6:de:ac:a1:14:76:3e:c3:95:20:77:
         ad:86:30:23:10:f5:08:5e:4c:7e:84:ff:d2:78:2e:50:96:ec:
         72:52:b2:87:3b:cf:d5:71:0a:1e:c8:aa:15:30:d6:c1:28:ee:
         16:b9:cf:f8:17:fc:db:3f:dc:9e:5f:f1:5a:e7:35:de:57:f3:
         ca:8f:19:3e:4f:f2:b6:c8:bd:8a:bf:da:d8:11:b3:cc:63:81:
         31:f3:ab:cb:93:75:58:0d:06:77:44:a2:ce:5c:ae:b8:11:7d:
         3b:97:aa:ff:73:32:38:89:83:4e:c5:b4:a3:42:8d:07:03:6e:
         47:4f:74:83:f3:42:8b:a6:ba:a9:bb:95:cd:fc:19:33:77:cf:
         46:27:0a:6a:d1:84:09:89:e6:f6:41:fe:ee:60:a4:6b:a7:c6:
         29:06:4f:6c:c6:49:8d:89:47:fb:20:1c:90:33:1c:68:c7:0c:
         0e:13:6d:d8:74:3b:7d:66:f4:7f:1b:53:96:25:a6:9c:a9:c4:
         c5:5d:0d:89:11:ec:34:cc:b4:70:22:73:02:f7:43:e6:a8:63:
         fa:a1:78:4e:c7:a7:2c:32:bc:48:c5:01:bc:83:bb:e8:11:43:
         36:7e:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----