Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.mft
File:                     3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.mft (raw, json)
Hash identifier:          JdZmLw4lb5DVahWyjQvXU/HJG++pEZiE7qttWMmNEO8=
Subject key identifier:   BA:AA:AA:11:B1:CD:C1:55:0C:FA:03:5F:77:76:DD:76:4E:88:95:70
Authority key identifier: 3F:F1:1F:CE:DE:3E:F3:58:DA:0D:71:20:F9:63:4B:6A:91:4C:81:71
Certificate issuer:       /CN=3FF11FCEDE3EF358DA0D7120F9634B6A914C8171
Certificate serial:       6F291EC8BA2745C6969D9691CD3EFE4FF87DBDDD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.mft
Manifest number:          88
Signing time:             Fri 02 Dec 2022 06:56:25 +0000
Manifest this update:     Fri 02 Dec 2022 06:51:25 +0000
Manifest next update:     Sat 03 Dec 2022 10:32:25 +0000
Files and hashes:         1: 3133382e3132312e34342e302f32322d3234203d3e20323634323830.roa (hash: 18ETgG6aMLzUjMcSYXlJWb2/vueqAC8RG5SG7eaW0Jg=)
                          2: 323830343a323536633a3a2f33322d313238203d3e20323634323830.roa (hash: xXrUsGiYh07kg3hgW+Py+dO0D5Y1jiKg7HXVspaphJk=)
                          3: 3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.crl (hash: TlVkZ8MzWN32HHC2eY3fSfHzVyAAlX8f9dR5vmIg1Zs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:29:1e:c8:ba:27:45:c6:96:9d:96:91:cd:3e:fe:4f:f8:7d:bd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF11FCEDE3EF358DA0D7120F9634B6A914C8171
        Validity
            Not Before: Dec  2 06:51:25 2022 GMT
            Not After : Dec  3 10:32:25 2022 GMT
        Subject: CN=BAAAAA11B1CDC1550CFA035F7776DD764E889570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:b9:2d:5f:36:9b:79:09:ff:b1:54:bc:49:
                    e2:be:17:ba:b8:50:df:74:2e:11:a0:65:d7:e3:c4:
                    4d:80:cc:dd:a6:10:cf:d6:66:37:25:d7:c3:e6:5f:
                    ab:6f:0a:c8:30:da:34:2b:d6:8f:4f:38:37:d5:06:
                    ef:56:e1:ae:64:cf:66:ac:ec:8f:b9:9e:51:f5:55:
                    34:e4:f0:3c:df:a8:88:4c:dc:40:14:cf:14:fe:ae:
                    bd:2b:79:30:62:7d:3c:48:4b:a3:74:b3:74:66:fd:
                    7b:83:8c:7b:58:bd:88:53:bc:59:6a:f3:58:22:74:
                    d6:ba:5d:cb:69:ae:b7:30:26:44:d8:ab:eb:4f:3c:
                    a8:90:78:02:e8:5c:1d:ae:15:e3:f5:54:88:71:1c:
                    63:74:30:2c:db:d1:1f:77:61:8b:59:2b:b7:48:79:
                    d8:ac:49:65:69:f9:f5:12:a5:d1:f0:04:f9:52:72:
                    df:c6:81:40:cf:af:bf:7c:9c:f2:0f:15:93:4e:cb:
                    ae:42:af:9b:8e:58:c4:c5:60:6f:d0:9d:e7:d7:64:
                    da:6a:be:01:b9:95:5b:95:b3:11:22:b3:d0:dc:21:
                    6e:a8:92:84:67:af:82:f7:c2:d1:b0:03:ef:4e:86:
                    89:57:22:8b:5d:19:6a:2f:65:cd:38:7a:85:f8:6b:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:AA:11:B1:CD:C1:55:0C:FA:03:5F:77:76:DD:76:4E:88:95:70
            X509v3 Authority Key Identifier:
                keyid:3F:F1:1F:CE:DE:3E:F3:58:DA:0D:71:20:F9:63:4B:6A:91:4C:81:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ff:a4:53:84:9c:cc:03:fa:9b:f9:58:3d:8d:a6:a3:c5:b5:
         b7:c8:3d:6e:c3:1b:91:c3:25:9c:0d:0e:43:d0:48:7b:3c:04:
         63:d7:df:58:b2:b7:a1:d6:94:0d:91:42:c9:3c:fd:c0:88:e5:
         eb:c3:cb:ed:e4:44:4d:aa:53:b8:95:21:82:c5:df:d0:13:d0:
         ef:20:02:91:f2:e9:66:e3:78:a3:31:05:e0:30:8c:ac:8f:64:
         e9:44:21:d5:9e:c8:4e:35:7d:32:53:c4:8a:8b:c4:0e:08:5a:
         89:d6:b0:66:78:0e:f3:6c:81:e2:4d:c2:f9:fd:7f:de:68:a7:
         c4:ab:48:a3:47:b6:ca:11:a0:f3:d2:f1:15:a9:f3:34:90:03:
         65:ca:37:1e:ee:f3:14:5a:c3:d9:0a:d1:39:ef:98:ee:76:4c:
         84:28:2f:0c:1d:b7:7b:c0:a7:60:f0:52:a2:84:71:53:d0:07:
         c2:c4:ed:28:58:13:02:3a:9c:cc:b2:4a:9b:ac:5e:57:a0:91:
         10:75:81:8a:bb:4e:d0:0e:ff:3e:02:ff:0d:13:89:8b:22:f9:
         47:c4:ff:d3:1f:1c:9e:a4:e0:b4:d2:5c:32:7c:10:43:35:87:
         d5:ec:ef:53:47:00:78:6c:17:d2:90:66:27:ba:1c:f3:0e:04:
         87:67:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----