Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft
File:                     A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft (raw, json)
Hash identifier:          SoREHieoNNfHyYv+yVVCgJ3lwRNzGxfuESjOv8vU0bA=
Subject key identifier:   1F:DA:B6:6D:86:85:F2:D6:66:5B:90:D3:64:30:8A:F9:B1:F2:6F:CA
Authority key identifier: A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A
Certificate issuer:       /CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
Certificate serial:       1027EC11549293221365339613D18E46372E4BD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft
Manifest number:          011B
Signing time:             Thu 31 Oct 2024 08:36:51 +0000
Manifest this update:     Thu 31 Oct 2024 08:31:51 +0000
Manifest next update:     Fri 01 Nov 2024 09:14:51 +0000
Files and hashes:         1: 34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (hash: TXxQk3JhUqnAacLpDfkZIU87cViV/srO5TM8L1oLKlA=)
                          2: 323830343a343464383a3a2f33322d3334203d3e20323637363537.roa (hash: o40eQLKbQh2A5aySTdDNdH21nfFbdIX5N43HAap5BOo=)
                          3: A47835DE736948FACF597EB9C6B08AB544AE9C2A.crl (hash: cOQ3Lz30pR4USfUlmz8+TfcLLm3rzmHbn5AEVZL4DTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:ec:11:54:92:93:22:13:65:33:96:13:d1:8e:46:37:2e:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
        Validity
            Not Before: Oct 31 08:31:51 2024 GMT
            Not After : Nov  1 09:14:51 2024 GMT
        Subject: CN=1FDAB66D8685F2D6665B90D364308AF9B1F26FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:1f:11:2f:a3:2f:2b:ad:98:4c:3f:c7:31:
                    3f:4f:5d:e5:00:db:0f:cb:64:81:f2:dc:d4:82:61:
                    c2:d3:bb:12:6d:38:af:4a:f7:74:8e:56:ab:9f:de:
                    7a:58:4b:a9:87:64:5c:6e:77:ce:51:32:09:d4:ff:
                    b2:28:77:21:01:02:14:e0:fc:95:12:f2:c2:2c:3e:
                    ac:41:36:25:84:f6:9b:46:98:dc:b6:90:50:bc:0f:
                    56:3f:ad:5c:e9:cb:be:5b:47:f0:e4:7e:db:68:3b:
                    1c:cf:dd:e4:ce:13:9e:2e:9d:32:29:91:d2:74:ac:
                    05:75:95:ec:f5:ea:f6:3f:86:3b:d9:62:16:30:bc:
                    32:5c:16:44:ae:bb:e7:37:25:64:a2:28:de:35:91:
                    66:52:61:d7:61:00:02:4a:14:92:0b:f3:dc:db:41:
                    72:35:88:e1:51:89:66:c9:f4:42:06:56:38:b9:b5:
                    ec:f1:fa:21:d6:2d:9d:41:46:a1:96:5f:ff:a3:9d:
                    e6:8e:cb:e2:b7:88:ca:bb:3f:27:d8:76:59:a0:9a:
                    74:c5:61:83:bc:f3:ba:bf:ca:fd:2e:d3:16:65:e7:
                    b1:4f:94:b2:60:83:0e:99:be:2f:57:f6:bd:d6:e0:
                    51:c9:32:8f:1f:71:df:41:26:f1:6d:fb:32:bd:3c:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:B6:6D:86:85:F2:D6:66:5B:90:D3:64:30:8A:F9:B1:F2:6F:CA
            X509v3 Authority Key Identifier:
                keyid:A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3b:b0:bf:df:63:4e:1c:95:65:17:6e:b1:7b:38:33:ae:36:
         05:4d:3e:05:00:e6:a5:23:6f:69:e3:93:21:ba:17:a4:6e:d3:
         ea:4a:cc:23:f7:b2:2d:3d:e5:c6:17:ea:83:21:c7:d4:dd:13:
         63:70:24:e4:ad:21:08:c8:fe:c5:99:20:66:7b:2a:ae:57:d0:
         9d:2b:83:38:a7:bc:23:5a:90:2f:29:98:99:3f:19:e3:81:c3:
         42:0e:36:70:6c:7c:6c:25:fd:06:45:bb:1f:32:3a:a0:e4:35:
         cf:30:5d:3c:4a:ab:52:16:52:40:32:2f:98:22:7b:f7:5a:19:
         06:83:f2:2c:da:7c:9d:96:95:7b:f4:ee:77:b9:3d:9e:fa:2a:
         16:aa:49:ae:78:0b:60:d2:f0:08:59:41:c8:64:1e:bb:e3:d2:
         27:1c:9f:26:f8:67:d8:52:b4:db:b4:88:4e:d9:b4:5d:89:49:
         dc:81:29:1e:10:a1:95:8e:01:67:11:e2:54:60:2c:9d:2e:8a:
         1f:8e:53:4f:7b:8e:9d:14:79:56:5d:b3:d6:d4:d0:9b:4f:2c:
         bf:01:92:92:52:d5:dc:45:ef:a7:ce:cb:57:42:50:64:e0:fa:
         f9:88:d8:06:4b:7c:c2:f4:36:5c:e6:56:68:99:76:93:f5:0f:
         1c:48:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 06:42:29 2024 by rpki-client on console-fra.rpki-client.org