Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.mft
File:                     A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.mft (raw, json)
Hash identifier:          tqHDCcJ8tqKL2K5KDg1VFZoaVNZUiRxVQ5pXik+9oOk=
Subject key identifier:   C5:52:42:5C:C2:A5:DF:6C:3A:BE:63:B4:44:50:D0:C4:47:6C:CB:B1
Authority key identifier: A9:A8:D7:90:14:E1:8B:C1:0E:A7:17:A4:96:F0:FC:DA:7E:EA:60:7C
Certificate issuer:       /CN=A9A8D79014E18BC10EA717A496F0FCDA7EEA607C
Certificate serial:       2B22A9DB5A80E78738DA45FBBDEAFA989EF34C19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.mft
Manifest number:          93
Signing time:             Thu 11 Jan 2024 00:02:43 +0000
Manifest this update:     Wed 10 Jan 2024 23:57:43 +0000
Manifest next update:     Fri 12 Jan 2024 01:41:43 +0000
Files and hashes:         1: 323830343a376130633a3a2f33322d3430203d3e20323731333434.roa (hash: ojlSqDuRXg3fQvMjFAG55uALvb7YeQKNYC6aSRiplho=)
                          2: A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.crl (hash: zt7qucbHO87wjaJgIX4pL5a/xOFhqgkvg+MY/e+UTcI=)
                          3: 3139302e3132332e36342e302f32332d3234203d3e20323731333434.roa (hash: HqFq+YPInKmON84Q7w7+WcJhDeBpWcDj+dfBT49PDFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:22:a9:db:5a:80:e7:87:38:da:45:fb:bd:ea:fa:98:9e:f3:4c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A8D79014E18BC10EA717A496F0FCDA7EEA607C
        Validity
            Not Before: Jan 10 23:57:43 2024 GMT
            Not After : Jan 12 01:41:43 2024 GMT
        Subject: CN=C552425CC2A5DF6C3ABE63B44450D0C4476CCBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:b9:b1:0f:f4:8b:d0:d0:e1:b0:05:fc:5f:
                    20:e0:0c:71:35:0a:a0:d5:2a:1b:c2:0f:10:b1:4e:
                    db:26:07:ac:7b:4a:42:91:86:a9:09:94:56:12:4d:
                    29:30:ba:8b:68:64:9d:ce:cd:b5:a0:fa:a8:18:63:
                    8a:c2:ca:56:a6:69:90:40:1a:78:b8:19:ee:3a:30:
                    4c:38:56:45:70:be:c5:29:eb:22:6d:e7:ad:56:95:
                    ea:03:74:f3:da:d9:24:f7:82:96:e7:ff:00:fd:82:
                    fc:2a:e5:52:72:cf:e1:3b:80:a2:d9:92:9b:7a:70:
                    48:19:77:f9:8b:51:a1:15:51:63:de:31:5b:cd:f0:
                    31:2a:32:4e:61:24:d1:7d:6b:05:b3:26:15:34:09:
                    f2:0d:56:ac:96:43:d2:83:54:ab:96:45:c8:f1:65:
                    60:e3:c7:4d:25:02:5b:d0:bc:33:83:72:65:8d:14:
                    e3:1c:bb:42:f7:93:37:38:fa:ba:4f:44:f5:4a:12:
                    6e:bd:55:60:2f:50:ab:f7:38:ea:60:75:6c:97:19:
                    6d:34:ec:e8:b7:c2:c4:b3:18:c2:58:dd:8d:84:4d:
                    8a:0f:fd:c9:93:a9:a6:54:ef:20:a2:2a:03:59:1d:
                    8e:ea:90:14:0f:c4:0d:e6:99:83:c3:9d:d7:07:e4:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:42:5C:C2:A5:DF:6C:3A:BE:63:B4:44:50:D0:C4:47:6C:CB:B1
            X509v3 Authority Key Identifier:
                keyid:A9:A8:D7:90:14:E1:8B:C1:0E:A7:17:A4:96:F0:FC:DA:7E:EA:60:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuMfPZXTPw6Zko763ENk1o7nXN7JVfFDvoyt5bJzeb4A/0/A9A8D79014E18BC10EA717A496F0FCDA7EEA607C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:1b:a1:b3:77:c7:6c:09:d7:cd:17:1f:b7:a2:61:ad:22:
         7d:5a:53:ae:49:91:f4:3c:97:17:1a:2e:21:8d:11:06:5b:76:
         08:1d:60:0f:1e:05:45:1f:69:a9:41:82:dd:0b:4c:7e:51:35:
         d9:0d:ab:bd:42:f7:f3:22:6e:3f:f1:80:30:86:dc:ac:4f:2f:
         06:4d:14:e3:91:10:b2:66:81:46:17:5a:06:f9:ac:46:c8:6e:
         69:d1:dc:90:19:8c:6a:3b:4e:29:91:1c:bf:cf:8d:6c:4a:34:
         68:3c:29:51:cb:6f:fc:02:02:14:25:31:c0:38:08:fa:78:2f:
         a1:35:1d:dc:61:62:df:4e:eb:65:d5:53:fa:e8:54:a2:32:c4:
         52:38:7b:52:58:79:13:39:89:12:a7:3f:50:d6:ab:eb:b5:c0:
         a2:90:10:b5:d2:89:58:45:d9:16:51:89:d4:5c:be:10:6a:dd:
         ef:ee:d5:0e:1d:f1:38:28:0e:c5:e3:88:7b:0d:2a:92:95:e1:
         49:64:2b:b7:ba:55:92:1a:4f:07:90:f1:7a:6a:7b:7c:42:e8:
         0b:1b:75:fd:5f:95:a4:a7:e1:1a:12:db:ec:8b:ce:ba:6b:3f:
         8f:3c:34:d1:76:47:6a:40:6a:e0:77:3b:81:3f:8e:d8:a5:8f:
         72:40:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----