Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.mft
File:                     F6DBA753A519A4A6CD975E1903824CB4B06730FD.mft (raw, json)
Hash identifier:          rWMgYy9B+LZZZkbH0VkJB1pIKZMQjBYMqWtr0ffB/dY=
Subject key identifier:   B8:56:07:D4:85:29:24:0F:82:23:99:4B:C6:F0:CB:DA:1E:BB:48:EE
Authority key identifier: F6:DB:A7:53:A5:19:A4:A6:CD:97:5E:19:03:82:4C:B4:B0:67:30:FD
Certificate issuer:       /CN=F6DBA753A519A4A6CD975E1903824CB4B06730FD
Certificate serial:       4CD252D04FA942F977A53C182DF4B84583FD945D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.mft
Manifest number:          0666
Signing time:             Wed 28 Feb 2024 11:37:16 +0000
Manifest this update:     Wed 28 Feb 2024 11:32:16 +0000
Manifest next update:     Thu 29 Feb 2024 12:37:16 +0000
Files and hashes:         1: 3138312e3138392e3132342e302f32322d3232203d3e20323731353032.roa (hash: 9YadtCBXkb2NlA/2lqGtbKWA5nmmfhaV37rDB0wzQ+4=)
                          2: F6DBA753A519A4A6CD975E1903824CB4B06730FD.crl (hash: YQwCX0khbkZ/Hzr1VI2QgBSqgUGqtkrQukotwClr7+o=)
                          3: 3138312e3138392e3132342e302f32332d3233203d3e20323731353032.roa (hash: nBwUcE5usD6bFJ6i2rjG3zTnk3s/n8aBvYB8QM5DLpo=)
                          4: 323830343a376338383a3a2f33322d3334203d3e20323731353032.roa (hash: o5YuOBIKpxO+brUq1Ed5D+dixqJXpHm5FR9SreNnfiI=)
                          5: 3138312e3138392e3132362e302f32332d3233203d3e20323731353032.roa (hash: c9evPNkU+VccGXCsUxAV5hfOhBfWTJNuYlGQ5ooJXeM=)
                          6: 3138312e3138392e3132342e302f32322d3234203d3e20323731353032.roa (hash: vwljlXrOoXlT4x533H76fXYhkWQ32eVWw8iAdZQuZ1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:52:d0:4f:a9:42:f9:77:a5:3c:18:2d:f4:b8:45:83:fd:94:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DBA753A519A4A6CD975E1903824CB4B06730FD
        Validity
            Not Before: Feb 28 11:32:16 2024 GMT
            Not After : Feb 29 12:37:16 2024 GMT
        Subject: CN=B85607D48529240F8223994BC6F0CBDA1EBB48EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:3d:9c:7b:1c:d1:c3:3a:11:22:74:21:e9:
                    19:cf:2e:82:77:de:00:69:3f:3e:71:41:ed:3e:19:
                    86:82:e0:b7:82:a7:fc:6d:07:67:69:e7:d4:f8:26:
                    bd:1e:b2:42:4d:b0:9b:9c:f5:6c:d5:3c:56:3b:c8:
                    fa:f6:77:ff:f3:11:6d:ca:fe:fa:1d:9b:ca:fc:4a:
                    b8:d9:40:78:c0:32:30:af:00:15:7c:f2:d9:1c:82:
                    f1:f7:29:52:de:79:53:ce:3c:2f:51:6b:be:47:4a:
                    7e:3e:23:60:4c:f9:cc:98:d1:64:68:ea:63:ab:14:
                    37:64:24:de:66:e1:df:70:df:23:6d:77:91:25:d0:
                    4e:4d:03:d4:d3:64:cd:6a:1b:c1:0c:38:fe:35:52:
                    37:fc:55:a3:78:d2:b4:43:0e:e5:bc:75:e0:9b:a4:
                    8c:9a:fb:ed:b9:48:89:bf:a6:dc:7a:7b:14:7c:9f:
                    ca:2a:38:85:05:5c:a3:4b:b4:f7:e9:38:2e:7f:be:
                    55:93:a1:79:36:0b:e8:ce:8c:ad:ca:10:76:4b:f0:
                    0d:57:74:8f:b8:f6:4d:71:8b:29:df:70:b5:08:f8:
                    7a:85:52:23:05:63:57:33:4a:57:cf:23:1f:a9:e4:
                    eb:7d:f1:cc:08:ef:86:b4:6a:41:14:72:8a:45:ec:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:56:07:D4:85:29:24:0F:82:23:99:4B:C6:F0:CB:DA:1E:BB:48:EE
            X509v3 Authority Key Identifier:
                keyid:F6:DB:A7:53:A5:19:A4:A6:CD:97:5E:19:03:82:4C:B4:B0:67:30:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/F6DBA753A519A4A6CD975E1903824CB4B06730FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:96:cd:ca:f8:95:27:a0:a9:ce:bf:f3:01:97:51:cf:ef:
         43:1a:1c:d1:2e:b7:05:d1:b9:13:37:ad:f1:4b:26:5e:b4:ca:
         7a:3e:eb:5b:56:bb:f5:8a:5c:9a:07:e2:f9:6c:06:98:20:9d:
         a9:b7:c5:bb:97:76:fb:4f:31:17:0c:df:ae:1b:36:39:34:5b:
         a5:66:d6:4a:4b:81:b7:3a:be:4e:2e:9c:3c:8c:66:72:fc:9c:
         f7:01:af:4e:ac:f8:a1:0e:66:e7:01:6e:1e:4c:bc:eb:40:8d:
         c2:0b:5b:8d:70:ed:cb:98:e1:79:90:01:9e:23:c4:2e:15:79:
         42:b9:5f:d7:59:1e:d6:a3:e6:26:49:58:d4:1f:4b:02:3b:f6:
         b9:b9:eb:08:26:4a:f0:e7:ee:5e:77:f9:70:a7:65:eb:b1:6d:
         87:c7:37:b3:94:79:b9:fa:6c:bd:f6:a9:d9:e6:8f:ab:76:35:
         eb:68:da:35:52:e1:42:3e:dc:fb:9e:df:95:51:07:b1:a7:fb:
         34:51:cc:42:5a:aa:da:f1:cd:65:5c:e1:7e:66:aa:64:b5:d2:
         d0:ad:81:21:60:75:c6:ec:eb:df:85:26:96:bd:09:17:c0:03:
         56:31:57:96:b1:97:46:f8:b9:a6:f4:02:20:27:08:c0:dc:de:
         6d:af:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 16:01:10 2024 by rpki-client on console-fra.rpki-client.org