Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.mft
File:                     FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.mft (raw, json)
Hash identifier:          APE0JkSCDdW3x0kfWaJTl4Z/8Ldjt/T9r6Q6QSNLXb0=
Subject key identifier:   42:12:2A:21:6B:F1:FC:F1:42:0A:7C:0D:B1:6B:A7:03:E8:27:C0:A2
Authority key identifier: FE:FF:28:BF:1C:F3:87:F9:46:C0:97:5B:91:E4:10:AA:2F:0F:A4:CC
Certificate issuer:       /CN=FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC
Certificate serial:       765F36DDE587695CDC8A3A8F0ECFA6456BC9D947
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.mft
Manifest number:          7E
Signing time:             Sun 11 Sep 2022 22:38:24 +0000
Manifest this update:     Sun 11 Sep 2022 22:33:24 +0000
Manifest next update:     Tue 13 Sep 2022 00:09:24 +0000
Files and hashes:         1: 34352e3233342e342e302f32342d3234203d3e20323637333531.roa (hash: NsWJjcEWjX7hFZgjNOxkpjEg6yU+XdPSPBkz0oPdAc4=)
                          2: 323830343a346332303a3a2f33322d3334203d3e20323637333531.roa (hash: 4ypw2qm6JrYt96bKQDAFMhFJ8YWKqgCKbFInPEoDHqA=)
                          3: 34352e3233342e372e302f32342d3234203d3e20323637333531.roa (hash: ZnFXlTOqqo4ri0v5mIDOpivmIT1skpFeAqK34rqM+Co=)
                          4: 34352e3233342e342e302f32322d3232203d3e20323637333531.roa (hash: j9Im1s7TBoLQd1sWxlVovSv2ERe/wbAO74MWTVQAJPk=)
                          5: 34352e3233342e352e302f32342d3234203d3e20323637333531.roa (hash: zed/o5s+abJdwV++FCVNC+P5mj8HOXDlnFgsDQAuso4=)
                          6: FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.crl (hash: plwNBkyfPh3fs/+7I0rnoqJG70ex5JbAB1iekV3yf1A=)
                          7: 34352e3233342e362e302f32342d3234203d3e20323637333531.roa (hash: GBuDnFoc+uJhiM6zKrkRkW2ASBLna/J/Z/jtgO40Yy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5f:36:dd:e5:87:69:5c:dc:8a:3a:8f:0e:cf:a6:45:6b:c9:d9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC
        Validity
            Not Before: Sep 11 22:33:24 2022 GMT
            Not After : Sep 13 00:09:24 2022 GMT
        Subject: CN=42122A216BF1FCF1420A7C0DB16BA703E827C0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:33:04:8d:c7:a5:43:23:9b:6f:27:e0:77:
                    10:15:c1:a6:f2:65:5c:66:bc:24:65:af:c7:62:e9:
                    88:df:36:ea:0b:45:f0:67:f6:a4:43:b3:7a:53:bf:
                    a3:fd:99:37:52:89:11:11:c5:99:df:08:54:a9:1a:
                    b9:49:ba:61:10:71:ed:84:b1:59:0b:c5:c5:79:07:
                    ae:23:5a:ef:00:2b:02:5f:c0:0d:66:97:f3:89:22:
                    7e:f5:4a:93:4e:01:72:8b:ad:6b:26:07:c9:9b:f2:
                    e2:be:f0:4d:a1:49:0a:ab:82:62:7c:7f:f5:6a:23:
                    05:b4:6a:d8:b3:43:bb:3d:a1:7d:d9:bc:ea:c3:31:
                    43:03:f4:97:67:50:bd:96:89:ce:af:f0:8a:27:4f:
                    fc:3e:a2:5d:d5:fb:9d:81:69:d1:38:ef:23:c3:34:
                    3e:27:35:1c:be:7c:94:88:dd:94:33:df:8a:48:a4:
                    f8:d0:ca:b4:88:69:fa:a7:78:5f:1d:da:28:b4:89:
                    5c:4e:f0:26:26:d4:3a:25:31:9c:1b:5d:44:0c:1d:
                    e1:39:8f:44:2a:3e:65:4d:6a:0f:90:03:2f:69:0d:
                    c7:ce:18:81:d3:7a:58:97:88:a8:d1:e5:8f:28:b0:
                    84:91:4d:f8:11:bb:ed:d0:5f:8f:7b:92:aa:7a:b4:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:2A:21:6B:F1:FC:F1:42:0A:7C:0D:B1:6B:A7:03:E8:27:C0:A2
            X509v3 Authority Key Identifier:
                keyid:FE:FF:28:BF:1C:F3:87:F9:46:C0:97:5B:91:E4:10:AA:2F:0F:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEFF28BF1CF387F946C0975B91E410AA2F0FA4CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:27:90:25:a5:9d:68:ad:87:70:a3:4f:f9:25:0b:9d:a2:
         4e:55:15:90:d0:a2:6e:bf:67:e1:1c:11:00:07:28:7d:e4:4f:
         98:0a:21:71:64:01:7a:a6:08:25:95:fa:8b:73:b0:0a:d8:e9:
         57:f1:51:c3:90:de:8d:71:53:4f:82:e7:b2:27:61:a0:0e:a2:
         93:ba:5b:2b:69:ef:58:a8:e9:4d:f1:e7:c1:b7:aa:ee:9f:67:
         7d:f4:40:64:21:b5:7b:ce:43:6e:f9:f5:d4:21:9d:a9:d6:e4:
         63:55:d1:79:e0:71:60:6d:cc:dd:06:47:d2:73:45:88:ce:31:
         a7:be:2a:4f:ba:5a:25:81:9a:3f:25:18:bc:89:6e:a9:d0:95:
         2e:3b:db:94:de:24:4c:6a:08:11:df:00:b0:7c:84:57:c4:4b:
         d2:2a:0d:8e:f6:c9:4b:2c:df:2b:66:d7:12:9a:6c:44:ea:c9:
         64:c5:0d:d2:8d:ff:8f:34:b7:43:f4:04:df:1f:cf:92:87:c6:
         bc:15:91:aa:98:35:6e:e9:61:73:87:36:90:b8:b4:24:c1:f6:
         24:eb:2c:a7:1c:cf:44:06:d9:6d:c8:a3:70:bd:a5:01:2b:39:
         a9:5f:42:ce:4d:48:63:bd:44:91:9b:68:85:b8:c6:33:b9:e1:
         24:2f:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----