Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.mft
File:                     FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.mft (raw, json)
Hash identifier:          qgtWsBvOoc9+Xafn9LKv9r9FDI6C/I7NRT8NwpacG5Q=
Subject key identifier:   D6:FB:75:0E:01:A0:20:C2:D0:B7:B8:23:62:CE:BC:EB:A7:E5:08:AA
Authority key identifier: FE:93:4E:85:EA:2A:E7:C2:0D:1C:3E:9B:16:BE:3C:45:EB:E6:9B:52
Certificate issuer:       /CN=FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52
Certificate serial:       37A19B71894702F6C7A82D7ABF520BC7065669D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.mft
Manifest number:          23
Signing time:             Fri 15 Dec 2023 17:11:18 +0000
Manifest this update:     Fri 15 Dec 2023 17:06:18 +0000
Manifest next update:     Sat 16 Dec 2023 17:40:18 +0000
Files and hashes:         1: FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.crl (hash: S0PQ3BZqv94vZCuzNz/61uOI5rpjmarGG7TJk1ADJug=)
                          2: 323830343a336562633a3a2f33322d3332203d3e20323636363138.roa (hash: kbNlyJ3xpCNeImGLauIArZsInVSl0Rc5LdYqVUVoaS8=)
                          3: 3132382e3230312e37322e302f32322d3234203d3e20323636363138.roa (hash: Qx9PWiePawIZDhEI69mLfPdEjV0Wl3MzdovzGl4rfus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a1:9b:71:89:47:02:f6:c7:a8:2d:7a:bf:52:0b:c7:06:56:69:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52
        Validity
            Not Before: Dec 15 17:06:18 2023 GMT
            Not After : Dec 16 17:40:18 2023 GMT
        Subject: CN=D6FB750E01A020C2D0B7B82362CEBCEBA7E508AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:af:f8:d4:4f:b8:5f:18:63:93:ca:44:2b:
                    dd:75:7b:ce:68:a9:42:d2:33:cb:49:3b:fe:ca:26:
                    76:e1:35:54:77:1e:5f:95:5e:89:eb:94:5f:e5:80:
                    e9:43:c9:c1:8b:47:b2:89:33:13:d5:9f:e2:05:2e:
                    c2:85:65:8f:62:c7:34:ee:e6:c0:8a:02:05:90:c4:
                    e5:0d:dd:63:1b:94:10:5d:48:88:fc:98:25:2a:11:
                    5a:95:eb:26:3d:7a:df:50:7a:5a:0a:d3:68:b8:23:
                    a4:65:61:8f:58:db:8b:01:66:66:e5:77:47:fd:3e:
                    f7:9c:0f:c7:0d:c8:cc:ea:50:83:52:07:ab:be:67:
                    77:47:ab:f7:10:61:9c:30:c8:79:b3:c1:98:45:90:
                    42:66:20:6e:a2:b3:5f:64:8f:46:80:dc:70:b0:10:
                    7d:e6:2f:2c:27:14:9d:cd:65:01:b2:0c:06:e2:e6:
                    76:4b:68:84:21:17:c9:98:a4:8c:33:b7:98:0d:e5:
                    57:9f:0f:ec:62:0a:fb:8e:81:23:33:18:64:cc:21:
                    a2:a1:6f:40:61:14:cd:44:50:6c:fe:b8:1a:7e:65:
                    9b:2f:0a:23:15:a5:fe:b1:3e:05:bf:fe:3d:26:22:
                    e5:7a:11:36:a9:4f:25:7b:6c:bf:b1:ba:3f:55:62:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FB:75:0E:01:A0:20:C2:D0:B7:B8:23:62:CE:BC:EB:A7:E5:08:AA
            X509v3 Authority Key Identifier:
                keyid:FE:93:4E:85:EA:2A:E7:C2:0D:1C:3E:9B:16:BE:3C:45:EB:E6:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/0/FE934E85EA2AE7C20D1C3E9B16BE3C45EBE69B52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:28:83:4e:5b:0c:ef:d0:f8:28:bc:80:33:14:27:6c:ac:5f:
         a3:d4:22:67:d2:6f:22:d5:70:04:96:e9:e5:ab:4c:27:c7:41:
         34:29:46:fc:39:4b:8a:64:98:73:ca:94:31:d1:78:c3:fe:e9:
         9b:47:06:86:02:7a:94:c8:f8:67:74:dd:65:b7:70:ff:e4:0b:
         2e:85:d2:bc:72:31:a5:29:af:32:5d:52:be:cb:e5:c6:5f:6a:
         4c:18:a7:3c:48:ff:be:55:8c:28:a8:22:40:40:bc:19:e1:08:
         50:f4:69:8b:b5:d4:3e:27:d2:32:e7:4d:b9:26:6d:ee:18:57:
         a5:be:bb:c2:76:f9:d7:d3:6f:97:91:14:47:99:1e:27:a8:5f:
         0a:1c:e8:45:e2:8c:d1:5d:49:33:da:3f:9f:5b:fd:d6:65:cd:
         60:77:a8:c7:8e:6c:fb:5a:e5:de:a6:80:11:a6:12:eb:4f:84:
         eb:1f:30:24:47:b5:2d:44:10:7d:ac:3f:06:fe:85:bd:c7:25:
         66:5b:51:9d:19:9a:44:17:4d:da:7b:42:82:df:74:ec:0a:17:
         fb:67:f8:15:f2:ad:42:ba:83:83:13:72:8f:96:1d:c2:f7:01:
         0d:05:d6:09:a3:02:8b:f0:d7:a4:f8:7f:99:8e:ea:02:ed:0e:
         af:02:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----