Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.mft
File:                     FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.mft (raw, json)
Hash identifier:          HA1oz7ZPgtvL2BCAa7SC0wIIfJ0gtyI8t5hARRXxaMQ=
Subject key identifier:   40:73:BB:96:19:E4:07:48:F1:DC:AA:7B:76:63:F9:7D:79:24:70:E5
Authority key identifier: FF:34:DA:4F:C8:F5:70:3B:3E:7A:6E:24:52:84:3A:B3:33:EC:D2:B7
Certificate issuer:       /CN=FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7
Certificate serial:       670BA1035CF5824448583BFF7021673C395B30FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.mft
Manifest number:          EE
Signing time:             Mon 30 Sep 2024 16:31:12 +0000
Manifest this update:     Mon 30 Sep 2024 16:26:12 +0000
Manifest next update:     Tue 01 Oct 2024 18:52:12 +0000
Files and hashes:         1: FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.crl (hash: TnA7yVRt9BfNWjvik4qo05hwqVqTEQX4+UjJsiXBJdw=)
                          2: 323830343a366238303a3a2f33322d3334203d3e20323730343034.roa (hash: AU3qpQz+rhtskQ1n1vXd/mjvnKM7k6R/yIcW1jOSkPQ=)
                          3: 3139302e3130372e3136382e302f32322d3234203d3e20323730343034.roa (hash: VVEyNRdOkukdTzQmBO8dv324dF2eUnkN4AX35fJJxio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0b:a1:03:5c:f5:82:44:48:58:3b:ff:70:21:67:3c:39:5b:30:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7
        Validity
            Not Before: Sep 30 16:26:12 2024 GMT
            Not After : Oct  1 18:52:12 2024 GMT
        Subject: CN=4073BB9619E40748F1DCAA7B7663F97D792470E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:65:4c:9b:96:46:a7:4b:1e:2c:2e:43:a8:
                    c3:45:1d:5f:3f:6f:70:6b:5a:4a:d0:91:e9:e9:2c:
                    15:55:38:71:e7:93:b5:52:80:36:d7:7a:69:af:f7:
                    af:3d:38:c3:20:9e:3d:e0:a0:d5:29:bd:de:84:5d:
                    3e:f9:4d:11:fe:2c:b5:74:b2:da:92:b0:68:d6:5b:
                    5d:ce:60:e1:c3:15:9e:58:31:50:1d:b2:e7:15:87:
                    32:3f:c2:a5:dc:1f:ec:02:0b:fd:51:65:d6:d5:08:
                    2a:42:09:d0:37:31:f2:61:f6:b7:1f:94:47:71:54:
                    6d:5d:9b:71:ce:60:e8:a4:31:e6:ae:92:fe:fc:64:
                    97:ca:5a:72:4f:32:2b:c7:0c:04:c0:0f:eb:f7:37:
                    00:56:8e:23:d4:ec:e7:cb:6f:73:a4:c4:64:54:13:
                    d3:75:28:a2:d9:19:38:f3:36:2c:1e:fc:f8:c3:ba:
                    b0:0a:35:1f:2d:f6:aa:3d:e3:52:b5:57:bf:ff:61:
                    fc:fb:76:b9:58:1b:64:c8:b4:b7:89:ad:52:08:3c:
                    7f:7b:48:43:cc:26:6b:a0:9c:f8:71:08:ab:ce:1a:
                    d0:7a:02:59:36:90:9f:f7:58:7e:0a:3b:dd:c1:72:
                    df:1f:fc:10:cd:c5:e0:2b:ab:26:ed:9b:fa:40:8d:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:73:BB:96:19:E4:07:48:F1:DC:AA:7B:76:63:F9:7D:79:24:70:E5
            X509v3 Authority Key Identifier:
                keyid:FF:34:DA:4F:C8:F5:70:3B:3E:7A:6E:24:52:84:3A:B3:33:EC:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVoG4r2YrCLZo871SjKVUbMpctHV32ideKV4CiEGyTi1/1/FF34DA4FC8F5703B3E7A6E2452843AB333ECD2B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e2:64:29:33:d1:3d:9e:28:e1:c2:bd:93:f0:43:c4:58:b8:
         86:5f:f1:b8:7a:c5:60:f7:8b:db:f4:9c:e0:4d:80:85:66:22:
         64:69:ce:4a:f4:de:53:40:2d:45:0c:79:76:27:68:c6:4e:fe:
         af:f7:f8:7d:75:37:c4:69:61:d2:b3:c0:02:17:76:fb:f8:95:
         18:9d:e1:62:f5:92:d0:26:8e:c6:69:db:5c:6a:11:20:57:50:
         ed:97:ff:88:a0:af:ba:4b:e9:63:b2:e3:31:c2:07:5a:1b:3a:
         a2:72:53:99:e0:92:a8:32:89:eb:8e:c4:91:a6:1b:83:be:73:
         f5:e1:a8:8e:cc:25:72:6b:5e:a4:ce:69:b4:7c:0b:7d:3d:51:
         01:88:24:71:25:cb:fc:75:bb:64:97:43:e1:ab:a2:4e:55:af:
         00:7e:61:51:9a:ca:13:73:a6:ef:47:e8:3d:ce:bd:96:e0:ec:
         15:78:92:03:a6:11:64:20:1d:96:1f:7c:26:75:46:fe:f5:f1:
         6d:a7:e9:d6:5c:1a:9c:58:3e:f8:ab:2e:61:85:8f:92:32:cd:
         ba:24:6a:08:4b:d8:a9:a5:46:68:56:43:15:8e:ee:97:d3:72:
         29:7e:56:59:48:c2:0e:cf:35:63:9a:93:69:d6:c4:d3:61:d4:
         74:f5:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----