Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.mft
File:                     FCFD3885C947F8D2AB55FA246892D37D185E881F.mft (raw, json)
Hash identifier:          o29RrsZLwbTi5Z7kKy+8bIuxRm1cxmjpbFlgXc/qfuk=
Subject key identifier:   A2:34:5B:7B:F6:74:8E:CA:4F:D3:2F:AD:DE:36:3B:B6:7D:F9:E8:EC
Authority key identifier: FC:FD:38:85:C9:47:F8:D2:AB:55:FA:24:68:92:D3:7D:18:5E:88:1F
Certificate issuer:       /CN=FCFD3885C947F8D2AB55FA246892D37D185E881F
Certificate serial:       15BA6E8FF0A9BCC26BCA427589EEFBAE32BC6967
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.mft
Manifest number:          03
Signing time:             Sun 28 Jan 2024 15:34:42 +0000
Manifest this update:     Sun 28 Jan 2024 15:29:42 +0000
Manifest next update:     Mon 29 Jan 2024 18:09:42 +0000
Files and hashes:         1: 323830343a346138383a3a2f33322d3438203d3e20323637323436.roa (hash: gins1T+RdXphK2KEEgJ7RvZSso9taMdCoD4rfaehMcU=)
                          2: 34352e3233302e3230382e302f32322d3234203d3e20323637323436.roa (hash: Y3nhd9oopozdgVTL6j2N4PQRS3fky08bqwjq01Y/+Tc=)
                          3: FCFD3885C947F8D2AB55FA246892D37D185E881F.crl (hash: rGFFN5Ol8VG7r0cTCH/XT9nLnqdp3Waz3VKzhyNbXYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:6e:8f:f0:a9:bc:c2:6b:ca:42:75:89:ee:fb:ae:32:bc:69:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFD3885C947F8D2AB55FA246892D37D185E881F
        Validity
            Not Before: Jan 28 15:29:42 2024 GMT
            Not After : Jan 29 18:09:42 2024 GMT
        Subject: CN=A2345B7BF6748ECA4FD32FADDE363BB67DF9E8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:4e:37:2c:36:45:25:d6:a9:6b:5a:a0:62:
                    80:f0:85:a9:f3:07:50:da:b5:48:62:6c:34:33:18:
                    6c:64:d0:38:2a:e6:fd:b2:d4:47:ba:38:0b:86:e6:
                    30:e0:cd:bf:a1:bb:c5:c2:38:d1:33:1b:ef:95:52:
                    17:b2:81:b2:22:69:4f:ea:40:e1:07:f5:a9:04:3e:
                    04:a1:96:e6:ea:c7:1b:f4:91:59:a1:e3:d0:f0:fc:
                    ac:eb:25:b9:72:f2:01:42:a8:e6:71:c2:f1:27:7e:
                    a3:d9:68:4a:4e:bb:68:63:c2:32:bc:96:fa:49:0b:
                    17:d6:f0:fc:76:d1:5b:db:a3:b9:9b:ef:bf:14:c0:
                    b4:a1:3d:0a:fb:9b:a2:9b:da:59:61:84:d5:2d:43:
                    e4:b5:3a:9c:6b:e3:e9:67:44:54:3e:90:79:05:15:
                    c3:b4:94:23:b7:9e:bf:21:ea:4f:c2:fe:30:2c:61:
                    42:74:13:cd:4c:ae:2d:4b:0a:db:8f:0b:4d:28:51:
                    e7:a6:ed:10:c9:f0:7b:9c:2e:d7:17:69:ee:4e:d0:
                    50:14:a5:49:ab:1e:83:3a:af:ab:b2:86:6b:bb:b8:
                    d9:60:ba:36:63:2f:cc:02:73:fb:84:69:be:6e:73:
                    78:b2:55:f0:0c:75:4f:a1:0a:1e:b2:bb:21:45:57:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:5B:7B:F6:74:8E:CA:4F:D3:2F:AD:DE:36:3B:B6:7D:F9:E8:EC
            X509v3 Authority Key Identifier:
                keyid:FC:FD:38:85:C9:47:F8:D2:AB:55:FA:24:68:92:D3:7D:18:5E:88:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3Vu6qq7zFagU22ysmtuJBWxTA3NBMoc1e8qwCeYEroo/0/FCFD3885C947F8D2AB55FA246892D37D185E881F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:75:e2:7b:60:a2:db:14:fa:fd:e5:71:ae:2a:eb:5b:d7:f3:
         aa:44:1e:a6:83:2d:1d:8d:da:52:81:9a:ed:1c:b9:ed:46:50:
         ff:70:c6:de:b1:83:b8:39:50:17:c0:0b:a4:1d:be:eb:a2:cc:
         e2:8a:c3:57:f9:80:60:9e:e8:43:64:dc:22:e5:49:c3:9d:e5:
         aa:0c:3e:bb:96:97:d5:4d:1e:a9:9a:84:6f:46:ad:a0:df:7b:
         a9:ff:01:7c:4a:2d:30:d5:8f:16:78:58:0f:cc:78:bb:0b:8a:
         0b:70:67:a1:96:fa:cf:d8:2a:4f:f4:60:d6:f5:dd:4f:67:44:
         04:0d:58:72:72:ca:9f:f8:bf:3a:56:1b:8d:88:b1:c9:3f:7b:
         67:af:97:48:7a:90:94:a1:0d:c3:0b:1b:cb:ad:6d:2e:2a:6d:
         0a:e0:86:85:95:ea:24:32:94:a9:18:28:c4:bb:d6:2c:2f:24:
         1f:5d:40:08:61:15:85:ff:22:08:05:c7:f1:aa:45:e5:b5:fa:
         25:dc:46:51:44:b7:69:c6:eb:8f:6a:24:0b:85:30:6a:6a:f3:
         df:2c:b9:2f:17:83:a2:fb:aa:fc:13:fc:2e:c0:f4:b5:59:70:
         83:53:64:5c:34:a4:47:79:38:b6:29:2b:94:53:3d:93:a6:d6:
         f0:f2:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----