Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.mft
File:                     FC96EBB6A0A2968F71730ACB4C004194AFD1085E.mft (raw, json)
Hash identifier:          gJkSgsNa9rAwSuP4kN12US9euLb6ZuGdaKrDIZOVsAU=
Subject key identifier:   88:F4:B4:29:7A:23:34:2A:EB:CA:41:88:24:A4:DA:70:1C:19:45:6C
Authority key identifier: FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E
Certificate issuer:       /CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
Certificate serial:       31B6E4980B6EAA5AE0306851AC1EFE4CE30AE148
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.mft
Manifest number:          71
Signing time:             Sun 14 Apr 2024 18:39:57 +0000
Manifest this update:     Sun 14 Apr 2024 18:34:57 +0000
Manifest next update:     Mon 15 Apr 2024 20:01:57 +0000
Files and hashes:         1: FC96EBB6A0A2968F71730ACB4C004194AFD1085E.crl (hash: EfjAcgjfMlb/zrVSr1+oGdZUJEzLRoPRxZJAcZ7yaVk=)
                          2: 323830343a323439303a3a2f33322d3438203d3e20323634323330.roa (hash: hpPIzd2ntFrftNxPkPlsyszvk5pxBuRDk5kKZaXyAVQ=)
                          3: 3139302e3130392e38382e302f32322d3234203d3e20323633393131.roa (hash: qEdknhEQ1KXsMvF41rtpftPqr5WAaR2WHXwFyANHfTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b6:e4:98:0b:6e:aa:5a:e0:30:68:51:ac:1e:fe:4c:e3:0a:e1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
        Validity
            Not Before: Apr 14 18:34:57 2024 GMT
            Not After : Apr 15 20:01:57 2024 GMT
        Subject: CN=88F4B4297A23342AEBCA418824A4DA701C19456C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:b2:b3:ae:b7:75:0b:30:ea:d9:39:3a:3d:
                    5f:db:26:f5:2d:d5:f1:05:5d:d4:7e:50:a2:91:a4:
                    3a:0f:78:81:44:90:a3:3a:0a:cf:e3:2a:2b:d5:6a:
                    6f:1b:73:43:14:71:26:80:81:7d:d2:07:d9:39:0a:
                    20:5b:f2:8b:3e:b7:42:c4:c4:ba:ef:d7:3e:91:28:
                    e4:37:cf:a6:d3:39:26:43:6d:b2:cc:48:1e:56:70:
                    3d:0b:e4:49:a4:3c:d3:a0:30:00:76:dc:b6:b6:7d:
                    c9:71:a6:a1:fa:cf:fa:ad:29:95:67:b3:7f:96:a5:
                    00:72:f5:81:cb:ca:1e:c7:4f:8c:ef:b1:8b:31:83:
                    b8:5a:fb:7e:d9:da:a5:c6:48:29:20:30:6a:48:0e:
                    8b:1d:1f:fb:86:35:e6:a4:39:ef:f0:10:49:96:f8:
                    07:c1:ea:9f:44:bc:54:d0:c5:3c:5e:0d:2a:5f:8b:
                    82:ed:95:dd:d4:e7:8f:72:78:bf:92:e1:57:98:f9:
                    80:47:f4:9b:d4:d8:1f:1b:84:68:94:f7:99:e3:89:
                    68:f5:db:e9:1c:4a:7b:3e:fe:d8:1a:68:76:91:3f:
                    09:69:30:b6:4b:88:11:90:96:50:14:8b:ca:33:a3:
                    1c:ee:6f:ca:71:ce:61:b4:62:ce:9c:46:8e:73:bd:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:B4:29:7A:23:34:2A:EB:CA:41:88:24:A4:DA:70:1C:19:45:6C
            X509v3 Authority Key Identifier:
                keyid:FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2c:1e:59:f6:2c:7f:4e:91:96:7a:50:fd:d5:59:c2:b1:dd:
         fd:df:99:13:8e:30:23:bd:8c:4b:ce:5a:98:86:66:78:04:03:
         4b:f8:9a:23:06:d0:83:62:84:2a:0c:aa:15:89:8f:c2:a2:44:
         47:2f:a0:a6:04:2d:20:3a:a7:05:71:78:4c:01:b5:9f:01:e2:
         e7:d4:18:68:4b:c7:48:b5:86:62:41:66:7a:37:b5:c7:64:d1:
         40:e3:e4:a9:4d:7e:00:aa:c7:64:f8:c5:73:89:42:d0:0e:3f:
         60:ed:87:f4:0e:55:f8:0f:1d:b4:d9:7a:a3:2b:7e:7f:15:28:
         90:a1:7a:d5:5d:bb:da:c5:77:2d:bd:3a:25:2d:9a:a9:6e:28:
         c7:84:33:47:b3:76:d2:1e:69:e8:85:e3:67:73:66:50:7e:92:
         ee:33:55:a3:db:fe:a4:74:0b:17:2b:28:60:84:2b:42:cc:e2:
         15:d7:49:50:60:fe:12:af:3b:8c:1a:ae:15:12:53:e9:27:86:
         40:1d:08:04:a8:54:60:76:71:4c:f3:12:4b:fe:6c:cc:7e:84:
         6e:cb:52:8e:75:04:35:bc:78:4e:7f:88:8c:b6:93:6c:94:d3:
         85:0c:91:59:24:87:60:82:63:07:e3:32:ca:ed:4b:1c:3e:bf:
         d6:8c:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----