Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.mft
File:                     F29CBF3783E5E2250C27F456D15288BD25A3BCC0.mft (raw, json)
Hash identifier:          GIX9j4rgpuvs5eYOFpYGJy5qP/xFRJ6+bgfYCw4+Gzs=
Subject key identifier:   A2:62:93:06:9C:BF:68:D7:64:0C:DB:5C:22:45:57:84:C4:C4:90:44
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       71A8EEC1A892941179B6A18B208F2DC890AC9864
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.mft
Manifest number:          3A
Signing time:             Mon 15 Apr 2024 02:44:57 +0000
Manifest this update:     Mon 15 Apr 2024 02:39:57 +0000
Manifest next update:     Tue 16 Apr 2024 06:04:57 +0000
Files and hashes:         1: 323830343a376139343a3a2f33322d3332203d3e20323731333830.roa (hash: DhRIpX34MtmZ6Dwn1X4H2NKIf34e8QXY6Op7Y74cOLk=)
                          2: 323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa (hash: b+GwdcQU+SvQ9S6pJxLGyPyIfBJt/n0BsS90pOqDfzc=)
                          3: 323830343a376139343a313130303a3a2f34302d3434203d3e20323731333830.roa (hash: BYMaMMvI7p75DAwdt5CsGUYLrWVnP7bV7jkXnuk4cmM=)
                          4: F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl (hash: bHWfHJ+x58VeiESyRqbnOEKwSmduVbCfeoveu/Ce5dw=)
                          5: 3138312e3138392e382e302f32322d3232203d3e20323731333830.roa (hash: 6GBTAM5IshrDH+7y00u9GEAkb4oJSwY4BXL/MY04QMc=)
                          6: 323830343a376139343a313030303a3a2f34302d3434203d3e20323731333830.roa (hash: xmVcf/Ewa5/6EmrJ1qseT8jcbFvML7kzjuBIdyEf4SM=)
                          7: 323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa (hash: njkEwtFxG+YRU5hfrcqcSQGmp+mqSbMTKVVIOGgOdNI=)
                          8: 3138312e3138392e382e302f32332d3234203d3e20323731333830.roa (hash: MnvYfL1SM9oRCMhpvs58DwxIiNWqEawp0WV3mUSKYAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a8:ee:c1:a8:92:94:11:79:b6:a1:8b:20:8f:2d:c8:90:ac:98:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Apr 15 02:39:57 2024 GMT
            Not After : Apr 16 06:04:57 2024 GMT
        Subject: CN=A26293069CBF68D7640CDB5C22455784C4C49044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:b4:51:94:d4:ff:d5:a0:fd:33:2c:a0:44:
                    ed:77:68:06:71:ae:10:9b:08:ab:30:8f:c2:d9:d7:
                    e0:75:f4:27:c7:37:f5:c1:4b:35:f8:2c:6b:a1:3e:
                    9e:51:ec:cd:51:61:bf:e6:99:9f:aa:7b:f2:2e:81:
                    88:cb:31:45:bb:54:9b:70:8f:46:c7:22:5b:91:68:
                    59:d8:b9:16:e5:db:82:16:c5:cc:11:80:66:b5:89:
                    da:27:86:a2:f1:57:e7:62:5e:89:60:db:b4:30:bc:
                    25:d2:a8:ab:9c:4e:9a:c0:b7:15:44:b7:55:d4:80:
                    62:6b:f4:e4:a2:0e:52:25:40:1c:02:b5:0d:16:ad:
                    56:d8:51:26:ab:08:43:9d:d3:34:27:7a:f8:03:a2:
                    b6:2f:60:72:80:4c:19:94:b5:3a:21:73:ae:b6:c1:
                    79:05:7e:e8:67:6a:64:5b:1a:92:e8:ab:2f:30:cd:
                    b1:c7:de:73:e3:73:3d:da:16:d1:f6:fa:ac:eb:bb:
                    6d:85:07:da:07:fe:2f:f4:12:81:d1:3c:2d:85:fe:
                    63:cb:d1:a2:31:35:1a:72:7b:16:be:5b:c2:62:e7:
                    d9:4c:14:de:f2:ca:79:4e:12:97:a7:36:dc:3a:96:
                    dc:7c:94:cd:71:ac:df:fd:33:e7:bd:bd:e6:94:37:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:62:93:06:9C:BF:68:D7:64:0C:DB:5C:22:45:57:84:C4:C4:90:44
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:4a:8d:cb:ff:e5:9d:8f:23:30:3e:11:44:b5:e6:b7:24:
         f1:92:e1:a5:e1:b3:a9:6b:b5:03:02:c7:83:47:c7:09:a3:c8:
         b5:5f:48:db:23:03:12:ea:01:95:9d:0d:1e:93:36:bb:0f:f5:
         19:7c:bc:51:99:9c:4e:ec:a2:7a:db:75:d6:5e:84:dc:9d:e4:
         0a:cf:c4:52:8a:24:4f:89:f6:75:0b:88:87:d9:61:ec:61:fb:
         3f:98:91:67:5d:73:55:26:6e:f4:a7:29:14:98:96:bb:33:2f:
         7f:a0:b5:4e:f4:a1:1a:31:31:ab:11:a2:9b:ee:07:93:29:85:
         e9:81:48:60:bb:f3:d6:e5:e5:c1:d5:63:e7:c1:5a:67:08:d0:
         82:03:99:2a:93:01:43:f5:aa:52:30:07:5a:a9:e5:4a:1a:b5:
         ea:d4:e5:d2:bb:a1:51:7b:d3:77:19:eb:ca:3f:2c:3d:6e:8a:
         ad:7e:46:8a:39:ef:15:e2:c5:c7:05:c9:2e:04:0b:dd:52:29:
         03:d8:03:de:d2:bb:19:13:e9:6b:37:02:6c:e1:67:2c:f1:d6:
         b8:51:86:35:67:a8:cc:c4:2e:a0:b4:e2:e8:af:98:94:d0:8d:
         ee:5f:34:4e:98:7c:30:94:6b:5d:8b:ae:7a:b9:49:9a:3a:ca:
         1b:42:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org