Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.mft
File:                     FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.mft (raw, json)
Hash identifier:          YQZRaKCekPeaK5ZuFnjQaM8F6aGE0vmQ7ubh5/ekaJo=
Subject key identifier:   25:A5:31:17:0A:7B:AF:C6:B8:B0:A8:CD:0D:F8:70:C4:E7:7A:2F:59
Authority key identifier: FC:25:1D:0B:7A:B7:AA:EE:EC:69:E8:41:A6:F8:DD:1E:1C:76:DF:EF
Certificate issuer:       /CN=FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF
Certificate serial:       754B9E25DAAD0B64DFD03756C1690737FA84868E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.mft
Manifest number:          070D
Signing time:             Fri 05 Jan 2024 17:18:00 +0000
Manifest this update:     Fri 05 Jan 2024 17:13:00 +0000
Manifest next update:     Sat 06 Jan 2024 17:18:00 +0000
Files and hashes:         1: 323830343a333766303a3a2f33322d3438203d3e20323636343435.roa (hash: JJUPCo/RU36mLWhwF9LQ7u2azdGGUosBjZXm7WMXmZc=)
                          2: 323830343a346466343a3a2f33322d3438203d3e20323638323330.roa (hash: TLXMaVtM7MR8lYVTzbQ6bMJpZuOwzMiIJl4XrAM5iL4=)
                          3: 34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (hash: arfwjZnfrLu1XoB/3EW7QPSdvAQeCIDExMweNZ+ZFQA=)
                          4: 3137302e38322e3138302e302f32322d3234203d3e20323636343435.roa (hash: S0Cr7d66yBw+KF/+h6ixIJY3us0sd0E51ntE2HAXPiI=)
                          5: FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.crl (hash: Cl9iKEUf2KR6r99nGCt+Lf6/XdGjowH8nhwOSNzFuzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4b:9e:25:da:ad:0b:64:df:d0:37:56:c1:69:07:37:fa:84:86:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF
        Validity
            Not Before: Jan  5 17:13:00 2024 GMT
            Not After : Jan 12 17:18:00 2024 GMT
        Subject: CN=3082010A0282010100B2B7A04B94755338C8E3AD4EC340B1ED2DAD1EA0813C62D0DF5319DB297E1DFA80707415BD9AE6770DB49136DF2FE98D3EFE20D7ACBDD2DE918F78BA9C45A5D0DF2DB4436CE66DF97604C3F4F4E0BD4BF256F62A9AC6D117E11FAF10E6379456AB9A4944AB695DAB2361F0F1C3D2F72CCB321821AEC984C4E718F23E89F4BF0DEF2D6B7D732E076EF742289648FD507B7E99D66FEAC4AB9080108C214DDF33A1A9E1975F58E189427595890FF61DBB7BF404E4712200770AC48DC44CCEEDF4BF55B1CE89F4B62B9D0A578F3F7AD9DF7DAC0DA9EEA5E6966A01B03C66529A987E76CD5618F57AA8446DA2181F7B79AAA84CF1909A9E863053E71BC8CD73BD95AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:a0:4b:94:75:53:38:c8:e3:ad:4e:c3:40:
                    b1:ed:2d:ad:1e:a0:81:3c:62:d0:df:53:19:db:29:
                    7e:1d:fa:80:70:74:15:bd:9a:e6:77:0d:b4:91:36:
                    df:2f:e9:8d:3e:fe:20:d7:ac:bd:d2:de:91:8f:78:
                    ba:9c:45:a5:d0:df:2d:b4:43:6c:e6:6d:f9:76:04:
                    c3:f4:f4:e0:bd:4b:f2:56:f6:2a:9a:c6:d1:17:e1:
                    1f:af:10:e6:37:94:56:ab:9a:49:44:ab:69:5d:ab:
                    23:61:f0:f1:c3:d2:f7:2c:cb:32:18:21:ae:c9:84:
                    c4:e7:18:f2:3e:89:f4:bf:0d:ef:2d:6b:7d:73:2e:
                    07:6e:f7:42:28:96:48:fd:50:7b:7e:99:d6:6f:ea:
                    c4:ab:90:80:10:8c:21:4d:df:33:a1:a9:e1:97:5f:
                    58:e1:89:42:75:95:89:0f:f6:1d:bb:7b:f4:04:e4:
                    71:22:00:77:0a:c4:8d:c4:4c:ce:ed:f4:bf:55:b1:
                    ce:89:f4:b6:2b:9d:0a:57:8f:3f:7a:d9:df:7d:ac:
                    0d:a9:ee:a5:e6:96:6a:01:b0:3c:66:52:9a:98:7e:
                    76:cd:56:18:f5:7a:a8:44:6d:a2:18:1f:7b:79:aa:
                    a8:4c:f1:90:9a:9e:86:30:53:e7:1b:c8:cd:73:bd:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A5:31:17:0A:7B:AF:C6:B8:B0:A8:CD:0D:F8:70:C4:E7:7A:2F:59
            X509v3 Authority Key Identifier:
                keyid:FC:25:1D:0B:7A:B7:AA:EE:EC:69:E8:41:A6:F8:DD:1E:1C:76:DF:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/FC251D0B7AB7AAEEEC69E841A6F8DD1E1C76DFEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:76:51:20:68:9b:86:48:04:54:6b:f2:17:c2:31:04:4a:4b:
         45:a4:be:93:21:dd:3b:57:fb:30:9b:3d:d8:ef:1c:6f:18:3b:
         83:04:78:66:4b:f4:b6:31:2c:91:0a:8f:14:96:ab:58:1f:a8:
         a1:b9:b2:42:55:33:cc:ab:18:a0:b0:c7:ba:ab:38:21:f9:00:
         e6:83:49:b8:33:91:69:22:4a:67:c5:f5:c3:f2:ce:dd:fa:9c:
         7d:ff:63:2d:78:75:55:3b:83:d6:8f:74:5a:2b:bf:8a:c5:41:
         39:47:4a:b4:e3:c1:9f:04:e7:b4:0b:b2:d7:b7:47:e2:61:56:
         4c:df:34:6c:62:cf:be:e3:db:f6:c8:b0:27:54:b5:4f:f7:2e:
         1e:eb:e4:7a:1d:3b:10:d6:2d:34:e5:74:e5:4f:f4:6c:0b:57:
         27:d3:b0:74:f8:f1:09:34:b2:99:9f:0b:34:71:1e:d6:7c:24:
         2b:6e:1f:c1:2f:a6:d9:f4:4a:22:f6:bc:e6:44:ba:8a:e5:8e:
         69:92:f4:16:65:4c:f0:b2:7d:cf:e3:e1:85:6d:e9:1b:8c:49:
         14:e3:41:f8:23:29:1b:ac:f0:9b:67:df:22:27:d0:07:d8:c5:
         39:c6:52:3e:99:4d:84:0f:b6:e6:d2:3a:9e:66:70:1c:86:b1:
         35:01:ef:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 5 21:04:03 2024 by rpki-client on console.sobornost.net