Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft
File:                     F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft (raw, json)
Hash identifier:          GofbcTtaJx2v3hubbrzT9ylWqUNj/0+N0YWmDy+liQc=
Subject key identifier:   D6:0A:7E:E9:A4:18:5D:F6:01:75:B6:86:D7:E9:B8:6E:F5:6A:7F:27
Authority key identifier: F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
Certificate issuer:       /CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
Certificate serial:       5B28E3E4CB03F78F12233D38E0E3EFB017331513
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft
Manifest number:          2F
Signing time:             Mon 15 Apr 2024 12:19:02 +0000
Manifest this update:     Mon 15 Apr 2024 12:14:02 +0000
Manifest next update:     Tue 16 Apr 2024 16:17:02 +0000
Files and hashes:         1: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: V2vm3ruYgGcJPKfVgB8nwDHUfTD7TOLWhakpHMb13LQ=)
                          2: F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.crl (hash: aCzAnhueyNrWm4b38ZPN8m3gGh4F4B/PSn3FWW04qec=)
                          3: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: QidbNHqjD97FTP1O6Wf86WnfqLTi+TXeoPlQNizMPfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:28:e3:e4:cb:03:f7:8f:12:23:3d:38:e0:e3:ef:b0:17:33:15:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
        Validity
            Not Before: Apr 15 12:14:02 2024 GMT
            Not After : Apr 16 16:17:02 2024 GMT
        Subject: CN=D60A7EE9A4185DF60175B686D7E9B86EF56A7F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:aa:47:88:11:37:2d:f6:c4:cf:b4:9d:7b:
                    f6:3c:ab:ae:a1:86:86:c8:e1:a2:55:df:f4:8d:22:
                    30:76:2d:7b:cb:59:f1:30:55:16:a3:a2:13:7b:85:
                    fd:87:81:81:64:b2:e5:9a:9f:d3:68:61:8a:ee:a2:
                    ac:79:d9:92:49:92:08:f1:dc:cd:88:2c:5e:94:53:
                    a8:76:d2:69:f7:95:11:10:eb:fa:8f:30:7a:f5:b6:
                    20:1b:da:a4:24:24:c1:23:7f:25:3c:fc:38:b7:8c:
                    eb:b1:92:29:a1:40:3c:72:6a:0c:73:1c:c2:85:a6:
                    8f:bb:33:62:5b:36:7b:28:28:7d:62:73:65:f7:23:
                    4b:37:8d:e8:0c:ff:2c:5c:35:bd:3a:88:35:34:4e:
                    82:cd:d7:45:35:3a:64:ad:e1:80:80:1d:57:fd:fb:
                    35:1d:91:08:9f:d2:3c:a7:d1:e5:2f:6d:40:3d:bb:
                    b1:ec:97:a7:c6:65:eb:02:a7:bc:ca:75:e1:5e:5b:
                    b0:d9:c2:32:7d:74:33:99:16:96:56:ab:2e:cf:b1:
                    49:8d:06:82:6f:0a:16:d3:2d:81:d7:ac:2d:9c:2d:
                    d3:24:fd:95:7c:c5:06:b5:94:0a:cb:6e:2b:45:fe:
                    7b:ca:8a:10:cc:fe:bb:d9:80:12:0e:bc:cc:0e:c5:
                    d7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0A:7E:E9:A4:18:5D:F6:01:75:B6:86:D7:E9:B8:6E:F5:6A:7F:27
            X509v3 Authority Key Identifier:
                keyid:F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:c4:ea:98:47:aa:7d:6a:33:cd:7f:9b:2f:be:82:f2:7b:
         29:e0:73:65:0d:e0:2f:bd:c9:7b:22:ea:6c:1b:80:cf:6d:4e:
         56:76:3f:fb:99:14:36:d6:cb:10:db:29:7a:69:e8:81:93:24:
         44:10:c5:bd:ac:4d:92:4c:ec:c0:89:31:49:b5:e6:12:e9:a4:
         3a:e3:05:db:3c:55:5c:fe:70:8d:61:df:bb:76:49:46:3e:02:
         3e:de:dc:c7:48:af:fb:b7:0f:1b:64:06:00:09:77:96:a9:4e:
         29:24:bb:de:63:50:c1:73:5e:d3:bf:1d:c6:20:26:6b:b0:33:
         71:67:12:c5:95:4d:4b:46:15:fb:be:d2:55:dd:b2:e2:44:2d:
         67:47:c0:05:9e:bb:20:35:88:0f:81:0b:bd:1a:59:f3:61:1d:
         ee:12:51:be:21:e6:c6:21:72:22:1c:c3:72:38:97:3b:bc:3b:
         80:ed:f1:11:a1:17:9b:2f:b7:be:97:53:7f:09:90:a4:a8:3c:
         73:72:bb:0d:25:8b:57:42:64:af:ce:27:00:5b:61:17:e5:c2:
         00:7d:c1:10:41:a7:ca:5d:ab:8c:b4:cc:71:a6:75:b4:c2:d5:
         84:85:1b:3d:b3:f2:5a:c7:4a:2b:b3:45:9f:5d:2d:19:f8:bd:
         07:c8:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:11 2024 by rpki-client on console.sobornost.net