Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.mft
File:                     FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.mft (raw, json)
Hash identifier:          Se27nEBMEHTlxBb514rwyPSxa3cdhPxIH4oy8NCcaRM=
Subject key identifier:   59:1D:0D:84:2A:08:47:48:88:79:1D:D4:C3:49:F7:AD:0E:5A:BE:66
Authority key identifier: FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5
Certificate issuer:       /CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
Certificate serial:       44F586B7C20F9793DF4A5326199B770770297DBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.mft
Manifest number:          0464
Signing time:             Mon 15 Apr 2024 12:10:00 +0000
Manifest this update:     Mon 15 Apr 2024 12:05:00 +0000
Manifest next update:     Tue 16 Apr 2024 12:10:00 +0000
Files and hashes:         1: FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.crl (hash: +Mk4LLFm5p/vSQjhpUQhZQY4heP/ieKnKLcn+gA5ePM=)
                          2: 3230302e39352e3138302e302f32322d3234203d3e203631373732.roa (hash: rnQMv7lkw7tLoAQL7sFBRYf6Grb7b6weNEM14ehp2Jk=)
                          3: 323830343a313931303a3a2f33322d3438203d3e203631373732.roa (hash: YPsXL8l4RO+AXvb0/BTvSLNenniMgzsQhXJg5ix1908=)
                          4: 3133382e3235352e34342e302f32322d3234203d3e203631373732.roa (hash: 0/hMYjKOoarxWSsm65FyZCkbNdMHyRq1dLsfw61jQ3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:86:b7:c2:0f:97:93:df:4a:53:26:19:9b:77:07:70:29:7d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
        Validity
            Not Before: Apr 15 12:05:00 2024 GMT
            Not After : Apr 22 12:10:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:29:a8:3a:f4:01:01:8c:10:a9:98:2e:de:
                    80:32:2b:44:0c:1f:a6:73:34:e9:9b:8c:88:e2:68:
                    a5:29:3e:0d:50:5e:fb:ac:e7:9c:36:21:86:bb:11:
                    86:35:8b:f1:92:11:e4:de:fb:b5:fe:fa:39:7c:67:
                    ea:17:f5:d5:f8:72:c6:8d:ff:b8:82:1e:25:0f:12:
                    ef:4d:48:f9:69:c8:b2:b0:50:f5:ca:58:84:7d:fc:
                    5c:a8:ab:34:f8:82:e2:14:1b:fb:c5:41:6f:46:a3:
                    d3:8d:0c:9d:29:6c:93:44:e4:30:60:a2:09:00:26:
                    af:63:f3:db:62:93:12:cf:1f:fa:be:03:d9:51:72:
                    04:8f:64:5d:a5:22:92:a4:49:aa:7e:dd:d0:64:55:
                    34:61:7f:ef:2c:1a:0d:da:2f:cc:67:3c:de:02:42:
                    21:14:34:06:3b:8b:ea:f1:b4:33:d2:aa:ad:e9:f6:
                    c0:4d:a3:ee:93:e5:9f:f5:d9:c0:7f:43:e1:3f:88:
                    c4:00:d2:9b:2e:11:9a:16:92:ae:f0:8b:9f:28:fb:
                    27:f9:d5:ed:a4:19:ba:1a:6d:e3:7c:7d:71:8d:ab:
                    d8:36:2f:20:77:ee:b5:1f:bc:2f:2e:fb:f8:c4:aa:
                    aa:fc:39:47:cf:32:f2:2f:90:4d:48:80:ef:c2:35:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:0D:84:2A:08:47:48:88:79:1D:D4:C3:49:F7:AD:0E:5A:BE:66
            X509v3 Authority Key Identifier:
                keyid:FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:bd:93:09:e4:d6:c5:13:a8:cd:7d:df:dc:25:60:57:84:
         59:20:0f:37:71:fd:e9:74:47:d8:3d:4f:76:7d:71:d0:25:b6:
         30:f0:a1:03:1d:c8:c4:20:0c:12:20:d2:99:3a:e5:71:0d:4c:
         b0:79:52:aa:19:20:1a:cd:39:4b:4a:22:27:28:64:e8:de:53:
         d1:3e:f4:6d:83:5e:74:39:1f:e6:5c:a6:a4:6f:af:4d:13:33:
         af:18:1d:27:d3:92:44:cf:94:a8:db:1e:c2:1c:e9:f1:d7:a4:
         4e:7e:46:5b:36:7c:41:21:ba:e1:79:65:21:d7:0a:72:a3:ec:
         89:e9:47:0b:99:15:ae:3c:be:a7:9b:b1:12:c4:5a:b7:50:f8:
         1b:5c:6f:f9:86:5e:ce:3c:e4:fe:ec:ae:10:ab:20:8a:dc:1c:
         16:63:ec:22:78:9c:7e:b5:74:8c:bc:5a:84:aa:dd:cb:9e:8a:
         38:bb:26:a5:16:d4:ff:79:79:ce:21:35:eb:90:6c:d8:36:3f:
         eb:5d:0c:7b:70:21:40:3e:21:3e:b5:a1:b7:4c:60:40:fe:8c:
         df:69:99:59:cc:b2:1f:ee:01:00:3e:48:ab:f0:50:70:0d:6f:
         0b:d4:7a:f6:63:1b:d6:4f:07:3a:ba:1f:0a:85:92:9f:c0:ef:
         53:00:a3:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----