Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FAD060B681700883DEA75A965DB40A9089054213.mft
File:                     FAD060B681700883DEA75A965DB40A9089054213.mft (raw, json)
Hash identifier:          BSmhe2/zDb28GZwS9m6jxEWe1B19/d2+O4WY0LizqNE=
Subject key identifier:   F2:1C:C4:97:55:94:BE:4A:C4:56:11:97:20:B9:6A:90:13:0B:DB:B8
Authority key identifier: FA:D0:60:B6:81:70:08:83:DE:A7:5A:96:5D:B4:0A:90:89:05:42:13
Certificate issuer:       /CN=FAD060B681700883DEA75A965DB40A9089054213
Certificate serial:       5B3A6DB269185E885A7FE7CA5C27785648B31D19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAD060B681700883DEA75A965DB40A9089054213.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FAD060B681700883DEA75A965DB40A9089054213.mft
Manifest number:          02
Signing time:             Sat 20 Apr 2024 01:54:58 +0000
Manifest this update:     Sat 20 Apr 2024 01:49:58 +0000
Manifest next update:     Sun 21 Apr 2024 02:53:58 +0000
Files and hashes:         1: 3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (hash: 6PHackpHvu4ksT70LfD2Kr2bvE356GWnVdtzIFMkbaE=)
                          2: FAD060B681700883DEA75A965DB40A9089054213.crl (hash: k3XrKoKmaJuL/7E/fGzsdJNUojePg95Crvl5aURY0XY=)
                          3: 323830343a366663303a3a2f33322d3438203d3e20323730363832.roa (hash: g8FaxAbmBLWm4HPbaaOeqwjMLKmft+fIIe+jDn/Ewuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3a:6d:b2:69:18:5e:88:5a:7f:e7:ca:5c:27:78:56:48:b3:1d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD060B681700883DEA75A965DB40A9089054213
        Validity
            Not Before: Apr 20 01:49:58 2024 GMT
            Not After : Apr 21 02:53:58 2024 GMT
        Subject: CN=F21CC4975594BE4AC456119720B96A90130BDBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:d4:94:db:dc:2f:c8:42:a8:39:33:44:39:
                    13:ed:ba:06:ba:ff:2a:b2:44:45:bc:59:17:0c:68:
                    a2:5d:31:d9:42:0d:e3:ab:b8:47:51:12:4c:04:db:
                    bb:50:5b:81:ba:e3:d4:cb:66:69:2e:f3:c0:4b:2e:
                    4b:d6:58:5f:94:b4:69:21:68:88:a2:f6:dd:d8:d1:
                    27:ec:89:47:d3:a9:94:f0:c6:c4:22:b0:f3:cf:7d:
                    7c:29:32:f5:a5:fb:63:0b:6d:e0:6c:88:f3:c0:c1:
                    ad:a4:cb:e7:0f:1d:89:0d:f6:6b:7d:b8:6b:89:5d:
                    11:90:39:14:a5:31:ed:39:da:21:eb:f9:24:79:9b:
                    9e:e1:7a:dd:f8:59:e4:eb:4a:33:f7:52:0d:35:f1:
                    0c:28:6f:8e:9b:69:4d:3e:65:2b:16:6d:1e:a4:b4:
                    7d:0e:5f:6c:f3:59:48:83:11:30:bd:33:c7:7c:d4:
                    78:66:53:d4:2b:32:b8:53:06:cb:92:4e:f6:3a:d5:
                    a3:ef:12:a5:e2:f1:04:9a:4d:ad:05:67:c5:bc:9c:
                    8c:5b:99:29:e2:03:1c:09:9e:9a:a8:80:d1:a6:8b:
                    51:14:34:dd:e2:5d:a1:f6:bf:4c:2e:49:c2:8d:b9:
                    36:a8:6b:b6:22:43:3f:01:46:77:2e:55:3d:7b:20:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:C4:97:55:94:BE:4A:C4:56:11:97:20:B9:6A:90:13:0B:DB:B8
            X509v3 Authority Key Identifier:
                keyid:FA:D0:60:B6:81:70:08:83:DE:A7:5A:96:5D:B4:0A:90:89:05:42:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FAD060B681700883DEA75A965DB40A9089054213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAD060B681700883DEA75A965DB40A9089054213.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FAD060B681700883DEA75A965DB40A9089054213.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:4e:a2:40:4d:fe:7d:bb:00:5c:03:44:7f:c4:30:db:e9:
         96:51:0d:a3:7b:79:79:6e:a6:6b:31:4e:6e:83:5d:13:b0:82:
         53:c8:52:20:eb:7a:4b:f9:28:85:d2:31:93:eb:88:b0:35:65:
         bd:ef:c8:1c:72:bf:fa:89:f6:b3:03:b3:e2:a3:20:65:34:eb:
         6a:5f:48:35:66:ab:42:6b:ab:61:a0:2a:d2:ac:8f:f5:f6:e7:
         d7:26:81:49:68:61:37:66:21:41:bc:b2:fc:ec:58:9f:e1:f1:
         56:f1:ba:fd:3b:2c:c7:2f:08:1d:9c:5d:20:9d:25:34:3b:b8:
         f8:e8:21:88:fc:55:f6:30:16:3d:5a:7f:52:e7:b9:a8:35:f9:
         b7:96:e1:0e:0c:23:a0:b6:3f:70:a9:b0:5c:84:d1:6e:b5:95:
         58:02:24:3e:ba:f8:1b:61:41:51:9e:f0:37:f2:f8:4c:c3:d8:
         2b:fc:0d:e8:1d:a2:bf:ca:48:c2:0b:a5:4e:60:75:fb:35:de:
         f9:e9:83:73:15:e9:2f:b0:c1:ff:2f:ae:a5:f1:35:43:72:70:
         cc:d4:f0:cd:c1:08:96:15:78:58:9e:51:e5:f9:e2:57:c6:de:
         cd:bb:30:17:6f:72:3a:83:a9:c7:25:10:98:9b:0f:1f:fb:0b:
         53:cb:1a:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWzptsmkYXohaf+fKXCd4VkizHRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFEMDYwQjY4MTcwMDg4M0RFQTc1QTk2NURCNDBBOTA4
OTA1NDIxMzAeFw0yNDA0MjAwMTQ5NThaFw0yNDA0MjEwMjUzNThaMDMxMTAvBgNV
BAMTKEYyMUNDNDk3NTU5NEJFNEFDNDU2MTE5NzIwQjk2QTkwMTMwQkRCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwONSU29wvyEKoOTNEORPtuga6
/yqyREW8WRcMaKJdMdlCDeOruEdREkwE27tQW4G649TLZmku88BLLkvWWF+UtGkh
aIii9t3Y0SfsiUfTqZTwxsQisPPPfXwpMvWl+2MLbeBsiPPAwa2ky+cPHYkN9mt9
uGuJXRGQORSlMe052iHr+SR5m57het34WeTrSjP3Ug018Qwob46baU0+ZSsWbR6k
tH0OX2zzWUiDETC9M8d81HhmU9QrMrhTBsuSTvY61aPvEqXi8QSaTa0FZ8W8nIxb
mSniAxwJnpqogNGmi1EUNN3iXaH2v0wuScKNuTaoa7YiQz8BRncuVT17IGM5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8hzEl1WUvkrEVhGXILlqkBML27gwHwYDVR0j
BBgwFoAU+tBgtoFwCIPep1qWXbQKkIkFQhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVvZWY4b05RclRDTERGTnZHdVRQWTlzcVh4SzlYWGJINEJtd0FrMTFl
N2IvMS9GQUQwNjBCNjgxNzAwODgzREVBNzVBOTY1REI0MEE5MDg5MDU0MjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRDA2MEI2ODE3MDA4ODNE
RUE3NUE5NjVEQjQwQTkwODkwNTQyMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXVvZWY4b05RclRDTERGTnZHdVRQWTlzcVh4SzlYWGJINEJtd0FrMTFlN2IvMS9G
QUQwNjBCNjgxNzAwODgzREVBNzVBOTY1REI0MEE5MDg5MDU0MjEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbpdOokBN/n27AFwDRH/EMNvpllENo3t5eW6mazFOboNdE7CCU8hSIOt6S/ko
hdIxk+uIsDVlve/IHHK/+on2swOz4qMgZTTral9INWarQmurYaAq0qyP9fbn1yaB
SWhhN2YhQbyy/OxYn+HxVvG6/Tssxy8IHZxdIJ0lNDu4+OghiPxV9jAWPVp/Uue5
qDX5t5bhDgwjoLY/cKmwXITRbrWVWAIkPrr4G2FBUZ7wN/L4TMPYK/wN6B2iv8pI
wgulTmB1+zXe+emDcxXpL7DB/y+upfE1Q3JwzNTwzcEIlhV4WJ5R5fniV8bezbsw
F29yOoOpxyUQmJsPH/sLU8saMg==
-----END CERTIFICATE-----
Generated at Sun May 11 04:36:05 2025 by rpki-client