Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.mft
File:                     CF33C03D5A866AA5996EE873A3F6B035911CFAF4.mft (raw, json)
Hash identifier:          A7pDs1wip3Eg5IlV7vAmLK7/Muk8KWJevCPsc6pkuyo=
Subject key identifier:   66:E4:4C:AF:76:EC:07:EB:56:43:C0:BF:DD:39:D9:01:8D:68:CB:AF
Authority key identifier: CF:33:C0:3D:5A:86:6A:A5:99:6E:E8:73:A3:F6:B0:35:91:1C:FA:F4
Certificate issuer:       /CN=CF33C03D5A866AA5996EE873A3F6B035911CFAF4
Certificate serial:       5539C3EF0A15CD38F91C64A378E5576A1A76919A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.mft
Manifest number:          85
Signing time:             Mon 15 Apr 2024 03:32:00 +0000
Manifest this update:     Mon 15 Apr 2024 03:27:00 +0000
Manifest next update:     Tue 16 Apr 2024 04:07:00 +0000
Files and hashes:         1: 3138362e3139342e3137322e302f32322d3332203d3e20323730373636.roa (hash: Sdr2dB3eZw2Ob7WULwi1DNvXKiImSk8P6W+Jny4bs88=)
                          2: CF33C03D5A866AA5996EE873A3F6B035911CFAF4.crl (hash: gACBArVV5TYnFJ8GRLtgVWdb2H1ktYUARW1PLLo2CbU=)
                          3: 323830343a373131383a3a2f33322d313238203d3e20323730373636.roa (hash: N4Icyew9yjZUDf7W1AX6SHZ9pZW2gpauGDW7wSTkhsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:39:c3:ef:0a:15:cd:38:f9:1c:64:a3:78:e5:57:6a:1a:76:91:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF33C03D5A866AA5996EE873A3F6B035911CFAF4
        Validity
            Not Before: Apr 15 03:27:00 2024 GMT
            Not After : Apr 16 04:07:00 2024 GMT
        Subject: CN=66E44CAF76EC07EB5643C0BFDD39D9018D68CBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:cd:64:7f:db:87:37:ae:ef:78:e0:37:30:
                    42:3b:e5:e0:6f:42:41:0c:bb:a4:d3:ae:a8:d3:2f:
                    df:4d:cc:f6:df:d8:9e:08:be:12:9d:1c:86:e5:98:
                    2d:ac:ab:3d:99:f0:d3:a8:65:98:ad:15:9b:8d:34:
                    31:78:39:50:81:74:c5:91:11:35:9f:79:68:27:0c:
                    0e:74:2f:be:35:cc:33:0f:35:ae:02:fe:8b:e3:b9:
                    7f:c3:dd:f5:61:c2:4c:49:05:84:10:2e:7d:fd:03:
                    e0:82:a8:f5:38:ad:e1:79:d9:29:bb:5f:d9:32:ac:
                    0b:b0:13:40:41:5a:1b:30:2d:87:49:45:8c:83:bc:
                    ac:e3:e0:ab:5e:3f:9d:55:30:20:2a:04:51:c4:f7:
                    54:ca:d3:b8:f4:6f:f4:f7:9b:51:67:08:f0:14:fe:
                    37:0b:9d:49:91:16:22:e2:b8:9a:95:61:3d:5d:e8:
                    e5:bb:7d:49:fa:f7:e1:63:68:88:0b:7d:c4:be:14:
                    59:ea:11:af:87:01:ad:3a:74:be:d8:0f:5e:09:32:
                    bc:73:b5:0c:ac:1e:d0:20:ef:70:a0:71:5d:8d:8f:
                    9c:cc:87:e9:96:ce:01:a2:6f:2d:27:0d:96:52:89:
                    5b:3f:92:6c:dd:b0:5d:3a:22:c8:76:a3:08:0c:d0:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:4C:AF:76:EC:07:EB:56:43:C0:BF:DD:39:D9:01:8D:68:CB:AF
            X509v3 Authority Key Identifier:
                keyid:CF:33:C0:3D:5A:86:6A:A5:99:6E:E8:73:A3:F6:B0:35:91:1C:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/CF33C03D5A866AA5996EE873A3F6B035911CFAF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:00:c0:7d:0d:29:1e:a4:e3:24:fd:c0:44:c2:e2:39:0a:
         49:37:ca:27:4c:cf:dd:bf:91:f6:2b:38:31:21:fa:7b:51:d6:
         1a:dd:11:51:8f:f0:74:f3:1e:cc:d4:84:10:42:a0:2a:8f:78:
         78:59:34:6d:e2:d7:23:72:15:36:44:36:35:64:0a:7e:1d:a8:
         00:70:e2:c2:f4:5b:ee:d3:bb:20:3d:02:0e:de:87:90:72:41:
         fe:90:0c:80:a7:33:69:bb:9b:1d:22:e0:32:b5:65:65:b7:a8:
         96:f8:17:d1:1d:37:d5:f0:32:c9:c9:60:7d:d3:cb:e1:a0:84:
         42:e9:2f:36:93:7a:14:cd:00:ba:b1:a7:89:e3:b1:69:3f:45:
         34:8f:16:a1:d4:4d:a4:12:f8:3e:83:15:8b:c2:aa:b9:1f:d5:
         43:7f:85:9c:3d:d8:78:37:99:7a:81:69:d6:40:a9:cf:66:53:
         c5:31:3c:6a:cf:a4:db:50:31:d4:25:84:f9:60:11:90:f5:3a:
         7e:dd:8f:b2:93:c5:ad:97:ef:54:6a:37:f2:57:83:17:d2:4a:
         e1:1d:c6:0f:55:c2:bb:58:d0:8d:66:4d:ad:88:31:0d:f2:fd:
         43:83:94:18:7e:1c:13:aa:9f:1e:03:70:51:68:72:a1:b9:ee:
         74:85:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org