Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.mft
File:                     514A8DDF85E26D45A530C92F183967F8EA1F56A9.mft (raw, json)
Hash identifier:          MWqylSNY6RJ7E2fprvcKA3Urq3JSD4lBqhYLaavvZqc=
Subject key identifier:   C6:DA:DD:7A:02:BE:20:B5:9B:A2:DD:29:10:5E:27:EF:A4:DC:F1:24
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       23F2BB95B599392152FDC30D28F4A456B8D4081A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.mft
Manifest number:          042D
Signing time:             Sun 14 Apr 2024 20:30:00 +0000
Manifest this update:     Sun 14 Apr 2024 20:25:00 +0000
Manifest next update:     Mon 15 Apr 2024 23:04:00 +0000
Files and hashes:         1: 514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl (hash: q+FM8WOPVGqyo10XxrhdCWKysG0qLDa6o/r4Y7pI1/g=)
                          2: 3138362e3233352e3138392e302f32342d3234203d3e203631383838.roa (hash: sU/wAdp7bPlnrOcrElpoSkFMs6OqdRgCG26hmp9Hgqc=)
                          3: 323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (hash: wizmmMEUOQeWqOHz2QMebdnFrQ2DzEgRDUcrv6TmWAE=)
                          4: 323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa (hash: naJ/mcCHCidOzZiTmwII91/6G7WrG+djk1r11woYMXI=)
                          5: 3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa (hash: X44XLr3Hbld4l6WKHUHejBHCHUTb/zdErN4FQJKJalk=)
                          6: 323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (hash: TlB62qJndvIbjaCV/F1ccdXi8wg+2A0sr2AGxnua1ec=)
                          7: 323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (hash: tHnENrzJstwJOZ0nNLY7rSyR43PHBPr0BSqBViJSYoY=)
                          8: 323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (hash: bW8m1AwEKd0YLZneoMcOk85VF++D0HI796dwHKLJ8DQ=)
                          9: 323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa (hash: VeeKaBvA7ivf3qeuD3V/+to29fJ94Run9iU2Drliv7Y=)
                          10: 3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa (hash: OdlVXVKszjo2U07mIqon7jh0f5nP75jKQ3cfKJUlnzE=)
                          11: 323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (hash: R3z9Qz5sxyCKdmhnfHTlqsuoROH01Ief+iIQNtc4F/s=)
                          12: 323830343a6536303a3a2f33322d3333203d3e203631383838.roa (hash: ggG0TsiDBfTuKG8XK9TlFnBZ42c6xmvc62oVSo33Hd8=)
                          13: 3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (hash: HY+RqDkddYGx9CgM1e5TctBiCz2gptuc1JiDMVYEO00=)
                          14: 323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa (hash: ss38c4y/kNYigkLpRw9D0btJqBYnY/TmbJDJE1AUVy8=)
                          15: 323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (hash: lrHQSOkCuPArbtxh/6En8JPIvr9sowIB9E5vnA9r8s0=)
                          16: 323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa (hash: QelVK70Ab2/t8pt0KUCWWyx+vCHs6o/h1wwHhja96hk=)
                          17: 3138362e3233352e3138382e302f32332d3233203d3e203631383838.roa (hash: 45GqFkNxiJbVNKuKJvJW8xifmvwk2wxXi3r580bW00A=)
                          18: 323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa (hash: bLk6W3VrxjCmtzYkntY2vGhEBJMVUVhcD22mrjFSFiQ=)
                          19: 3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (hash: pG8N6hRS4re8+eUnt25rZ7Wp2ur8Xd0cneZwuxRRjY0=)
                          20: 323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa (hash: opDDgfKiRqg5pWpXZdBK1WOcOjULZqXjdui6fzvfdAU=)
                          21: 3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa (hash: FZy3wHCCQ59sJQmZBiY8Mk0WLyebiDj6UHoJ38v/cEM=)
                          22: 3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa (hash: jIN0eNNs5odNEimP/Axj31Fw8lBuiDhKNzXQlHcri8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:bb:95:b5:99:39:21:52:fd:c3:0d:28:f4:a4:56:b8:d4:08:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Apr 14 20:25:00 2024 GMT
            Not After : Apr 15 23:04:00 2024 GMT
        Subject: CN=C6DADD7A02BE20B59BA2DD29105E27EFA4DCF124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:72:67:41:ff:07:e3:a3:f6:79:91:74:d5:
                    99:16:88:52:1d:89:27:97:97:0d:38:16:1b:6f:a6:
                    80:95:d7:96:ce:f7:30:a6:90:ec:ad:62:72:5d:e5:
                    7f:8b:a4:07:75:32:50:0d:1b:67:37:f1:1e:46:ca:
                    d9:ea:87:e7:bc:50:b2:e4:29:5a:4a:85:9b:51:95:
                    7a:53:a6:ba:ea:98:0d:19:ab:4d:90:9c:71:f3:41:
                    ea:b8:0c:17:15:04:98:27:0d:53:9b:2e:cd:d4:7e:
                    15:75:aa:78:b5:ed:5d:b2:2a:51:fe:b9:53:33:14:
                    a4:a7:72:f6:be:85:10:1b:67:99:d7:db:fd:27:9c:
                    60:d2:f8:e7:60:2f:a3:84:b9:0b:f3:2e:f7:e0:b0:
                    9d:33:c9:51:fe:ed:47:8a:e7:43:6c:92:45:34:5c:
                    3a:67:4c:ae:98:08:f9:6b:a4:ed:3d:1d:c7:0b:dd:
                    16:e6:bf:d3:3e:c8:55:ca:91:8a:52:a3:95:9c:f9:
                    6c:35:f7:7f:e8:d6:e5:e8:01:99:49:86:a9:b6:31:
                    5a:4d:d4:dd:fa:12:ef:1b:7d:5c:35:29:fd:99:ed:
                    f2:1e:50:b9:98:ab:47:93:4b:f4:48:79:31:d4:c8:
                    2f:fa:7a:2c:62:d6:53:de:0f:3e:fa:ce:e0:58:2e:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:DD:7A:02:BE:20:B5:9B:A2:DD:29:10:5E:27:EF:A4:DC:F1:24
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fa:5e:06:9d:64:20:38:24:16:6a:55:96:7f:b9:f4:ee:06:
         26:08:29:34:fc:01:4b:14:6d:d3:49:7d:15:a0:d7:b3:78:32:
         5f:35:24:b3:83:d1:19:31:60:e5:a8:8d:66:df:45:3a:0b:0d:
         64:15:29:02:8a:3c:a5:07:fc:4c:10:78:a8:2d:3e:35:38:0d:
         0a:9e:e2:ef:c3:82:ff:92:3c:8f:dd:6b:87:d2:c4:f7:a7:9c:
         c2:18:0b:64:7e:72:c0:5c:54:0d:a2:c4:03:5d:90:70:e1:23:
         1e:ce:d8:fd:2a:ed:a3:04:54:c2:06:bf:f8:03:ba:8a:5e:a8:
         91:d2:e0:e6:b9:f8:9d:1d:8d:fc:fa:8b:dc:f1:85:d0:f2:ae:
         8d:b7:24:ad:7d:60:9b:d2:94:39:c4:5f:bb:54:50:fc:00:dc:
         e8:2c:30:e5:83:e2:dc:b7:05:02:58:08:90:bc:c1:6d:1f:eb:
         c8:30:68:69:8a:59:38:04:b9:32:83:cc:90:b9:ea:b9:ae:1d:
         43:50:90:4d:17:99:d8:2d:08:5f:f3:5c:a0:43:cf:e4:d1:33:
         ba:9b:a2:91:50:b6:30:38:13:28:2c:c3:95:45:56:fa:9e:08:
         08:2a:ee:e2:d2:c2:2f:20:75:47:88:5f:e0:3e:7a:98:5f:a4:
         d8:53:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org