Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.mft
File:                     CAAC5082E3270948C4997CD8918CABFFD0682335.mft (raw, json)
Hash identifier:          adxLPKhkJrGkcHqWl+Em3hr7AYp1u5bY4H8eIbWoLzU=
Subject key identifier:   22:F8:A0:AC:A6:80:0E:8A:4D:16:21:B1:3F:28:58:62:D1:45:F4:74
Authority key identifier: CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
Certificate issuer:       /CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Certificate serial:       20842E3742A053B3D4D574C54A903322C56ED04B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.mft
Manifest number:          18
Signing time:             Mon 15 Apr 2024 06:37:38 +0000
Manifest this update:     Mon 15 Apr 2024 06:32:38 +0000
Manifest next update:     Tue 16 Apr 2024 09:41:38 +0000
Files and hashes:         1: 3133382e3131382e3235302e302f32342d3234203d3e20323634323639.roa (hash: ScF5m+GUppkQGD2WQA0zD2NXH/YHnrCVnyv54T0FbIA=)
                          2: 3133382e3131382e3234382e302f32332d3233203d3e20323634323639.roa (hash: 2vDUBGD/8ektldNTsF18Fe7f3sXJsTRJrThJg7mNips=)
                          3: 3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa (hash: ekOyaCRIntlu34O0/MopUG2M/gfG0TeEAsMa3yvXdLA=)
                          4: CAAC5082E3270948C4997CD8918CABFFD0682335.crl (hash: bwdnwYB2IUf5hGcWTlpU1oG+D1UJVjLVBRIXjE9r5+M=)
                          5: 3133382e3131382e3234392e302f32342d3234203d3e20323634323639.roa (hash: ci1wVEjj7Y8sgSCqxUKot0kiAS/GMeIpwdD5xS9zPOE=)
                          6: 3133382e3131382e3234382e302f32342d3234203d3e20323634323639.roa (hash: 2Cvt8bswpw5OfiKPgB9wi9LG+d7EpKTR6xpJUcPXsJk=)
                          7: 3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa (hash: uWC/KFkoBuoI6fSYBWqOQbSX1dhDPjcWNDfOGNVZ55M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:84:2e:37:42:a0:53:b3:d4:d5:74:c5:4a:90:33:22:c5:6e:d0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC5082E3270948C4997CD8918CABFFD0682335
        Validity
            Not Before: Apr 15 06:32:38 2024 GMT
            Not After : Apr 16 09:41:38 2024 GMT
        Subject: CN=22F8A0ACA6800E8A4D1621B13F285862D145F474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:f2:b4:92:87:7b:13:9b:8e:68:06:f0:58:
                    6e:df:e9:ff:b1:35:02:58:33:52:40:3d:1c:51:62:
                    68:f6:a0:98:8a:f6:09:cc:ff:7d:69:d7:85:49:02:
                    45:e4:d8:63:3f:97:97:ae:a4:02:ef:a7:56:df:d0:
                    8b:bf:9d:4b:c1:34:2c:af:30:79:69:39:84:c6:41:
                    f4:2b:82:ff:fc:04:fa:e2:ce:7f:4a:69:4f:a3:4b:
                    3a:2b:bf:45:5c:db:6a:65:6f:fa:26:08:5c:d5:bc:
                    e6:74:b6:a5:c4:40:3e:80:4f:56:dd:2f:75:a9:27:
                    d4:d9:76:fd:5d:b7:b8:c1:b2:d3:42:fe:3a:85:ab:
                    65:be:64:3e:83:8c:1e:85:74:b0:50:4c:a8:f5:4f:
                    5b:95:51:8e:02:b7:95:26:90:da:a9:99:d0:87:d7:
                    59:7d:64:00:9f:fa:a6:22:d5:a5:a0:ce:07:bd:cd:
                    69:87:20:60:8c:e5:71:98:47:f4:cf:13:20:e6:50:
                    fd:09:be:94:30:28:65:91:f3:72:99:16:46:34:ef:
                    51:25:f1:3b:75:e5:2d:13:d3:1b:9c:ad:50:e4:58:
                    1e:4c:00:f4:32:af:c9:b5:36:ff:e2:6b:4a:4f:fc:
                    4f:aa:77:ea:d5:6d:61:ab:47:1b:96:31:05:7a:6b:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:A0:AC:A6:80:0E:8A:4D:16:21:B1:3F:28:58:62:D1:45:F4:74
            X509v3 Authority Key Identifier:
                keyid:CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:14:2d:5f:33:d9:84:8d:5b:7b:e9:78:79:e4:9f:2b:a2:2e:
         7d:32:94:c4:87:ad:09:32:74:c7:6f:31:62:c0:53:2a:5e:16:
         b7:be:c6:ba:7b:55:5c:b7:0c:bc:15:21:e7:bf:8a:fd:9c:05:
         d1:1c:c9:76:fe:7c:a1:09:da:18:38:7d:99:c0:4b:08:76:40:
         c6:08:1d:0f:4a:d3:cd:eb:15:6d:da:ee:ea:a5:86:ea:3d:f7:
         df:b5:e7:b3:2e:92:59:2e:6f:75:3d:41:0b:b2:93:e5:f4:1c:
         38:81:7e:90:5d:4e:dc:bc:2f:30:b2:4b:4b:3d:3d:75:38:63:
         89:af:6e:67:a3:e4:45:16:43:d2:c6:2c:7f:82:35:09:0b:07:
         41:b9:8d:9a:c4:f4:f6:4b:d3:60:90:31:4e:68:3b:8f:bf:c2:
         ba:21:ef:aa:a9:c2:af:1a:8c:fe:84:8c:30:c9:c8:73:58:e9:
         74:53:ec:9f:67:e9:a9:ef:e0:c6:e1:6d:0e:26:21:1a:51:7f:
         94:c1:36:5b:05:c7:88:11:c3:e5:a8:2c:82:6a:42:df:d3:68:
         87:9c:6b:b9:fa:13:5d:08:93:e3:21:a4:b2:9f:f5:72:fe:4d:
         cc:46:8d:a9:9b:22:07:3b:6e:1a:ff:e9:1f:32:a4:a0:f6:f0:
         d7:c5:cc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org