Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.mft
File:                     8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.mft (raw, json)
Hash identifier:          IgGuznC6IAJg87ZmQ7WIjP/52ylbCeiRiQD3SNv4OFQ=
Subject key identifier:   DD:3F:22:B8:7B:DF:A0:42:5A:B9:A8:28:B9:2C:5E:44:7D:35:F7:A6
Authority key identifier: 8C:A6:EB:3C:7D:A6:39:0F:45:D1:21:FB:13:DB:C8:FC:33:00:A1:23
Certificate issuer:       /CN=8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123
Certificate serial:       32B42A3B505B62ED52FFA4BE3154B28DAFA15378
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.mft
Manifest number:          D7
Signing time:             Mon 15 Apr 2024 03:47:38 +0000
Manifest this update:     Mon 15 Apr 2024 03:42:38 +0000
Manifest next update:     Tue 16 Apr 2024 05:33:38 +0000
Files and hashes:         1: 8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.crl (hash: rznLDJLL7pQDAVylu25w4ezXJohgJb/qXyXdmALFFY8=)
                          2: 323830343a383661383a3a2f33322d3332203d3e20323732363538.roa (hash: 1i4j/SLZwQRSbyP5KxuEMd+FDGLuazdNfZ9+y7pgqzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b4:2a:3b:50:5b:62:ed:52:ff:a4:be:31:54:b2:8d:af:a1:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123
        Validity
            Not Before: Apr 15 03:42:38 2024 GMT
            Not After : Apr 16 05:33:38 2024 GMT
        Subject: CN=DD3F22B87BDFA0425AB9A828B92C5E447D35F7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d1:bc:d7:78:11:ba:f7:78:dd:de:f4:e0:42:
                    69:ba:54:ba:d1:31:4b:cf:ab:c6:6d:d9:38:f5:4e:
                    e2:90:14:1d:7c:c9:9c:55:b0:bc:a6:13:43:d3:26:
                    a3:32:45:e2:a7:dd:b5:b0:a4:05:24:d2:a8:63:ae:
                    e9:ae:12:1c:23:6d:ee:d7:d3:f2:28:06:b0:cf:3f:
                    2c:5d:58:b2:e0:0d:f9:d4:27:6b:4d:32:23:e7:b1:
                    8c:a5:fd:0b:9e:9e:f7:6b:3a:c8:75:8a:ba:8d:d0:
                    be:e6:75:63:06:b9:01:ec:d9:11:54:b8:89:4f:40:
                    20:c0:d8:91:c1:b0:43:1a:d0:65:03:da:82:b6:0e:
                    9a:f8:80:75:01:a5:d5:94:3a:f4:b1:0c:41:15:f2:
                    3f:e9:c8:e5:c9:fd:a9:96:f5:04:23:ef:59:b0:06:
                    73:6a:1c:8a:52:1b:f1:f8:73:bd:da:5f:df:70:0f:
                    64:c8:27:4c:3a:a7:1c:38:2d:98:e7:4c:82:c2:fe:
                    ba:4e:36:d8:43:f1:3d:13:b1:a8:15:51:8e:81:16:
                    db:07:76:0d:bd:b7:9d:14:0b:04:c9:84:48:47:ae:
                    4f:da:05:fd:64:94:d8:ea:58:d7:8e:35:f3:57:04:
                    b1:89:46:42:80:ef:d8:a1:92:3a:b9:60:56:97:f8:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:22:B8:7B:DF:A0:42:5A:B9:A8:28:B9:2C:5E:44:7D:35:F7:A6
            X509v3 Authority Key Identifier:
                keyid:8C:A6:EB:3C:7D:A6:39:0F:45:D1:21:FB:13:DB:C8:FC:33:00:A1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/0/8CA6EB3C7DA6390F45D121FB13DBC8FC3300A123.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ed:34:94:6b:f0:a6:57:ea:3d:11:ff:61:b5:15:f6:d1:0b:
         ba:13:4e:78:03:b2:f8:00:c4:56:54:26:3e:86:cb:0a:9b:86:
         b3:6c:fd:54:ab:60:c9:ce:71:e2:a5:dc:43:63:c7:87:35:58:
         aa:36:a0:fa:87:41:4c:59:93:3b:26:03:60:56:7b:dc:1b:d3:
         11:dd:56:23:98:a0:28:2a:94:6c:b5:43:73:53:48:62:25:a2:
         87:23:20:5c:15:df:27:c0:98:81:98:0b:2c:5b:fd:3a:ad:33:
         df:57:0a:fa:05:c4:9a:32:1c:65:b4:3a:7f:90:b0:2a:77:d8:
         b8:f3:ea:9c:9b:72:20:85:fe:0c:ea:f2:b3:71:0a:89:1b:b9:
         13:ee:0a:ef:39:cb:2d:db:5c:74:3b:4f:b1:c3:99:68:91:ab:
         88:bb:8d:44:fb:c9:f1:67:b5:e4:cb:41:72:73:b1:b5:5a:2a:
         cc:85:f3:aa:68:4a:af:5b:a9:e3:04:f4:3b:f0:27:6a:a9:5b:
         b7:66:9e:0d:29:e5:37:95:e8:df:71:cf:59:23:93:6b:d1:ee:
         6a:c8:b2:72:7c:e6:f3:b5:7b:ad:89:1f:64:68:6c:c7:65:80:
         57:17:96:8b:89:29:c3:15:20:8e:3a:c9:88:fe:6d:0b:38:e3:
         f9:0f:a7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org