Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.mft
File:                     AA5F634140D8367E44489AD2BAB915D8FD28B8E0.mft (raw, json)
Hash identifier:          VElNi73c3L3E5ThV7Nbym0OAW4UVb8c5DknyKXWTZM4=
Subject key identifier:   26:40:46:5C:03:49:87:F3:CE:B6:1E:68:4D:B3:74:4B:EB:9E:DE:20
Authority key identifier: AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0
Certificate issuer:       /CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
Certificate serial:       6E4F5787E8DA730D1C2DE24DFA13E44CAD2F2619
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.mft
Manifest number:          29
Signing time:             Mon 15 Apr 2024 04:25:02 +0000
Manifest this update:     Mon 15 Apr 2024 04:20:02 +0000
Manifest next update:     Tue 16 Apr 2024 05:10:02 +0000
Files and hashes:         1: AA5F634140D8367E44489AD2BAB915D8FD28B8E0.crl (hash: Tqh7MSV9Mt/DL8TskunuNw9DD2J3cG6GO5T/rUh+itw=)
                          2: 3137372e37312e33322e302f32302d3234203d3e203533303232.roa (hash: pDDqLuBaNDRtmHZO8MaMSq2l3KmHmEb/a6upDc4J8Sg=)
                          3: 323830343a333166633a3a2f33322d3438203d3e203533303232.roa (hash: lt6K1KbLE6+wxxWwDtWtUevHS6rop8XMuZP7W+a4k9I=)
                          4: 3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa (hash: 2QeiSSKoz/4OJShAR2C/ehW9LNLZOqU9hpJEyS+Gmrk=)
                          5: 3137302e3233312e38342e302f32322d3234203d3e203533303232.roa (hash: lkqjC2h/MBnErHEcTEfaq3wdSX4FNsLeG/Vak4vBw8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:57:87:e8:da:73:0d:1c:2d:e2:4d:fa:13:e4:4c:ad:2f:26:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5F634140D8367E44489AD2BAB915D8FD28B8E0
        Validity
            Not Before: Apr 15 04:20:02 2024 GMT
            Not After : Apr 16 05:10:02 2024 GMT
        Subject: CN=2640465C034987F3CEB61E684DB3744BEB9EDE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:45:6d:24:cc:d0:4f:2d:93:0a:38:cd:0f:
                    d4:60:94:e2:53:0f:b9:a5:cb:ad:56:43:91:45:ec:
                    1a:e7:8b:3e:f3:37:22:02:ef:c4:09:7f:04:d3:aa:
                    b3:c7:d3:67:2e:3c:e2:57:6f:b5:da:6a:13:29:7c:
                    6b:ab:80:ed:3e:92:97:af:55:55:f5:8a:28:74:11:
                    36:13:05:71:ff:ed:fc:84:2f:ff:24:c0:0c:3a:c7:
                    31:52:43:b8:13:52:0f:1f:c4:ca:f5:fb:54:d6:04:
                    b6:95:ea:08:a5:0c:27:62:d1:a0:cd:07:16:1c:40:
                    34:ed:e3:c1:6b:4c:b5:05:c2:fa:5f:b3:6a:5a:d1:
                    29:6b:98:bf:c2:4c:89:22:5e:44:4b:3c:39:ce:8b:
                    b5:7a:a2:97:9e:4d:cb:58:e9:89:41:31:5e:89:d3:
                    70:3a:45:81:25:7c:65:a1:ee:18:87:eb:47:fb:fc:
                    17:e3:96:64:13:9b:a3:20:46:09:c5:f4:9d:4f:bd:
                    15:2c:c2:ed:27:b2:f6:ed:b9:6c:08:f3:af:e1:3e:
                    2f:d3:99:c6:42:a3:85:f6:f0:76:c8:4f:fa:c4:2e:
                    be:4e:fd:6d:60:9e:45:ab:cd:14:a9:ec:68:0e:6e:
                    54:ff:69:2b:19:e0:ec:6e:f9:72:4e:5d:3e:c4:5b:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:46:5C:03:49:87:F3:CE:B6:1E:68:4D:B3:74:4B:EB:9E:DE:20
            X509v3 Authority Key Identifier:
                keyid:AA:5F:63:41:40:D8:36:7E:44:48:9A:D2:BA:B9:15:D8:FD:28:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/0/AA5F634140D8367E44489AD2BAB915D8FD28B8E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:68:03:5e:38:9a:29:82:54:87:7c:e1:a3:34:50:90:13:
         82:2c:0d:72:0c:db:18:ee:b6:a7:0f:a8:b8:c5:cd:b6:59:30:
         6a:b1:bb:da:f5:14:0d:f6:4a:62:3e:d6:43:04:cb:2f:e9:7c:
         c4:a3:c2:e1:a3:67:11:43:11:af:e6:66:59:2a:69:24:2a:da:
         c6:69:e2:96:eb:15:62:36:e6:06:b3:84:a8:82:36:25:0d:0c:
         ae:85:0c:6d:20:65:52:3b:5c:42:70:20:73:fa:b1:a1:4a:65:
         0a:c6:3c:4e:3e:fb:70:06:05:f7:e0:ae:e0:c1:77:f3:7a:d1:
         e3:ca:a1:ee:35:db:81:45:f0:77:62:94:e7:c8:c1:db:b2:dd:
         9f:bd:12:2a:8b:7b:8c:08:54:ca:ba:a6:2c:c6:7d:8c:fd:75:
         6c:12:ea:0a:35:f4:b8:d3:69:19:c9:ac:c4:1e:8d:8d:71:c2:
         96:13:47:59:6b:19:52:21:bf:a5:a0:94:d0:cc:83:4e:90:f3:
         9f:b0:23:bc:3a:da:41:2f:2a:a8:3e:a6:40:81:ba:1c:2d:1c:
         ee:18:8d:79:00:3d:c8:b2:2e:76:68:2b:ce:8e:c8:9b:0c:35:
         cf:9a:02:03:66:b5:e8:7e:6d:21:ca:f7:51:9a:b5:4e:43:68:
         df:20:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org