Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.mft
File:                     965D526D55CF1330C0467770A5A4FAB58CB79FEC.mft (raw, json)
Hash identifier:          1fz1DOqFeHzEDoC/ICXs1vBawlAzLrdh5ZUN0CN44tE=
Subject key identifier:   90:B0:28:B0:F4:59:2B:70:35:F5:61:EE:05:D3:29:93:B2:8E:FA:53
Authority key identifier: 96:5D:52:6D:55:CF:13:30:C0:46:77:70:A5:A4:FA:B5:8C:B7:9F:EC
Certificate issuer:       /CN=965D526D55CF1330C0467770A5A4FAB58CB79FEC
Certificate serial:       2FEB1CC96D931A7088A6F54858A77684DAF2B086
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.mft
Manifest number:          23
Signing time:             Mon 15 Apr 2024 01:31:06 +0000
Manifest this update:     Mon 15 Apr 2024 01:26:06 +0000
Manifest next update:     Tue 16 Apr 2024 01:54:06 +0000
Files and hashes:         1: 34352e3138332e3137362e302f32332d3233203d3e20323731363039.roa (hash: LeHEwgS6R7RcpbJryXplMGmyQBU+BnEgS7KnDtPN+V4=)
                          2: 34352e3138332e3137372e302f32342d3234203d3e20323731363039.roa (hash: Rgeo1DbuEDHcIcXTkjeQfMuATDKdaqfZoOD7rH/gIR4=)
                          3: 965D526D55CF1330C0467770A5A4FAB58CB79FEC.crl (hash: ozSu8dW+MvzxJpKklDW+WtZJ5/yEZC9SOdTUUxmvDDk=)
                          4: 323830343a376533343a383030303a3a2f33332d3333203d3e20323731363039.roa (hash: JOQq8Fsz19UFMGg/r5PrQ5A8XqP9o/xeTOgtlW9d4kw=)
                          5: 323830343a376533343a3a2f33332d3333203d3e20323731363039.roa (hash: VaWUzdkvAYVEH60SIx33gTYoZTppSGtmx3g+o4PGLX8=)
                          6: 323830343a376533343a3a2f33322d3332203d3e20323731363039.roa (hash: 49wPCsqrQUC1LJxr7v696fyYgCVTfEi/Gi/5XjWjaUI=)
                          7: 34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa (hash: 9UZM9yHneP6I15llN40zlRiAIZYpMxTwODabXz8LEno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:1c:c9:6d:93:1a:70:88:a6:f5:48:58:a7:76:84:da:f2:b0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965D526D55CF1330C0467770A5A4FAB58CB79FEC
        Validity
            Not Before: Apr 15 01:26:06 2024 GMT
            Not After : Apr 16 01:54:06 2024 GMT
        Subject: CN=90B028B0F4592B7035F561EE05D32993B28EFA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:b7:fa:c3:cb:83:90:cc:e3:3f:1b:28:9d:
                    29:9e:65:52:29:0a:c7:13:4f:9c:a5:a3:08:1f:36:
                    63:dc:24:66:9f:b9:f2:09:4f:5d:20:ff:d5:f6:78:
                    da:49:91:c0:cd:a1:65:75:99:8a:00:db:9c:03:6d:
                    ba:9e:89:d7:20:77:9d:2e:3d:03:c0:b4:b8:cb:4f:
                    81:c9:33:06:58:55:f4:e4:b2:dd:38:f9:56:22:69:
                    34:78:17:00:82:f8:c0:e5:b8:bf:16:81:28:ad:31:
                    e8:bf:d6:33:e5:66:7c:ab:3b:ed:1d:99:c4:0d:72:
                    a1:e2:b9:0f:99:29:f4:a7:f4:88:94:35:45:19:49:
                    6c:d8:5e:9d:e6:db:d9:b3:fa:9f:91:5f:e9:75:40:
                    8f:cf:6a:cc:94:17:d1:fb:e0:33:67:2b:68:8f:f5:
                    83:2f:30:e8:6a:75:42:5d:d9:ab:44:db:e4:ca:57:
                    a7:11:0b:41:12:8c:b7:dd:3b:08:d6:67:fd:99:a5:
                    11:aa:70:ff:30:e9:c7:2b:f6:94:54:ad:f7:9a:cb:
                    30:0e:93:44:d4:32:8e:c5:d6:24:30:59:39:81:1a:
                    24:14:33:f1:06:40:84:91:a7:b6:d3:fe:d5:df:55:
                    03:37:7c:e0:d5:4a:c5:56:2c:8e:3f:fb:76:b9:34:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:28:B0:F4:59:2B:70:35:F5:61:EE:05:D3:29:93:B2:8E:FA:53
            X509v3 Authority Key Identifier:
                keyid:96:5D:52:6D:55:CF:13:30:C0:46:77:70:A5:A4:FA:B5:8C:B7:9F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:07:47:49:20:3c:39:d8:5b:e8:c2:d7:27:b4:a6:5d:7a:7f:
         15:fa:bc:8a:5a:f7:f3:2b:83:e6:5d:6e:a6:55:e6:35:b9:53:
         38:62:6f:5a:62:5d:83:b9:c6:09:b0:5b:d6:7a:03:3d:d5:4e:
         b0:60:b9:57:82:b3:21:85:ff:ad:04:94:7d:24:d9:50:26:08:
         2c:04:5e:00:98:17:19:17:71:3b:a4:3f:af:70:d0:d1:9e:d4:
         01:a1:5b:be:04:0e:a3:77:7f:65:a8:c6:a6:bd:37:a0:be:30:
         b1:cf:c8:9b:20:b8:ef:71:fd:28:bc:d3:bb:6f:66:99:96:4f:
         a6:90:85:88:db:25:29:42:d9:de:d6:17:f7:3c:b3:d0:93:bb:
         ea:24:2d:ae:73:84:09:a7:32:d6:9d:1c:4a:d3:59:05:a2:da:
         d2:ed:c1:da:34:41:85:e6:4a:3d:77:0c:07:e3:8b:04:74:98:
         6b:da:4f:89:a9:e7:29:7b:8d:5b:35:b9:c1:c2:c0:2f:a4:dc:
         d7:32:e2:d9:39:25:1e:9b:34:9d:f6:70:d0:cb:3f:af:78:d8:
         ee:41:1d:76:2c:71:2c:6f:6c:bf:09:dc:05:27:cc:da:4d:e3:
         1d:02:68:0a:a6:6d:e8:1e:70:99:55:d3:6d:88:25:29:86:eb:
         ef:22:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org