Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.mft
File:                     9799B170CE0588DDA475C42D0FB5765AB69AB649.mft (raw, json)
Hash identifier:          cTYekveUdwcVlE6lBySRp0MB3GFTae5C+ve+6Ko0j+0=
Subject key identifier:   62:8F:B3:7E:69:57:7F:69:73:F6:BF:4A:D8:5F:60:72:98:DF:0C:66
Authority key identifier: 97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
Certificate issuer:       /CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
Certificate serial:       4CDFE5E8F35FC69E143EE0420EECB30C1D3C5913
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.mft
Manifest number:          021E
Signing time:             Mon 15 Apr 2024 09:40:04 +0000
Manifest this update:     Mon 15 Apr 2024 09:35:04 +0000
Manifest next update:     Tue 16 Apr 2024 11:27:04 +0000
Files and hashes:         1: 34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (hash: 8iTk/dBuv5IjypomF92sZeMFBaDgMc+mSAES8WRYR8s=)
                          2: 323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (hash: jKoe1LHgq2hwWoFR7gZWw6vZCcZJxa8Tms7Z3MAA3iU=)
                          3: 9799B170CE0588DDA475C42D0FB5765AB69AB649.crl (hash: ksJDfJiaS182bRif9dDdUX/TVk3XZGpudCrD/LjK6N0=)
                          4: 34352e3137392e3139302e302f32342d3234203d3e20323639313935.roa (hash: DY4KC/OPL5T2SAdNUdEeNTCcy0rF409OxeFXaeadDh0=)
                          5: 34352e3137392e3139312e302f32342d3234203d3e20323639313935.roa (hash: mL1LzK3Q+aQb3hRqUdw8SNfpvfF7XJZBoB9xYpNw1NY=)
                          6: 34352e3137392e3138382e302f32342d3234203d3e20323639313935.roa (hash: ISB1/SV0KuS0TycMBnHzYsYNGK9v3UAQHAZb3oIePFE=)
                          7: 34352e3137392e3138382e302f32332d3233203d3e20323639313935.roa (hash: z8L79EF/1TJLeSxK0b/uR0bQj30LqsFUSMK9Xe23HsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:df:e5:e8:f3:5f:c6:9e:14:3e:e0:42:0e:ec:b3:0c:1d:3c:59:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
        Validity
            Not Before: Apr 15 09:35:04 2024 GMT
            Not After : Apr 16 11:27:04 2024 GMT
        Subject: CN=628FB37E69577F6973F6BF4AD85F607298DF0C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9d:a4:69:47:c4:d0:cf:a3:6e:33:64:f3:bb:
                    53:aa:82:34:2d:7e:c4:ff:b4:b3:61:95:15:98:12:
                    4f:6f:e2:0f:5f:87:99:a8:30:78:e1:38:7e:b6:66:
                    4a:7b:62:1b:45:c8:94:e9:25:29:00:4c:57:0b:76:
                    c9:d6:a5:2d:37:3c:a8:68:0d:74:b7:f5:a9:a2:a0:
                    4e:49:de:b5:ac:73:67:96:47:b8:7a:5d:f0:94:4c:
                    d6:4c:e1:5f:65:92:04:32:f6:57:cb:26:47:75:d3:
                    e5:54:56:f0:a2:1c:58:4d:5c:95:19:22:51:68:20:
                    86:81:cb:d8:6d:58:47:5a:c3:48:6c:f5:5e:ed:df:
                    68:14:c8:1a:a9:c5:66:a4:82:35:45:80:8d:94:4e:
                    78:25:a5:06:8a:c5:b7:3b:34:85:65:56:2f:f3:c1:
                    95:3c:6b:2d:b7:49:69:72:e7:a9:11:86:27:1c:b6:
                    16:00:7c:8f:e5:7f:7e:f6:00:2f:af:91:73:a1:60:
                    dc:21:40:36:3e:e8:ed:6b:8c:ff:53:1d:78:a0:63:
                    77:bf:28:e1:9a:6d:2c:5c:27:e1:4e:fd:1b:e3:35:
                    54:47:a8:67:f7:4e:2c:59:66:cd:d9:9d:ea:65:35:
                    cb:51:16:39:ab:d0:0e:dd:08:28:07:67:75:59:d7:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:B3:7E:69:57:7F:69:73:F6:BF:4A:D8:5F:60:72:98:DF:0C:66
            X509v3 Authority Key Identifier:
                keyid:97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:64:e6:f1:d6:b3:be:ce:7d:9f:20:d6:ab:32:b8:3f:33:36:
         9d:ef:33:57:ae:86:c4:49:94:4f:d6:e8:fe:60:e5:35:d0:74:
         1b:a1:4d:3f:02:d5:62:53:d1:5d:65:8d:67:47:90:0c:39:76:
         16:32:b8:24:48:e8:56:86:83:b7:dd:60:0f:c0:5e:e5:c1:c5:
         f2:d4:33:fc:7a:bf:36:1d:34:ee:c1:f2:d5:42:45:0a:94:e7:
         e3:b7:13:a6:32:1b:89:54:50:a7:f1:b3:6a:ab:0a:d6:fe:6e:
         e0:52:56:dc:2e:ac:00:21:98:65:ac:ff:6d:15:12:82:46:f8:
         0a:38:f7:71:e9:c6:1e:4b:c8:c3:81:85:65:07:cb:62:aa:c7:
         42:66:eb:58:17:00:51:9f:c8:49:e9:8e:da:b4:cd:f6:96:12:
         a3:5b:a4:08:c3:2d:1b:8e:b0:64:3d:2c:65:b8:79:33:e2:58:
         64:4b:d2:8c:06:fd:90:20:4a:54:cb:99:1e:58:55:9a:0d:27:
         db:d4:06:71:d7:1b:12:34:a9:a3:9f:09:6c:2a:19:4b:02:76:
         e8:44:c6:35:3f:1c:95:9d:e0:23:eb:08:79:f7:b6:9a:08:45:
         04:27:08:4a:3e:6f:5c:44:cb:22:7f:af:4d:47:76:ea:db:46:
         b0:8f:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org