Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.mft
File:                     D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.mft (raw, json)
Hash identifier:          Hag56mRfD9QhXAb88ckOkDxdsXRdYU2sX/tIKRwIiUw=
Subject key identifier:   E4:49:2F:D2:9B:FE:E3:29:63:11:FA:E8:EC:32:C9:25:37:07:8E:CA
Authority key identifier: D2:E1:35:A5:99:F2:7C:CA:4F:F8:80:7C:1B:A4:7D:B8:B9:C2:7F:3B
Certificate issuer:       /CN=D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B
Certificate serial:       11C6A9D5331A14138C0C59AB61BA65C1045B2614
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.mft
Manifest number:          4E
Signing time:             Wed 03 Jan 2024 17:10:40 +0000
Manifest this update:     Wed 03 Jan 2024 17:05:40 +0000
Manifest next update:     Thu 04 Jan 2024 17:20:40 +0000
Files and hashes:         1: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: 8szHq80+CRTKKu9HilSCoSfjoS2IrvbvXqy85E+y2+0=)
                          2: D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.crl (hash: t+fj8Y/qGG0T2VA+OlUsEmxA3Tv3wLH5hlKSy4a1350=)
                          3: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: v1ckOJXHWDeMq0gps5tLkD6XOYj4dERqpbXh+AfCC3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c6:a9:d5:33:1a:14:13:8c:0c:59:ab:61:ba:65:c1:04:5b:26:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B
        Validity
            Not Before: Jan  3 17:05:40 2024 GMT
            Not After : Jan  4 17:20:40 2024 GMT
        Subject: CN=E4492FD29BFEE3296311FAE8EC32C92537078ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:03:3a:c7:b1:65:eb:6a:e6:05:d3:24:dc:
                    79:08:cf:75:f8:f0:bb:64:02:f3:be:f7:92:18:7b:
                    c6:df:20:8b:2a:cb:6b:ce:c5:96:83:b8:02:40:8b:
                    e9:19:0e:3d:8d:19:91:f0:95:09:aa:36:13:34:16:
                    0b:70:78:53:10:a1:31:7b:53:49:39:c5:94:d3:41:
                    7b:12:eb:5d:47:55:ac:ad:2c:23:9e:b8:23:61:fe:
                    96:28:87:98:be:9d:d7:53:30:b7:86:07:92:1b:cf:
                    cf:6e:51:25:a0:df:b2:8d:8c:90:66:c1:d5:50:b8:
                    7e:e5:ab:b9:26:5d:38:e3:e8:ef:bf:de:6b:e8:65:
                    7e:dc:7f:87:ae:ee:9e:b8:c6:28:ba:19:ac:35:68:
                    c5:9d:9a:4b:a7:78:60:32:20:4d:1d:62:9f:54:fa:
                    3e:8a:19:21:f9:3a:36:a2:ba:11:c3:e0:21:6e:83:
                    ba:7e:c3:a0:05:b7:5f:b9:82:fc:ac:80:12:6f:30:
                    cf:36:18:52:bf:bb:e2:95:a7:1e:4c:b3:86:c8:8d:
                    60:92:fd:fb:5a:7d:f9:eb:3e:87:cc:b7:f8:8a:18:
                    6e:12:7a:bc:b7:85:de:52:43:9e:10:18:15:f8:ef:
                    da:81:a7:22:09:37:cd:d6:17:2a:fe:00:85:02:63:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:2F:D2:9B:FE:E3:29:63:11:FA:E8:EC:32:C9:25:37:07:8E:CA
            X509v3 Authority Key Identifier:
                keyid:D2:E1:35:A5:99:F2:7C:CA:4F:F8:80:7C:1B:A4:7D:B8:B9:C2:7F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:cc:4e:a6:20:aa:d3:9f:82:e4:96:be:41:e5:fc:7d:bc:78:
         51:fd:b9:ef:90:9d:4a:a7:35:71:c2:49:0c:93:a6:7b:6f:dc:
         31:5c:ab:1e:54:16:f9:b7:87:ce:9d:22:31:a1:6a:6a:43:f4:
         1f:a4:ab:fd:96:5f:53:b4:ee:88:dc:4b:54:e0:ac:49:6f:54:
         6e:02:18:55:c4:0c:3d:a1:3c:da:12:b6:09:a2:0b:37:7a:33:
         72:e6:25:45:f7:98:af:12:47:ad:88:1f:03:19:2c:ef:d7:76:
         8a:62:c8:dc:88:28:d5:a8:77:2d:80:4e:dd:00:fc:bc:97:ac:
         68:6c:4b:f0:68:3e:79:da:89:39:62:5b:91:09:a0:ac:a1:40:
         ad:67:6a:39:cb:13:86:ee:ad:42:97:f8:2d:b2:58:0d:aa:1f:
         7e:f1:f3:3e:45:99:ad:ad:b6:54:f5:1c:76:62:10:e8:bd:a2:
         26:26:cc:c6:3d:f2:30:0f:2b:45:aa:a9:33:84:4c:a1:aa:1e:
         fa:e2:c5:07:87:85:b2:5b:59:7d:fb:b5:27:98:e1:d4:35:cd:
         2d:b4:2d:15:6b:ea:a0:5d:23:2b:35:90:80:4c:fa:bc:0e:73:
         f1:29:8c:36:95:1a:b3:83:35:bd:76:1e:08:c5:46:c6:0d:a1:
         12:f3:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org